Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: huntsman on January 02, 2005, 05:56:05 AM

Title: duplicate "clean" messages
Post by: huntsman on January 02, 2005, 05:56:05 AM
Since installing Avast 4.5.549 I'm seeing 2 messages attached to the bottom of incoming emails. Not a major drama, just adds to the info overload!!   Have I set it up incorrectly?

 
---
avast! Antivirus: Inbound message clean.
Virus Database (VPS): 0453-1, 31/12/2004
Tested on: 2/01/2005 2:38:48 PM
avast! is copyright (c) 2000-2003 ALWIL Software.
http://www.avast.com
 
 
 
 
 
---
avast! Antivirus: Inbound message clean.
Virus Database (VPS): 0453-1, 31/12/2004
Tested on: 2/01/2005 2:38:48 PM
avast! is copyright (c) 2000-2003 ALWIL Software.
http://www.avast.com
 
 
  :-\
Title: Re:duplicate "clean" messages
Post by: Eddy on January 02, 2005, 06:07:05 AM
What OS?
How is your mail setup?
What are the settings in Avast?
Using any other mail (related) applications?
Title: Re:duplicate "clean" messages
Post by: huntsman on January 02, 2005, 08:53:22 AM
XP Pro
IncrediMail which was OK till 549 was loaded.
Ticked the "clean" message boxes in POP & SMTP. Unticked the IMAP function.
No other mail apps running. Use Mozilla Firefox, but dont see how it could be involved.
I'll redo the Avast setup functions again & see how it goes.
Title: Re:duplicate "clean" messages
Post by: Lisandro on January 02, 2005, 01:28:58 PM
Double POP3 scanning could due to avast4.ini file settings:

AutoRedirect=1
IgnoreLocalhost=1
PopRedirectPort=110
SmtpRedirectPort=25
ImapRedirectPort=143

Specificaly if you wanted to disabled port 110 and scan POP3 on 1123, for instance, change the line

IgnoreLocalhost=0
PopRedirectPort=1123

On the other hand, when you would setup all your mail clients as if avast! is not installed, you wouldn't get a double scan. Your connections would be scanned just when they leave you PC - that is the communication between the email program and the POP3 server on the internet.
Title: Re:duplicate "clean" messages
Post by: Vlk on January 02, 2005, 03:03:56 PM
Are you using any sort of antispam software?
Title: Re:duplicate "clean" messages
Post by: huntsman on January 03, 2005, 01:33:23 AM
Vlk, Good lead. Thks.
I loaded AnalogX antispam "SDefender" at the same time.
I recall it said it was blocking several script extensions. Odd, it's supposed to give a warning if it blocks. It didn't!
I've uninstalled it.
 
AH me, you try to stop all the junk & something breaks.   ???
Title: Re:duplicate "clean" messages
Post by: Dgc on January 03, 2005, 05:16:55 PM
Happy New Year... Greetings,

I too have been having a simular problem.  But this is on all outgoing email.  It is now up to 5x's repeating the message.
(so to eliminate the problem, I no longer mark the box to put the message on outgoing messages.) :-\
However, I liked advertising you guys but 5xs seems a little too much.
I have looked at the Avast.ini, but I can't see what would making this repeat 5x's.

I am only checking 2 pop3 accounts (local ISP & Gmail) and using the local ISP smtp account to send all outgoing messages.

Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0 Thunderbird/1.0

... And ZoneAlarm Free, but with Anti-virus check and safe email turned off.  

This seemed to happen after the December upgrade.

Got any Ideas???  THKS Dennis ???
Title: Re:duplicate "clean" messages
Post by: Eddy on January 03, 2005, 06:22:22 PM
Any spamfilter or other mail related aaplication/util installed besides the email client?
Title: Re:duplicate "clean" messages
Post by: Dgc on January 03, 2005, 07:04:22 PM
No.. Only Zonealarm (with email protectiion turned off)...
 ???
Dennis
Title: Re:duplicate "clean" messages
Post by: Eddy on January 03, 2005, 07:15:19 PM
What are the settings in avast4.ini under the [mailscanner] section?
Title: Re:duplicate "clean" messages
Post by: Dgc on January 03, 2005, 07:29:55 PM
[MailScanner]
DefaultPopServer=m1.521.telia.com
DefaultSmtpServer=mail1.telia.com
ShowTrayIcon=1
UseDefaultSmtp=0
AutoSetProtection=1
PopListen=127.0.0.1:110
SmtpListen=127.0.0.1:25
ImapListen=127.0.0.1:143
StartPop=1
StartSmtp=1
StartImap=1

.....
Title: Re:duplicate "clean" messages
Post by: Eddy on January 03, 2005, 07:37:44 PM
UseDefaultSmtp   0
If you have just more than one SMTP server = 0; Just one: 1

Does it make any difference if you change that?
If not, change it back ofocurse.

Technical has a lot of info about the settings
http://forum.avast.com/index.php?board=2;action=display;threadid=1647;start=msg10267#msg10267 (http://forum.avast.com/index.php?board=2;action=display;threadid=1647;start=msg10267#msg10267)


Perhaps setting the mailscanner section to default and setup the mail as you would do from scratch will solve it.
Just thinking out loud here, so don't take my word for it.
Title: Re:duplicate "clean" messages
Post by: Dgc on January 03, 2005, 07:41:38 PM
Thanks will try and get aback to you... :)
Title: Re:duplicate "clean" messages
Post by: Dgc on January 03, 2005, 08:07:58 PM
Well, part way there... I only get 2 "Clean Messages" instead of 5...  ;)   JUST A THOUGHT... Could it be since it is checking 2 email accounts, that AVAST it puts 2 messages on outgoing messages?  Just thinking out loud...  

Dennis  ???
Title: Re:duplicate "clean" messages
Post by: Eddy on January 03, 2005, 08:10:21 PM
To my knowledge that shouldn't make any difference. Theoraticly at least it could be possible if the mail is for some reason processed twice by Avast. But I think it is better if someone from Alwil answers this one.

At least we have solved part of it. :D
Title: Re:duplicate "clean" messages
Post by: lukor on January 03, 2005, 09:44:26 PM
What settings do you have in you mail client? POP3 and SMTP server names and ports, authentication ...

Thanks.
Lukas.
Title: Re:duplicate "clean" messages
Post by: Lisandro on January 04, 2005, 01:47:27 AM
Could it be since it is checking 2 email accounts, that AVAST it puts 2 messages on outgoing messages?  Just thinking out loud...  Dennis  ???

No way...
Dennis, do you have any POP3 Alert application, i.e., when you receive a mail it says 'You've got mail' or a similar thing?
Title: Re:duplicate "clean" messages
Post by: huntsman on January 04, 2005, 08:52:04 AM
Hi Technical,

Sorry to say,  I thought Vlk's suggestion and my action  regarding the use of Anti Spam Apps (AnalogX..SDefender) & it's removal as I had indicated previously, had fixed the problem. It hasn't fixed it.
The problem seems to be random/intermittant.

I use IncrediMail to collect all my Emails from Hotmail & GMail as well as 2 addresses from my ISP. I also use Yahoo, but I haven't received any in a while. My ISP messages seem to be the only ones which get the "Clean" message appended, twice! I've also noticed, none of the email messages from Hotmail or GMail have the scanned...clean message appended.
I also use the IncrediMail function to announce all incoming Emails.
I use default settings in Avast except:
 1. additional file scanning of extensions in the Standard Shield
 2. ticking the Clean message box in the POP & SMTP
 3. untick the IMAP function. (I don't use it)
 4. set heuristics to high
 5. Turned Outlook/Exchange OFF (I don't use them)
 6. Turned ON all the P2P & IM XP functions.

I've also re-entered the Control Panel setup of these several times, but it hasn't helped.

That's about it.
Is there more I can provide you to help with this problem?
I advise many pensioners and support them & their PC's. I'd like to resolve this if possible, in case there's a hole which would confuse some very old users or cause them to lose confidence in their AV..

 BTW..Thanks guys for the very quick fix of the 1 Jan Registration problem.  

 :)

Just checked an email fom Yahoo and it has 2 "clean" messages as well!


--------------------------------------------------------------------------------

avast! Antivirus: Inbound message clean.

Virus Database (VPS): 0451-2, 17/12/2004
Tested on: 18/12/2004 7:32:13 AM
avast! is copyright (c) 2000-2003 ALWIL Software.
 



--------------------------------------------------------------------------------

avast! Antivirus: Inbound message clean.

Virus Database (VPS): 0451-2, 17/12/2004
Tested on: 18/12/2004 7:32:13 AM
avast! is copyright (c) 2000-2003 ALWIL
 
Title: Re:duplicate "clean" messages
Post by: vojtech on January 04, 2005, 09:52:12 AM
Please insert the line
Log=20
to file C:\Program Files\ALWIL Software\Avast4\Data\avast4.ini under [MailScanner] for detailed logging.
Then send one mail (or retrive mail if incoming mail is the problem), which will generate the log file. After that, send me by mail the log file C:\Program Files\ALWIL Software\Avast4\Data\log\aswMaiSv.log. Thanks.
Title: Re:duplicate "clean" messages
Post by: Dgc on January 04, 2005, 10:32:54 AM
No way...
Dennis, do you have any POP3 Alert application, i.e., when you receive a mail it says 'You've got mail' or a similar thing?

Just the Pop3 Alert that comes with Thunderbird 1.0... No external program.
From what I gather is that it only notifies me after the messages are already downloaded into the email program (and has sorted the files according to my rules)...not before...  :-\  I can turn it off... if you think that will help...

Email is set as: Acct: 1 127.0.0.1:110  POP3 / 127.0.0.1:25 SMTP
Acct: 2 pop.gmail.com:995 (SSL) / 127.0.0.1:25 SMTP


Dennis
Title: Re:duplicate "clean" messages
Post by: Dgc on January 04, 2005, 11:19:04 AM
Well.. Well.. I think I found something out... Thunderbird gives you the option to send Email out in Either HTML or TEXT or Both.... Guess what?  I usually send out messages in DUAL format just in case people cant read HTML... SO.. After several tests... If I send a message in Both... you get 2 messages... Stupid me...  ::)
However, after I told TH to send only HTML email , it still sends out 2 messages ...
 
Here comes the log
Thanks for the help!  
Dennis
Title: Re:duplicate "clean" messages
Post by: Lisandro on January 04, 2005, 12:06:34 PM
If I send a message in Both... you get 2 messages...

Dennis, I'll take a look but when I send in 'both' I have only message added to Inbound and only one message added to Outbound mail.
It seems to be other thing which is causing the annoyance  :-\
Title: Re:duplicate "clean" messages
Post by: lukor on January 04, 2005, 12:45:14 PM
Hi Dennis,
it would be very helpfull to know the name of the process with PID 228 (if you have not already restarted since the time you generated the log file). It can be determined from the task manager, or you can download and run this command line utility http://www.sysinternals.com/files/pslist.zip (http://www.sysinternals.com/files/pslist.zip).

Run the Command Prompt window and the enter:
pslist >c:\processlist.txt

and then please send me the resulting file processlist.txt.

It will help us understand what is happening there.
Thanks a lot,
Lukas.
Title: Re:duplicate "clean" messages
Post by: Dgc on January 04, 2005, 08:29:21 PM
Hi Dennis,
it would be very helpfull to know the name of the process with PID 228 ...
Thanks a lot,
Lukas.

Hello, Lukas... Here you go...

THanks,
Dennis :-\
Title: Re:duplicate "clean" messages
Post by: Dgc on January 04, 2005, 08:32:39 PM
 ;) - Had a problem uploading to forum... fixed now...
Dennis
Title: Re: duplicate "clean" messages
Post by: lukor on January 04, 2005, 11:11:25 PM
Dennis, thanks for your logs. Unfortunately it doesn't make much sense to me now. Process with ID 228, the one which appears to send mails, is SERVICES.EXE. This process normaly hosts Event Log and Plug-n-Play services and I can hardly imagine the situation when these services would try to send mails.

Have you restarted the PC between the creation of avMaiSv.log and dennis_proccesslist.txt ? That would change the process IDs...

Lukas.
Title: Re: duplicate "clean" messages
Post by: Vlk on January 04, 2005, 11:16:25 PM
...hardly restarted since the system processes (including services.exe) show total uptime of more than 24 hours (in the log)... :-\
Title: Re: duplicate "clean" messages
Post by: Dgc on January 05, 2005, 03:48:06 AM
...
Have you restarted the PC between the creation of avMaiSv.log and dennis_proccesslist.txt ? That would change the process IDs...
Lukas.
Hello, Lukas... Not to my knowledge... As Vlk pointed out... my system has been running for  more than 24 hours... (according to the log) and from my knowledge that this baby stays on 24/7... only to reboot when my mouse driver decides to go south.
...
However, if I am the only one with this problem... And a easy resolve can not be found, I can live with the TURNED OFF messages...  Don't kill yourselves over this one... I like your product and I will be getting a new computer SOON (Thank you, my lovely wife!) So, I will have time to rebuild this one and see if it changes anything.
With such great support, it just makes me leaning toward purchasing the PRO version .
Happy New Year and Thanks for ALL your help  :)
Dennis
Title: Re: duplicate "clean" messages
Post by: lukor on January 05, 2005, 10:45:16 AM
As it seems to me this must be some kind of strange problem interrelated with ZoneAlarm. Will still trying to reproduce it here.

Anyway you might try to configure mail accounts directly (without the 127.0.0.1:25 trick). Setup your pop3 and smtp directly to mail1.telia.com (or whatever), it might help. Also disabling the autoredirect feature (in avast4.ini, section [MailScanner], AutoRedirect=0) will help (it this case you must leave the 127.0.0.1 in your accounts). But you'll loose some of the functionality (such as protection of other mail clients besides you primary Thunderbird).

L.