Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: beagle1962 on August 19, 2006, 07:01:59 PM

Title: SLOOOOW System
Post by: beagle1962 on August 19, 2006, 07:01:59 PM
Since loading the latest 4.7 Home Edition updates on 8/18, my system is running incredibly slow. Specifically when loading my msn home page and when attempting to retrieve email, but other pages as well.

Anyone else having this problem? Any explanations and/or solutions out there?
Title: Re: SLOOOOW System
Post by: DavidR on August 19, 2006, 07:33:30 PM
We can't hope to suggest what is happening based on soooo little information!

Tell us a little about your system specification, CPU, RAM, etc. ?
What Operating System are you using ? is it up to date ?
Have (or did) you have another AV installed in this system, if so what and how did you get rid of it ?
What other security based software do you have, e.g. Spybot S&D (TeaTimer), AdAware (AdWatch), SpySweeper, PrevX, WinPatrol, ProcessGuard, etc. ?
What is your firewall ?
Title: Re: SLOOOOW System
Post by: beagle1962 on August 20, 2006, 05:40:20 AM
We can't hope to suggest what is happening based on soooo little information!

Tell us a little about your system specification, CPU, RAM, etc. ?
What Operating System are you using ? is it up to date ?
Have (or did) you have another AV installed in this system, if so what and how did you get rid of it ?
What other security based software do you have, e.g. Spybot S&D (TeaTimer), AdAware (AdWatch), SpySweeper, PrevX, WinPatrol, ProcessGuard, etc. ?
What is your firewall ?

SOOOO (nice), you want more info? (I could have provided all kinds of info. but it made more sense to wait until asked for what you needed--doncha think??? Especially as there was no problem at all until the most recent update.)

P4, 3.06 GHz, 512 RAM, Windows XP Home w/Service Pack 2, No other AV (Had NAV 2006--removed ALL including registry keys). No firewall. Period. SOOOO, is there something else you need to know?
Title: Re: SLOOOOW System
Post by: alanrf on August 20, 2006, 05:50:49 AM
Which email client is being used?

Which avast providers are you running and at which level of sensitivity?

Have you attempted any problem isolation like turning off providers one by one to see if any reduces the SLOOOOwness you observe?

Do you have any system protection (other than avast) like a router between you and the Internet?
Title: Re: SLOOOOW System
Post by: beagle1962 on August 20, 2006, 04:56:55 PM
Which email client is being used?

Which avast providers are you running and at which level of sensitivity?

Have you attempted any problem isolation like turning off providers one by one to see if any reduces the SLOOOOwness you observe?

Do you have any system protection (other than avast) like a router between you and the Internet?
msn email through msn homepage

avast providers:
im - normal
internet mail - normal
network shield - normal
p2p shield - normal
standard shield - normal
web shield - normal

yes. have tried isolating each--no difference in Sloooowness

as noted above, no other "protection." use dsl gateway through service provider qwest
Title: Re: SLOOOOW System
Post by: Lisandro on August 20, 2006, 05:06:16 PM
as noted above, no other "protection"
And in the past? Did you use any other program and uninstalled it?
Title: Re: SLOOOOW System
Post by: beagle1962 on August 21, 2006, 12:59:14 AM
as noted above, no other "protection"
And in the past? Did you use any other program and uninstalled it?
As noted above: NAV 2006. COMPLETELY uninstalled, including registry keys.
Title: Re: SLOOOOW System
Post by: Lisandro on August 21, 2006, 01:03:39 AM
As noted above: NAV 2006. COMPLETELY uninstalled, including registry keys.
Sorry to ask you again...
Did you follow the instructions of Symantec here?
SymNRT tool (http://service1.symantec.com/SUPPORT/sharedtech.nsf/docid/2006031710323113?Open&src=&docid=2005033108162039&nsf=tsgeninfo.nsf&view=docid&dtype=&prod=&ver=&osv=&osv_lvl=&seg=).
Title: Re: SLOOOOW System
Post by: alanrf on August 21, 2006, 01:29:26 AM
In the task manager is anything showing up with a high level of CPU utilization?
Title: Re: SLOOOOW System
Post by: beagle1962 on August 21, 2006, 06:34:33 AM
As noted above: NAV 2006. COMPLETELY uninstalled, including registry keys.
Sorry to ask you again...
Did you follow the instructions of Symantec here?
SymNRT tool (http://service1.symantec.com/SUPPORT/sharedtech.nsf/docid/2006031710323113?Open&src=&docid=2005033108162039&nsf=tsgeninfo.nsf&view=docid&dtype=&prod=&ver=&osv=&osv_lvl=&seg=).
Yes. 12 hours and 7 symantec techs. later, I was directed to the proper tool to completely uninstall.

In the task manager is anything showing up with a high level of CPU utilization?
No. Overall usage is at 2%. Highest usage is msn.exe at ~32,000K. Next is explorer.exe at ~30,000K.
Title: Re: SLOOOOW System
Post by: alanrf on August 21, 2006, 07:28:48 AM
I have my primary browser (Firefox) switch to IE (6) to open the MSN homepage.  It typically takes 2-3 seconds from my request in Firefox to complete the MSN homepage in IE while being scanned by avast.

Can you please advise us of how long is slow?
Title: Re: SLOOOOW System
Post by: alanrf on August 21, 2006, 07:55:51 AM
Just a thought.

My system never shows msn.exe as a process.  Is MSN your service provider?
Title: Re: SLOOOOW System
Post by: beagle1962 on August 21, 2006, 03:46:40 PM
I have my primary browser (Firefox) switch to IE (6) to open the MSN homepage.  It typically takes 2-3 seconds from my request in Firefox to complete the MSN homepage in IE while being scanned by avast.

Can you please advise us of how long is slow?
Between 1 minute and 1 minute, 30 seconds. It used to take less than 10 seconds to load (10 being the high end when email is heavy).

Just a thought.

My system never shows msn.exe as a process.  Is MSN your service provider?
Yes. I use msn.exe for regular use. When I accessed this site (through the "about avast" forum link) IE was opened in a second window. I do not use IE as a rule.
Title: Re: SLOOOOW System
Post by: DavidR on August 21, 2006, 04:52:35 PM
<snip>
Yes. I use msn.exe for regular use. When I accessed this site (through the "about avast" forum link) IE was opened in a second window. I do not use IE as a rule.
Yes there are a few infuriating internet links in the avast interface that launch IE to view the page rather than use the default browser. Better that you put the forum in your bookmarks/favourites of your default browser.
Title: Re: SLOOOOW System
Post by: Lisandro on August 21, 2006, 05:35:30 PM
Beagle, maybe, maybe if activating logging in WebShield we can see something...

1. Edit <avast>\data\avast4.ini file
2. Find the section [WebScanner]
3. Add the line:
    EnableLogging=1
4. Restart Web Shield in XP (terminate and start again) or whole PC in case of Win98
5. Browse (trying to access some webpages)

The log file are <avast>\data\log\ashwebsv.log and ashwebsv.ws.
They would be accessible when WebShield is terminated again.
Post them here or send by mail to rypacek@asw.cz

After that, disable the logging to avoid a big log file.
Title: Re: SLOOOOW System
Post by: beagle1962 on August 21, 2006, 06:19:16 PM
Quote
Yes there are a few infuriating internet links in the avast interface that launch IE to view the page rather than use the default browser. Better that you put the forum in your bookmarks/favourites of your default browser.
Quote
Done.

Beagle, maybe, maybe if activating logging in WebShield we can see something...

1. Edit <avast>\data\avast4.ini file
2. Find the section [WebScanner]
3. Add the line:
    EnableLogging=1
4. Restart Web Shield in XP (terminate and start again) or whole PC in case of Win98
5. Browse (trying to access some webpages)

The log file are <avast>\data\log\ashwebsv.log and ashwebsv.ws.
They would be accessible when WebShield is terminated again.
Post them here or send by mail to rypacek@asw.cz

After that, disable the logging to avoid a big log file.
Inserted line in ini file. Terminated and restarted Web Shield (actually rebooted to be on the safe side). Browsed the web. Went to both log files, which are empty. Puzzled. Have not yet deleted logging in the ini file.

Did find this in the "error" file:

8/19/2006   3:54:25 AM   1155984865   SYSTEM   1924   Function setifaceUpdatePackages() has failed. Return code is 0x20000004, dwRes is 20000004. 
8/19/2006   3:54:27 AM   1155984867   SYSTEM   1924   An error has occured while attempting to update. Please check the logs. 

aswMaiSv file shows:

08/21/06 08:57:53 0000006C:   Started as service, Log = 1
08/21/06 08:57:53 0000006C:   Build 4.7.871
08/21/06 08:57:53 0000006C:   Windows XP Workstation (Service Pack 2)
08/21/06 08:57:53 0000006C:   Using WinSock 2.0
08/21/06 08:57:53 0000006C:   AutoRedirect settings changed 1
08/21/06 08:57:53 0000006C:   IgnoreLocalhost settings changed 1
08/21/06 08:57:53 0000006C:   POP Start settings changed: 1
08/21/06 08:57:53 0000006C:   POP Listen settings changed: 127.0.0.1 12110
08/21/06 08:57:53 0000006C:   POP RedirectPort: 110
08/21/06 08:57:53 0000006C:   SMTP Start settings changed: 1
08/21/06 08:57:53 0000006C:   SMTP Listen settings changed: 127.0.0.1 12025
08/21/06 08:57:53 0000006C:   SMTP RedirectPort: 25
08/21/06 08:57:53 0000006C:   IMAP Start settings changed: 1
08/21/06 08:57:53 0000006C:   IMAP Listen settings changed: 127.0.0.1 12143
08/21/06 08:57:54 0000006C:   IMAP RedirectPort: 143
08/21/06 08:57:54 0000006C:   NNTP Start settings changed: 1
08/21/06 08:57:54 0000006C:   NNTP Listen settings changed: 127.0.0.1 12119
08/21/06 08:57:54 0000006C:   NNTP RedirectPort: 119

Will email setup file for period of 8/18 (when problem started) to today.


email sent to rypacek@asw.cz as "beagle1962 setup file 8/18 to current"
Title: Re: SLOOOOW System
Post by: Lisandro on August 21, 2006, 07:55:22 PM
aswMaiSv file
This is the mail log...

Will email setup file for period of 8/18 (when problem started) to today.
This setup.log file is the installation and update log...

We need the WebShield logs: <avast>\data\log\ashwebsv.log and ashwebsv.ws.
Title: Re: SLOOOOW System
Post by: beagle1962 on August 21, 2006, 09:47:44 PM
aswMaiSv file
This is the mail log...

Will email setup file for period of 8/18 (when problem started) to today.
This setup.log file is the installation and update log...

We need the WebShield logs: <avast>\data\log\ashwebsv.log and ashwebsv.ws.
We need the WebShield logs: <avast>\data\log\ashwebsv.log and ashwebsv.ws.
Quote
I understand what you were asking for—I’m not a complete rube. As I was chided for not providing enough info. with my first post, I thought better of such reticence this time.

As I noted, the one file I was able to open was empty. I'm obviously missing something. Any clues? Followed instructions (also as noted) to add line to ini file, stop and resume WebShield, browse web, terminate WebShield again then access log file specified (could only open empty ashwebsv.log, not ashwebsv.ws). have just emailed copies of both.
Title: Re: SLOOOOW System
Post by: Lisandro on August 21, 2006, 09:52:52 PM
I understand what you were asking for—I’m not a complete rube.
Please, don't read any rude intention on the underline words... I've just made it to make reading easier...
I'm not upset... just trying to help you.

Well, the absence of the log is saying me that your WebShield isn't doing anything, not working, not being executed... seems this...
Do you have ashWebSv.exe running in background?
Title: Re: SLOOOOW System
Post by: beagle1962 on August 21, 2006, 11:46:50 PM
I understand what you were asking for—I’m not a complete rube.
Please, don't read any rude intention on the underline words... I've just made it to make reading easier...
I'm not upset... just trying to help you.

Well, the absence of the log is saying me that your WebShield isn't doing anything, not working, not being executed... seems this...
Do you have ashWebSv.exe running in background?
I currently have the following running:
ashWebSv.exe
ashServ.exe
aswUpdSv.exe
ashDisp.exe
ashMaiSv.exe

avast tools show I am running IM, IMail, Network Shield, P2P Shield, Standard Shield and Web Shield, all in Normal mode.
Title: Re: SLOOOOW System
Post by: Lisandro on August 22, 2006, 12:15:19 AM
Yes. 12 hours and 7 symantec techs. later, I was directed to the proper tool to completely uninstall.

No. Overall usage is at 2%. Highest usage is msn.exe at ~32,000K. Next is explorer.exe at ~30,000K.

If the usage is 2% and nothing is conflicting, why are you saying the system is slow?
How much RAM do you have?
Which is your Internet speed connection?
Title: Re: SLOOOOW System
Post by: beagle1962 on August 22, 2006, 01:20:45 AM
No. Overall usage is at 2%. Highest usage is msn.exe at ~32,000K. Next is explorer.exe at ~30,000K.

If the usage is 2% and nothing is conflicting, why are you saying the system is slow?
How much RAM do you have?
Which is your Internet speed connection?

You know the written word can be easily misconstrued without facial expression and vocal intonation. I have read several posts on this board--and in this thread--that could appear to be quite rude. I'm certain that's not what you mean to convey....

I have also read your (read: Tech.) posts that indicate a level of (understandable) frustration when the poster does not read and respond to what you have written. I understand that frustration as I have been answering the same questions more than once.

I will say again: I have 512K RAM. My connection is dedicated DSL. I say it is slow because, in addition to taking considerably longer to simply boot my system, it now takes 1 minute to 1 minute 30 to load the same pages that would take a maximum of 10 seconds before. My presumption, as the only change to my system since this symptom began, is that it is somehow related to the 8/18 update of your software.

Title: Re: SLOOOOW System
Post by: Spiritsongs on August 22, 2006, 02:36:39 AM
 :)  Hi Beagle :

      Perhaps, by coincidence, during the same time frame as
      the Avast VPS Update took place, a piece of malware,
      such as a trojan, worm, rootkit, etc may have entered
      your computer !? Have you checked for such a possibility ?
Title: Re: SLOOOOW System
Post by: beagle1962 on August 22, 2006, 02:57:46 AM
:)  Hi Beagle :

      Perhaps, by coincidence, during the same time frame as
      the Avast VPS Update took place, a piece of malware,
      such as a trojan, worm, rootkit, etc may have entered
      your computer !? Have you checked for such a possibility ?
Hello Spiritsongs,
Yes, I have used your software for a complete system scan on 8/19 and it found no problems.
Title: Re: SLOOOOW System
Post by: Spiritsongs on August 22, 2006, 03:06:47 AM
 :)  Hi Beagle :

     With all the different kinds of malware coming through the
     phone lines these days, should have more than just an
     antivirus ; do you have any antiSPYWARE program(s) ?
     If not, I would recommend you use Ewido from
     www.ewido.net/en ; this program "specializes" in
     detecting & quarantining trojans, worms, keyloggers,
     generic dialers, etc that antivirus or antispyware programs
     are not as good at doing . At least use Ewido's "Online
     Scanner" !?
Title: Re: SLOOOOW System
Post by: alanrf on August 22, 2006, 03:20:01 AM
beagle1962,

You have referred a couple of times to "your software".

Just for clarification - every person who has participated in this thread with you is just an avast user as you are.  They have no control over or proprietary interest in the software. 

They are all volunteering their time and knowledge of avast in an effort to help other users.   

Title: Re: SLOOOOW System
Post by: beagle1962 on August 22, 2006, 04:32:08 AM
:)  Hi Beagle :

     With all the different kinds of malware coming through the
     phone lines these days, should have more than just an
     antivirus ; do you have any antiSPYWARE program(s) ?
     If not, I would recommend you use Ewido from
     www.ewido.net/en ; this program "specializes" in
     detecting & quarantining trojans, worms, keyloggers,
     generic dialers, etc that antivirus or antispyware programs
     are not as good at doing . At least use Ewido's "Online
     Scanner" !?
Hello again, Spiritsongs,
Thank you for the recommendation/suggestion. I will look into it. Is this something with which you have experience?

Post Script: It was my assumption (yes, I know what they say about one who assumes!), that the Web Shield was performing those functions. Live and learn...

beagle1962,

You have referred a couple of times to "your software".

Just for clarification - every person who has participated in this thread with you is just an avast user as you are.  They have no control over or proprietary interest in the software. 

They are all volunteering their time and knowledge of avast in an effort to help other users.   


Ah! That explains a lot....Thank you for setting me straight.
Title: Re: SLOOOOW System
Post by: Lisandro on August 22, 2006, 04:39:41 AM
You know the written word can be easily misconstrued without facial expression and vocal intonation. I have read several posts on this board--and in this thread--that could appear to be quite rude. I'm certain that's not what you mean to convey....
Beagle... I even think you were rude or need to ask for excuses... Don't worry  ;)

I have also read your (read: Tech.) posts that indicate a level of (understandable) frustration when the poster does not read and respond to what you have written. I understand that frustration as I have been answering the same questions more than once.
It's not frustrating... I enjoy helping (try to enjoy...), sometimes is just time consuming. Sorry to ask you the same questions again and again... I did not do on purpose...

Considerably longer to simply boot my system
Ok... avast is scanning the startup items... what can we do... You can:
1. Reduce the startup items.
2. Use the 'Normal' sensitivity for the Standard Shield.
3. Control your startup process using Try Startup Delayer (http://www.r2.com.au/software.php?page=2&show=startdelay).
4. Since avast! version 4.7.807 the Standard Shield has a feature called do not scan system libraries (by default on) that dramatically decrease the number of files scanned during computer boot.

It now takes 1 minute to 1 minute 30 to load the same pages that would take a maximum of 10 seconds before
Ok... WebShield is scanning the webpages being loaded... You can:
1. Set (if it's not done right now in your computer) the 'Use intelligent stream scanning'
2. Remove the 'Scan all files' and choose only a restricted set of files to be scanned.
3. Exclude safe urls to be scanned.

My presumption, as the only change to my system since this symptom began, is that it is somehow related to the 8/18 update of your software.
Their software...
But some days ago we had Microsoft patch Tuesday  ::)
Title: Re: SLOOOOW System
Post by: beagle1962 on August 22, 2006, 04:59:32 AM
Considerably longer to simply boot my system
Ok... avast is scanning the startup items... what can we do... You can:
1. Reduce the startup items.
2. Use the 'Normal' sensitivity for the Standard Shield.
3. Control your startup process using Try Startup Delayer (http://www.r2.com.au/software.php?page=2&show=startdelay).
4. Since avast! version 4.7.807 the Standard Shield has a feature called do not scan system libraries (by default on) that dramatically decrease the number of files scanned during computer boot.

It now takes 1 minute to 1 minute 30 to load the same pages that would take a maximum of 10 seconds before
Ok... WebShield is scanning the webpages being loaded... You can:
1. Set (if it's not done right now in your computer) the 'Use intelligent stream scanning'
2. Remove the 'Scan all files' and choose only a restricted set of files to be scanned.
3. Exclude safe urls to be scanned.

My presumption, as the only change to my system since this symptom began, is that it is somehow related to the 8/18 update of your software.
Their software...
But some days ago we had Microsoft patch Tuesday  ::)
Tech,
Thank you for your post. I appreciate the help you are providing (especially as I am now aware that this is not "your" software).

I am currently using the "normal" setting on all providers. I will look into "Startup Delayer" later as I am currently unable to open the link you provided. I will uncheck the box to stop scanning dll files to see if that helps.

Intelligent Stream Scanning is currently checked. If I remove the "Scan all files" as you suggested, what file types would you suggest I do scan (exe, and ???). I will add urls to exclude in the scanning process.

I'm not sure I understand your Microsoft comment. Do you mean Microsoft had a recent update? I have Automatic Updates turned off, and I am very selective regarding what updates I will install. I have not done so in quite some time.

You have given me plenty to work with to see if I can speed things up. Again, I appreciate it.
Title: Re: SLOOOOW System
Post by: Lisandro on August 22, 2006, 05:50:36 AM
What file types would you suggest I do scan (exe, and ???). I will add urls to exclude in the scanning process.
I was afraid you'll ask me this... I really do not know... Need help from Alwil team or, maybe, RejZor...

I'm not sure I understand your Microsoft comment. Do you mean Microsoft had a recent update? I have Automatic Updates turned off, and I am very selective regarding what updates I will install. I have not done so in quite some time. You have given me plenty to work with to see if I can speed things up. Again, I appreciate it.
Microsoft updates on 8th August...
Title: Re: SLOOOOW System
Post by: Spiritsongs on August 22, 2006, 08:36:05 AM
 :)  Hi Beagle :

      I, like you, have had my Windows Automatic Updates
      turned "OFF" for quite some time. However, I remember
      that they usually come out the Wed AFTER the 2nd Tues
      of each month. To be aware of WHAT Updates Microsoft
      is releasing, I subscribe to their "Email Alerts" which has
      a brief description of each one. When I visit their Update
      site, I click on each "offering" & read its description.
      At present time the only one to avoid is KB 905474. Since
      it has been quite some time you have been there, you
      may not  have the necessary KB 892130, also known as
      the "Windows Genuine Advantage Validation Tool", so it
      would be wise to look in your "Add/Remove Programs"
      for its presence . Is it there ? Without it, Microsoft will
      NOT allow its other Updates released after it to be
      downloaded onto a computer. It is possible the lack of
      its presence may have "triggered" something in your
      computer when Avast released its Updates around
      Aug 18 !? Best to check as much possibilities as possible.
Title: Re: SLOOOOW System
Post by: beagle1962 on August 23, 2006, 06:03:27 PM
What file types would you suggest I do scan (exe, and ???). I will add urls to exclude in the scanning process.
I was afraid you'll ask me this... I really do not know... Need help from Alwil team or, maybe, RejZor...

I'm not sure I understand your Microsoft comment. Do you mean Microsoft had a recent update? I have Automatic Updates turned off, and I am very selective regarding what updates I will install. I have not done so in quite some time. You have given me plenty to work with to see if I can speed things up. Again, I appreciate it.
Microsoft updates on 8th August...
Thank you for all the information/suggestions you have provided. I will attempt to contact an Alwil team member regarding which files to scan.

:)  Hi Beagle :

      I, like you, have had my Windows Automatic Updates
      turned "OFF" for quite some time. However, I remember
      that they usually come out the Wed AFTER the 2nd Tues
      of each month. To be aware of WHAT Updates Microsoft
      is releasing, I subscribe to their "Email Alerts" which has
      a brief description of each one. When I visit their Update
      site, I click on each "offering" & read its description.
      At present time the only one to avoid is KB 905474. Since
      it has been quite some time you have been there, you
      may not  have the necessary KB 892130, also known as
      the "Windows Genuine Advantage Validation Tool", so it
      would be wise to look in your "Add/Remove Programs"
      for its presence . Is it there ? Without it, Microsoft will
      NOT allow its other Updates released after it to be
      downloaded onto a computer. It is possible the lack of
      its presence may have "triggered" something in your
      computer when Avast released its Updates around
      Aug 18 !? Best to check as much possibilities as possible.

Hello Spiritsongs,
I do have KB 892130 downloaded on my system, so installing necessary updates should not be a problem. I check the Microsoft site periodically to add what I think I might need.

It's interesting that you questioned whether not updating Microsoft may have caused the slower system response time. When Tech asked me about the Microsoft updates, I was wondering the same thing. I suppose it is possible--I certainly wouldn't rule it out at this point....

Thank you for your input. I'll "play" with the suggestions I have been given over the coming weekend and see if anything helps.

I'll let you both know the results.
Title: Re: SLOOOOW System
Post by: Spiritsongs on August 23, 2006, 06:24:01 PM
 :)  Hi Beagle :

     I still feel the 1st order of priority should be to use
     "Ewido", either running its Online Scanner or its
     "Complete System Scan" after having installed and
       updated it .