Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: mantra on September 15, 2003, 10:19:57 AM

Title: BUG in resident shield
Post by: mantra on September 15, 2003, 10:19:57 AM
SOMETIMES AVAST resident shield DOESN'T check the ole files like docs..

here is the report
*
* avast! Report
* This file is generated automatically
*
* Task 'Mantra' used
* Started on Monday, September 15, 2003 10:13:22 AM
*

C:\Programmi\Microsoft Office\Office\WINWORD.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\ParseDls.exe
C:\WINDOWS\NOTEPAD.EXE

my setting is SCAN OLE DOCUMENTS
I use w98se
and avast resident shield give me this problem often but not every time!!!!!
so sometime AVAST miss to scan for example doc file

i use only a resident task(i edit only one) and i run only 1
but sometime it missed to scan doc files...!!!!!!
Title: Re:BUG in resident shield
Post by: mantra on September 15, 2003, 10:22:11 AM
for sure for the report
i clicked on a doc and i read/open it!!!!!!!!!!!!!!
Title: Re:BUG in resident shield
Post by: mantra on September 15, 2003, 10:46:46 AM
try to open the same file doc then reboot and so on
after some reboot avast miss , doesn't check the file
Title: Re:BUG in resident shield
Post by: Vlk on September 15, 2003, 10:58:26 AM
avast tries to minimize the number of checks - i.e. if you open the same file (without modifications) 10 times, it will only scan once.

Can't this be the case?
Title: Re:BUG in resident shield
Post by: mantra on September 15, 2003, 12:37:10 PM
maybe
after a reboot tooo???

but avast checkes winword but not *.dot & *.doc



by the way , u know u are  a nice guy in your last pic??
Title: Re:BUG in resident shield
Post by: mantra on September 15, 2003, 12:41:36 PM
" Can't this be the case? "


nope !!!
i tried to open other doc other files and avast did not check them!!!
Title: Re:BUG in resident shield
Post by: igor on September 15, 2003, 02:46:30 PM
What is your exact setting of the Standard Shield (appart from the fact that the "Scan OLE documents on open" is on - i.e. how about Scanning files on open, Created/modified files, ...)?

What version of avast! do you use - build 260?

Can you give us a full path of a missed file (an example)?
Title: Re:BUG in resident shield
Post by: mantra on September 15, 2003, 05:36:04 PM
scanner (basic)
everything is checked
scan diskette boot
scan ole
scan executable....every.

advanced
checked
scan file on open  HT*
always scan WSH is on
the others switch are not checked

EXCLUSION : NOT SETTING! AVAST should check every path or files!!

Avast sometimes missed to check the ole documents
if i reboot w98se some time avast miss to check ole documents,every documents!!

avast built 260!
Title: Re:BUG in resident shield
Post by: igor on September 15, 2003, 05:44:52 PM
OK, thanks.
Can you give me an example of the OLE document (I mean the filename) that was missed?

Btw, why are you mentioning the reboot? Do you mean that sometimes, when you reboot, avast! works OK (no matter how many times you try, no document is missed, everything works OK, as long as Windows are running) and on another reboot, the documents are missed (or even all of them?) - until you reboot again?
Title: Re:BUG in resident shield
Post by: mantra on September 15, 2003, 07:33:27 PM
Istituzioni di Diritto Privato.doc
DirComun.doc
example

"Btw, why are you mentioning the reboot? Do you mean that sometimes, when you reboot, avast! works OK (no matter how many times you try, no document is missed, everything works OK, as long as Windows are running) and on another reboot, the documents are missed (or even all of them?) - until you reboot again?"

yes right!
for example while i'm typing i try to open a doc file and avast missed it
if now i reboot and try to open a doc file avast will check it!!!!
strange i know ...
Title: Re:BUG in resident shield
Post by: mantra on September 15, 2003, 07:46:17 PM
IGOR LOOK HERE :

after a reboot i tried to open docs..but avast checked winword but not doc!

*
* avast! Report
* This file is generated automatically
*
* Task 'Mantra' used
* Started on Monday, September 15, 2003 2:06:22 PM
*

C:\WINDOWS\RUNDLL32.EXE
C:\WINDOWS\SYSTEM\rnaapp.exe
C:\WINDOWS\SYSTEM\tapisrv.exe
C:\Programmi\Microsoft Office\Office\WINWORD.EXE
C:\WINDOWS\Application Data\Microsoft\Modelli\Normal.dot
C:\PROGRAMMI\MICROSOFT OFFICE\OFFICE\STARTUP\dgnwnlc.dot
C:\WINDOWS\Desktop\Istituzioni di Diritto Privato.doc
C:\WINDOWS\SYSTEM\ParseDls.exe
C:\Programmi\Alwil Software\Avast4\ASHAVAST.EXE
C:\Programmi\File comuni\AVP Shared Files\avpupd.exe
C:\Programmi\Opera\Opera.exe
C:\Programmi\File comuni\AVP Shared Files\avpupd.exe
C:\Programmi\miranda\miranda32.exe
C:\Programmi\Alwil Software\Avast4\ENGLISH\ENHANCED.HTM
C:\Programmi\Alwil Software\Avast4\DATA\Skin\blue panel.asws
C:\Programmi\Alwil Software\Avast4\DATA\Skin\low res.asws
C:\Programmi\Alwil Software\Avast4\DATA\Skin\shadow fist.asws
C:\Programmi\Alwil Software\Avast4\DATA\Skin\teak zeppelin.asws
C:\Programmi\Outlook Express\MSIMN.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\Programmi\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\CLQZO56N\jus.unitn[1].htm
C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\CLQZO56N\jus.unitn[1].htm
C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\25A5KP2F\global_var[1].js
C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\25A5KP2F\global_var[1].js
C:\WINDOWS\TEMP\aswB022.TMP
C:\WINDOWS\TEMP\Script_0004f90f.html
C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\216PS50J\function_top[1].js
C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\216PS50J\function_top[1].js
C:\WINDOWS\TEMP\aswB033.TMP
C:\WINDOWS\TEMP\Script_0004fd72.html
C:\WINDOWS\TEMP\Script_0004fd82.html
C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\MXULMVA5\header[1].js
C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\MXULMVA5\header[1].js
C:\WINDOWS\TEMP\aswB044.TMP
C:\WINDOWS\TEMP\Script_000501a8.html
C:\WINDOWS\TEMP\Script_000501b2.html
C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\25A5KP2F\subheader[1].js
C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\25A5KP2F\subheader[1].js
C:\WINDOWS\TEMP\aswB054.TMP
C:\WINDOWS\TEMP\Script_0005055b.html
C:\WINDOWS\TEMP\Script_0005056c.html
C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\216PS50J\supfooter[1].js
C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\216PS50J\supfooter[1].js
C:\WINDOWS\TEMP\aswB065.TMP
C:\WINDOWS\TEMP\Script_00050a50.html
C:\WINDOWS\TEMP\Script_00050a5d.html
C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\7PDHZZOD\footer[1].js
C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\7PDHZZOD\footer[1].js
C:\WINDOWS\TEMP\aswB072.TMP
C:\WINDOWS\TEMP\Script_00050c15.html
C:\WINDOWS\TEMP\Script_00050c27.html
C:\WINDOWS\TEMP\aswB076.TMP
C:\WINDOWS\TEMP\Script_00050e58.html
C:\WINDOWS\TEMP\Script_00050e64.html
C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\H4UAIM7C\Main[1].html
C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\4LA7CXQB\Main[1].html
C:\WINDOWS\TEMP\aswB0D0.TMP
C:\WINDOWS\TEMP\Script_00052281.html
C:\WINDOWS\TEMP\aswB103.TMP
C:\WINDOWS\TEMP\Script_00052fe2.html
C:\WINDOWS\TEMP\Script_00052fee.html
C:\WINDOWS\TEMP\aswB105.TMP
C:\WINDOWS\TEMP\Script_000530e5.html
C:\WINDOWS\TEMP\Script_000530f0.html
C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\CLQZO56N\Picturep[1].html
C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\CLQZO56N\Picturep[1].html
C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\CLQZO56N\index9[36].html
C:\WINDOWS\TEMP\aswB304.TMP
C:\WINDOWS\TEMP\Script_0005adab.html
C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\CLQZO56N\Picturep[1].html
C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\CLQZO56N\index9[37].html
C:\WINDOWS\TEMP\aswC0B3.TMP
C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\CLQZO56N\Picturep[1].html
C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\UK0UOTD2\index9[28].html
C:\WINDOWS\TEMP\aswD063.TMP
C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\CLQZO56N\Picturep[1].html
C:\Programmi\Opera\Cache4\opr007IY.htm
C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\4LA7CXQB\index9[26].html
C:\WINDOWS\TEMP\aswE2D2.TMP
C:\Programmi\Babylon\babylon.exe
C:\PROGRAMMI\BABYLON\utils\shlhook.exe
C:\Programmi\Microsoft Office\Office\WINWORD.EXE
C:\WINDOWS\Application Data\Microsoft\Modelli\Normal.dot
C:\PROGRAMMI\MICROSOFT OFFICE\OFFICE\STARTUP\dgnwnlc.dot
C:\WINDOWS\Desktop\Istituzioni di Diritto Privato.doc
C:\Programmi\Microsoft Office\Office\WINWORD.EXE
C:\WINDOWS\Application Data\Microsoft\Modelli\Normal.dot
C:\PROGRAMMI\MICROSOFT OFFICE\OFFICE\STARTUP\dgnwnlc.dot
C:\WINDOWS\Desktop\Istituzioni di Diritto Privato.doc
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\NOTEPAD.EXE

*
* Task stopped: Monday, September 15, 2003 2:18:46 PM
* Run-time was 12 minute(s), 24 second(s)
*

*
* avast! Report
* This file is generated automatically
*
* Task 'Mantra' used
* Started on Monday, September 15, 2003 7:39:59 PM
*

C:\Programmi\Microsoft Office\Office\WINWORD.EXE
C:\WINDOWS\Application Data\Microsoft\Modelli\Normal.dot
C:\PROGRAMMI\MICROSOFT OFFICE\OFFICE\STARTUP\dgnwnlc.dot
C:\WINDOWS\Desktop\dirtto pub.doc
C:\Programmi\Microsoft Office\Office\WINWORD.EXE
C:\WINDOWS\Application Data\Microsoft\Modelli\Normal.dot
C:\PROGRAMMI\MICROSOFT OFFICE\OFFICE\STARTUP\dgnwnlc.dot
C:\WINDOWS\Desktop\dirtto pub.doc
C:\Programmi\Microsoft Office\Office\WINWORD.EXE
C:\WINDOWS\Application Data\Microsoft\Modelli\Normal.dot
C:\PROGRAMMI\MICROSOFT OFFICE\OFFICE\STARTUP\dgnwnlc.dot
C:\WINDOWS\Desktop\dirtto pub.doc
C:\Programmi\Microsoft Office\Office\WINWORD.EXE
C:\WINDOWS\Application Data\Microsoft\Modelli\Normal.dot
C:\PROGRAMMI\MICROSOFT OFFICE\OFFICE\STARTUP\dgnwnlc.dot
C:\WINDOWS\Desktop\dirtto pub.doc

*
* Task stopped: Monday, September 15, 2003 7:40:44 PM
* Run-time was 45 second(s)
*

*
* avast! Report
* This file is generated automatically
*
* Task 'Mantra' used
* Started on Monday, September 15, 2003 7:40:45 PM
*

C:\Programmi\Microsoft Office\Office\WINWORD.EXE
C:\WINDOWS\Application Data\Microsoft\Modelli\Normal.dot
C:\PROGRAMMI\MICROSOFT OFFICE\OFFICE\STARTUP\dgnwnlc.dot
C:\WINDOWS\Desktop\dirtto pub.doc
C:\Programmi\Microsoft Office\Office\WINWORD.EXE
C:\WINDOWS\Application Data\Microsoft\Modelli\Normal.dot
C:\PROGRAMMI\MICROSOFT OFFICE\OFFICE\STARTUP\dgnwnlc.dot
C:\WINDOWS\Desktop\Istituzioni di Diritto Privato.doc
C:\WINDOWS\rundll32.exe
*
* avast! Report
* This file is generated automatically
*
* Task 'Mantra' used
* Started on Monday, September 15, 2003 7:42:43 PM
*

C:\Programmi\Microsoft Office\Office\WINWORD.EXE
C:\Programmi\Microsoft Office\Office\WINWORD.EXE
C:\Programmi\Microsoft Office\Office\WINWORD.EXE
C:\WINDOWS\SYSTEM\ParseDls.exe
C:\Programmi\Microsoft Office\Office\WINWORD.EXE
C:\Programmi\Microsoft Office\Office\WINWORD.EXE
C:\Programmi\Microsoft Office\Office\WINWORD.EXE
C:\WINDOWS\EXPLORER.EXE
C:\Programmi\Microsoft Office\Office\WINWORD.EXE
C:\Programmi\Microsoft Office\Office\WINWORD.EXE
Title: Re:BUG in resident shield
Post by: mantra on September 15, 2003, 07:53:54 PM
the last tentative are
tring to open whatever *.doc files!!!!
i try to open several doc file!!!
Title: Re:BUG in resident shield
Post by: igor on September 15, 2003, 08:30:09 PM
OK, I can see you tried to open a number of DOC files in the last part of the report.
Do I understand it  correctly that there was a reboot between 7:40:45 PM (where all the .DOC files were tested) and  7:42:43 PM (where no files were tested)?

To narrow down the problem, I'd like to know 2 things (if you can reproduce the problem and boot the Windows such that the .DOC files are not scanned, again).

When the .DOC files are not scanned - at the same moment:
1. Does the "Scan files on open" works? You have the HT* mask enabled, so - what happens when you open a HTML file? Does it appear in the log? Or only the browser (opera, IE, ...)?
2. If you check the resident protection settings, is the "Scan OLE documents on open" really checked? (I mean, maybe the task configuration was not read correctly...)

But as I said... it must be in the situation when the .DOC files are not scanned - if possible.
Thanks.
Title: Re:BUG in resident shield
Post by: mantra on September 16, 2003, 08:09:03 AM
" OK, I can see you tried to open a number of DOC files in the last part of the report.
Do I understand it correctly that there was a reboot between 7:40:45 PM (where all the .DOC files were tested) and 7:42:43 PM (where no files were tested)?"

YES right!

"1. Does the "Scan files on open" works? You have the HT* mask enabled, so - what happens when you open a HTML file? Does it appear in the log? Or only the browser (opera, IE, ...)?"
when avast miss doc  , miss html files too!!!
i tried some minutes ago and it missed doc and html!!
(if u want i can send the log)
resident shield checked only explorer.exe many times but not htlm pages

"2. If you check the resident protection settings, is the "Scan OLE documents on open" really checked? (I mean, maybe the task configuration was not read correctly...)"

i made one new with the right setting the problem persist!

have u same behave to your pc?igor
i have a clean install on w98se (new install)
i installed some time ago!
so my w98se has not problems
Title: Re:BUG in resident shield
Post by: igor on September 16, 2003, 09:49:48 AM
Well, the problem is that I don't have the same behavior... if I had, it would be (probably) rather easy to fix.

So, it looks like the Scanning files on open isn't working correctly sometimes...
Could you please download StartupList (http://www.lurkhere.com/~nicefiles/startuplist1521.zip), run it as StartupList.exe /complete /full /forceall and send me the resulting log (maybe not to the forum, but better by a private message)?

Thanks.
Title: Re:BUG in resident shield
Post by: mantra on September 16, 2003, 11:32:17 AM
sure i sent

but don't worry for me

investigate if it's a problem of avast
don't miss time for me
Title: Re:BUG in resident shield
Post by: mantra on September 17, 2003, 06:05:53 PM
i resolved the problem

i sent everything to alwil team
Title: Re:BUG in resident shield
Post by: whocares on September 17, 2003, 06:12:38 PM
would you share your knowledge with us ..?

 ;)
Title: Re:BUG in resident shield
Post by: igor on September 17, 2003, 06:48:47 PM
Well, there isn't much knowledge to share...
It seems to be a problem with the Standard Shield initialization; we have already incorporated changes that could help... and we'll see more after the following update (that should be out really soon).
Title: Re:BUG in resident shield
Post by: mantra on September 17, 2003, 08:14:00 PM
yes
what can i say
don't use DRAGON NATURALLY SPEAKING it could give some problems
only this
Title: Re:BUG in resident shield
Post by: Lisandro on September 18, 2003, 06:01:29 AM
Thanks Igor, mantra and whocares...
I was curious about what happened but as Igor said, let´s wait next update and pray it comes soon...  8)
Title: Re:BUG in resident shield
Post by: mantra on September 18, 2003, 10:12:28 AM
yes don't worry
not important
bye ;D