Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: CyberPK on July 26, 2005, 04:01:19 AM

Title: Can't surf on internet
Post by: CyberPK on July 26, 2005, 04:01:19 AM
Yesterday i started to have this problem. I can't see the webpages using IE and also Firefox. The only way to make it working is shutdown the Web Protection (ashWebSv.exe).
Please help me.

Thank you.
Title: Re: Can't surf on internet
Post by: lukor on July 26, 2005, 09:38:25 AM
What does firewall say?
Title: Re: Can't surf on internet
Post by: CyberPK on July 26, 2005, 12:24:07 PM
I've Sygate Personal Firewall and the browser are allowed. To be sure i've setted the firewall on Allow al. The same think with the windows firewall (i've got Windows XP SP2).
I've tried to get a webpage using telnet and the "GET /" command and it worked (also with the firewall, i had olnly to allow telnet), but when i use a browser i can't get any webpage. The only way to get webpage is stop the Web Protection.
Today i've noticed that the MSN change by itself the avatar image.
So in provvisory modality i've done a virus scan and a spyware scan (with adaware) withous any result.

And now???
Title: Re: Can't surf on internet
Post by: Eddy on July 26, 2005, 12:37:14 PM
Give the webshield provider access in your firewall.
That should solve it.
Title: Re: Can't surf on internet
Post by: CyberPK on July 26, 2005, 01:01:01 PM
No this isn't the problem. It worked before!
I'm almst sure to have a worm or something like this, because rebooting with only avast active (and no other background application) i can use the browser...
Title: Re: Can't surf on internet
Post by: Eddy on July 26, 2005, 01:02:38 PM
Follow the instructions on THIS PAGE (http://82.75.52.232/ache/cleaning.htm) and see if the problem is solved.
Title: Re: Can't surf on internet
Post by: Lisandro on July 26, 2005, 01:34:56 PM
No this isn't the problem. It worked before!
I'm almst sure to have a worm or something like this, because rebooting with only avast active (and no other background application) i can use the browser...
Cyber, can you see with TCPView (www.sysinternals.com) or the Sygate logs if any other application or dll is trying to connect?
Title: Re: Can't surf on internet
Post by: lukor on July 26, 2005, 03:16:42 PM
No this isn't the problem. It worked before!

Didn't you updated avast! to the new version - in this case you should be warned by Sygate that WebShield's process (ashwebsv.exe) has been changed and asked to confirm it's rights.
Title: Re: Can't surf on internet
Post by: CyberPK on July 26, 2005, 07:00:54 PM
ehm... the ashWebSV.exe is allowed!!! I think to have a virus or something like this. Now i'm going to do e deep scan of anything....
Title: Re: Can't surf on internet
Post by: CyberPK on July 27, 2005, 02:26:45 AM
I've done a lot of scansion with avast, with avg, spybot, adaware. Thre's nothing. All the scansion were done in provvisory modality, and also i've done a scheduled scan before windows start. There's nothing. I tried to uninstall the firewall and deactivate the windows firewall. No resuts. The only way to surf the webpage is start windows in provvisory modality or start in normal modality withou any program in auto execution or deactivate the web protection. :(
Now i've seen that clicking on "personalizza" (i'm an italian user...) on the option of the web protection and deleting the "80" under "Porte HTTP reindirizzate" it restart to work.
Have you got any idea???

Ah,
there is a problem with you antivirus. I've scheduled a virus scan before windows start, but it did't start strart the scan because can't reconize my usb keyboard. Why?? I can use it wiyhout driver also in Dos because my bios support usb keyboards... I had to temporanely install a ps2 kayboard...
Title: Re: Can't surf on internet
Post by: Spiritsongs on July 27, 2005, 02:40:59 AM
 :) Perhaps you could try either or both of the following FREE
     programs that "specialize" in detecting and removing
     trojans, WORMS, dialers, etc :

     1) "Ewido" at www.ewido.net/en
     2) A-squared Free at www.emsisoft.com//en/software/free

     I have Sygate Personal firewall 5.6 and if I had XP SP2, I
     would Disable the Windows firewall. The only issue I have
     found having that firewall & Avast on the same computer
     is what "applications" in Sygate should NOT have "Act
     As Server" checked; turns out most should not .
Title: Re: Can't surf on internet
Post by: lukor on July 27, 2005, 09:06:28 AM
Do you see ashWebSv.exe running? Does it listen on localhost:12080? Does it accept connections on this port (can you telnet there) ? If you enable logging (edit avast4.ini, in section [WebScanner] add EnableLogging=1 and restart WebShield), what does the log show?

Title: Re: Can't surf on internet
Post by: CyberPK on July 28, 2005, 01:12:59 AM
Do you see ashWebSv.exe running? Does it listen on localhost:12080? Does it accept connections on this port (can you telnet there) ? If you enable logging (edit avast4.ini, in section [WebScanner] add EnableLogging=1 and restart WebShield), what does the log show?
1) ashWebSv.exe is running.
2) When i try to telnet do localhost:12080 i get connected, but if i try to write anything i get disconnected istantanely.
3) The log file AshWebSv.log has only these lines:
27/07/2005 12.00.07,"","","",0,0,0,0,0,0,0,Unknown process,PID: 0, SEQ: 0
27/07/2005 12.00.08,"","","",0,0,0,0,0,0,0,Unknown process,PID: 0, SEQ: 0
27/07/2005 12.00.09,"","","",0,0,0,0,0,0,0,Unknown process,PID: 0, SEQ: 0
27/07/2005 12.00.10,"","","",0,0,0,0,0,0,0,Unknown process,PID: 0, SEQ: 0
27/07/2005 12.00.11,"","","",0,0,0,0,0,0,0,Unknown process,PID: 0, SEQ: 0
27/07/2005 15.01.50,"","","",0,0,0,0,0,0,0,Unknown process,PID: 0, SEQ: 0

http://tsaclan.netsons.org/files/MyLog.log <-- Here there is the log of sygate personal firewall... For me there is something of strange.

There's also a strange thing. I can see that the msn messenger change my avatar icon by itself. All the antivirus and antispyware that i've tryed before said that there where nothing. To get connected i still need to stop the web protection or do this:
Quote
... clicking on "personalizza" (i'm an italian user...) on the option of the web protection and deleting the "80" under "Porte HTTP reindirizzate" it restart to work...

Please help me! I don't like to format my hard disk and reinstall all :(((
Title: Re: Can't surf on internet
Post by: ivanmmj on July 28, 2005, 06:23:55 AM
I'm having the exact same problem. One day the internet just stopped working. It would still work but only through winamp 2.x's built in minibrowser and through messanger programs. Then one day it just started to work by itself. Next a few days later, the PC crashed because of something unrelated (or maybe not....) then when it went back up, chkdsk came up (dreaded on NTFS volumes). It found a few messed up files (which I remember thinking looked a LOT like the antivirus files) then it stopped working again. I'm going to try to reinstall Avast. If it doesn't work, I'm afraid I'm gonna have to switch over to trusty old antivir for a while, while they fix the problem. :'(
Title: Re: Can't surf on internet
Post by: CyberPK on July 28, 2005, 08:06:14 PM
there are any news??
I,  ivanmmj and aithent seem to have the same problem :(
Please help us!
Title: Re: Can't surf on internet
Post by: lukor on July 28, 2005, 08:23:06 PM
2) When i try to telnet do localhost:12080 i get connected, but if i try to write anything i get disconnected istantanely.

This is the problem. WebShield must be able to accept connections and also accept http requests on them. Why is this, I don't know. Please try to download

http://www2.asw.cz/~rypacek/ashwebsv.zip

and unzip it into c:\program files\alwil software\avast4\ (or equivalent in your language).

This is the debug version of the software (and will be replaced on reboot during automatic avast's integrity check).
You will be able to overwrite ashWebSv.exe only when WebShield is terminated. When the debug version version of WebShield is started, it will start to create pretty detailed log in c:\program files\alwil software\avast4\data\log\ashwebsv.dbg.

Try to access the internet, then terminate WebShield and send me the debug log. Perhaps we will see more.

Also you can download and run TCPVIEW from sysinternals.com and post here the list of running processes and their open connection. This might also give a clue.
Title: Re: Can't surf on internet
Post by: CyberPK on July 28, 2005, 10:39:55 PM
Ok, i've done the log. You can download it at http://tsaclan.netsons.org/files/AshWebSv.dbg
In this log there are some of my attmpt to surf on internet withous success.
Thenk you for your help.
Title: Re: Can't surf on internet
Post by: lukor on July 28, 2005, 10:44:35 PM
Just a small comment, the dump file is truncated at the end - apparently you have not terminated WebShield before copying the dump. The rest of the file is flushed to the disk during the process shutdown.
Title: Re: Can't surf on internet
Post by: CyberPK on July 28, 2005, 10:49:17 PM
OK. Just done.
You can use the same link of before.
Title: Re: Can't surf on internet
Post by: CyberPK on July 28, 2005, 11:00:17 PM
 OK. Just done.
You can use the same link of before.
Title: Re: Can't surf on internet
Post by: ivanmmj on July 28, 2005, 11:07:06 PM
I disabled the web shield and it seems to be running fine, now.
Title: Re: Can't surf on internet
Post by: CyberPK on July 28, 2005, 11:18:32 PM
you seem to have the my same problem.
Do you use msn messenger? I think is related to it because my avatr icon change by itself.
Try do do what lukor say.
Use the debug version to make a debug log for lukor.
Title: Re: Can't surf on internet
Post by: lukor on July 29, 2005, 12:33:27 AM
What is really interresting in the log file is the error: 10055 during read operation on socket. It says:

An operation on a socket could not be performed because the system lacked sufficient buffer space or because a queue was full.

At first sight it looks like an error returned by the firewall. But I know you are using Sygate, which is totaly impotent in detecting localhost communication. So is there a possibility some other software is running on your system that will block WebShield of the network? I can hardly imagine that on correct system there would indeed be no memory for the buffer, as the message says. Besides, the Winsock function WSARecv should not return this error - again another clue that 3rd party software is in action.
Title: Re: Can't surf on internet
Post by: CyberPK on July 29, 2005, 12:50:12 AM
There is no firewall. I have always used the windows firewall + sygate firewall and it worked always correctly. Now i'm thinking to a worm or to a virus, because my msn messenger change my avatar image and my personal message by itself from the problem started.
I use also software as emule and azureus, but before no any problem :(
What do you need to understand correctly my problem and help me?
Title: Re: Can't surf on internet
Post by: lukor on July 29, 2005, 11:41:55 AM
Can you try this:
http://support.microsoft.com/?id=196271


?

Title: Re: Can't surf on internet
Post by: CyberPK on July 29, 2005, 01:21:33 PM
MaxUserPort Data was already 65534...
And now????
Title: Re: Can't surf on internet
Post by: lukor on July 29, 2005, 01:26:53 PM
And now????

Hijackthis log
Title: Re: Can't surf on internet
Post by: CyberPK on July 29, 2005, 01:29:33 PM
http://tsaclan.netsons.org/files/hijackthis.log
Title: Re: Can't surf on internet
Post by: lukor on July 29, 2005, 01:35:09 PM
and a screenshot from this:

http://www.cexx.org/LSPFix.exe

 :P
Title: Re: Can't surf on internet
Post by: CyberPK on July 29, 2005, 01:47:22 PM
http://tsaclan.netsons.org/files/screenshot.jpg

Don't look too much to my desktop... It need to be cleaned :D
Title: Re: Can't surf on internet
Post by: lukor on July 29, 2005, 02:03:24 PM
http://tsaclan.netsons.org/files/screenshot.jpg

Don't look too much to my desktop... It need to be cleaned :D

Nothing unusual here, just GoogleDesktop, but that should not be the problem.


I still think this must be the firewall. Let's do a test.

1) Terminate WebShield and make sure it is not running (in the taskmanager). (what's your OS?)
2) In the Sygate firewall find all traces of WebShield (in the list of applications) and remove them
3) If you use Windows Firewall as well, turn it off.

4) start WebShield

You should now see a dialog from your firewall that webshield is trying to listen on localhost:12080, or do you not?
You should now see the process ashWebSv.exe in the list of processes in Sygate.
You should now see ashWebSv.exe in TCPVIEW and it shoudl have port 12080 opened.

5) open internet explorer
6) check your proxy server setting, it should be blank
7) enter a URL address

What do you see in internet explorer? Tcpview? Firewall active connections screen?

You can do screenshots if you like.
Title: Re: Can't surf on internet
Post by: CyberPK on July 29, 2005, 02:20:29 PM
I'll try, but think that i can't get connected also turning off all the firewall...
Title: Re: Can't surf on internet
Post by: lukor on July 29, 2005, 02:22:22 PM
I'll try, but think that i can't get connected also turning off all the firewall...
I don't understand what do you mean.
Title: Re: Can't surf on internet
Post by: CyberPK on July 29, 2005, 02:25:13 PM
Before to ask help i've tryed to turn off all the firewall but the only way to get connected was kill WebShield.
Title: Re: Can't surf on internet
Post by: lukor on July 29, 2005, 02:29:04 PM
Before to ask help i've tryed to turn off all the firewall but the only way to get connected was kill WebShield.

Hmm, so you were never asked that Avast WebShield is trying to connect to some IP port 80?

Title: Re: Can't surf on internet
Post by: CyberPK on July 29, 2005, 02:35:55 PM
Quote
I still think this must be the firewall. Let's do a test.

1) Terminate WebShield and make sure it is not running (in the taskmanager). (what's your OS?)
2) In the Sygate firewall find all traces of WebShield (in the list of applications) and remove them
3) If you use Windows Firewall as well, turn it off.
Ok, to be sure I've resetted all the allow list.

Quote
4) start WebShield
OK

Quote
You should now see a dialog from your firewall that webshield is trying to listen on localhost:12080, or do you not?
NO! I get the error message from the browase without recive any message from the firewall...

Quote
You should now see the process ashWebSv.exe in the list of processes in Sygate.
YES

Quote
You should now see ashWebSv.exe in TCPVIEW and it shoudl have port 12080 opened.
YES

Quote
5) open internet explorer
I've used also firefox...

Quote
6) check your proxy server setting, it should be blank
It is blank

Quote
7) enter a URL address
:( as before. No way to get webpages :( I can only see pages that use ssl usig https (as my website)

Quote
What do you see in internet explorer? Tcpview? Firewall active connections screen?

You can do screenshots if you like.

Ok just tryed what you say, but nothing work
After  delete the 80 from "Porte HTTP reindirizzate" it start to work and i recive as (as expected) a message from the firewall that is asking to allow or not the browser :(
Title: Re: Can't surf on internet
Post by: CyberPK on July 29, 2005, 02:36:16 PM
Before to ask help i've tryed to turn off all the firewall but the only way to get connected was kill WebShield.

Hmm, so you were never asked that Avast WebShield is trying to connect to some IP port 80?


No
Title: Re: Can't surf on internet
Post by: lukor on July 29, 2005, 02:47:18 PM
I am sorry CyberPK. It seems to me you have tried pretty much everything. For some reason WebShield is not able to read from socket on your PC with that error WSAENOBUF.

I don't know what to suggest next but turning the webshield off.

I have just installed Sygate Personal Firewall 5.5 on the test box. I'm trying to reproduce some problems but all seem to work fine.
Title: Re: Can't surf on internet
Post by: CyberPK on July 29, 2005, 02:51:00 PM
I am sorry CyberPK. It seems to me you have tried pretty much everything. For some reason WebShield is not able to read from socket on your PC with that error WSAENOBUF.

I don't know what to suggest next but turning the webshield off.

I have just installed Sygate Personal Firewall 5.5 on the test box. I'm trying to reproduce some problems but all seem to work fine.
I use sygate personal firewall 5.6 on Windows XP pro SP2
Title: Re: Can't surf on internet
Post by: CyberPK on July 29, 2005, 09:09:42 PM
There is any news??
Title: Re: Can't surf on internet
Post by: ivanmmj on July 31, 2005, 06:26:21 AM
I'm not using Sygate and I have the same problem. In fact, I don't have ANY firewall software running.
Title: Re: Can't surf on internet
Post by: Lisandro on July 31, 2005, 03:37:54 PM
In fact, I don't have ANY firewall software running.
Not even Windows XP internal one?
So, check your proxy settings. You should use none, or do you use any anonymizer program?
Title: Re: Can't surf on internet
Post by: ivanmmj on August 01, 2005, 04:24:18 PM
I don't use the windows one, either. Nor any anonymizer program. Nor do I have any proxy settings set up because I don't use a proxy.
It just quit working one day.
Title: Re: Can't surf on internet
Post by: Lisandro on August 01, 2005, 05:27:42 PM
I don't use the windows one, either. Nor any anonymizer program. Nor do I have any proxy settings set up because I don't use a proxy.
It just quit working one day.
Just guessing and trying to help:
Make sure your browser is not set to "Work Offline" (this option is generally in the File menu). If it doesn't help, try switching the proxy settings from "Auto-detect" to "No proxy" (I'm assuming you're not connecting to the Internet via proxy).

Left click the avast icon > Settings
Update (Basic) > Details > Proxy
Title: Re: Can't surf on internet
Post by: CyberPK on August 03, 2005, 12:59:58 AM
And so, no any news????
I have to format my hard disk and re-install all??
:((
Title: Re: Can't surf on internet
Post by: ivanmmj on August 03, 2005, 06:39:36 AM
Just guessing and trying to help:
Make sure your browser is not set to "Work Offline" (this option is generally in the File menu). If it doesn't help, try switching the proxy settings from "Auto-detect" to "No proxy" (I'm assuming you're not connecting to the Internet via proxy).

Left click the avast icon > Settings
Update (Basic) > Details > Proxy
Not on "work offline"  :P
I already tried switching over to no proxy.
Avast is set to automatic proxy.
Btw, I DO appreciate your help. :)
Title: Re: Can't surf on internet
Post by: Lisandro on August 03, 2005, 09:33:04 PM
Avast is set to automatic proxy.
Set it to 'No proxy'  8)
Title: Re: Can't surf on internet
Post by: CyberPK on August 04, 2005, 12:54:32 AM
He seem to have the my same problem.
It isn't a firewall problem. Please help us.