Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: rossb on April 27, 2009, 05:48:25 AM
-
I installed Avast in place of AVG Free for the first time a couple of days ago after numerous recommendations. It was fine yesterday, but on booting up today I was unable to open IE7 or Firefox. I disabled the On-Access Protection and voila - both browsers were back to functioning normally.
I uninstalled Avast and reinstalled it after seeing this recommendation on a tech forum for a person who was having the same problems with Avast On-Access Protection.
Unfortunately, the same issue has recurred, right from when the new installation was completed! I had to turn off Avast On-Access Protection to open FF to go to this forum and type out this post. I am currently unprotected, which is not a good feeling.
I am on the point of returning to AVG, which never gave me issues like these, even if it is considered second-best to Avast by many.
Can someone please help?
Cheers
Ross
-
Hi rossb!
Please run the AVG Remover (http://www.avg.com/download-tools) which removes all parts of the previous AVG installation...
(Remaining parts can cause conflicts...)
Then run the Avast! Uninstall Utility (http://avast.com/ger/avast-uninstall-utility.html)
And then try to install Avast again with a new installation file from the Avast! Homepage (http://avast.com/ger/programs.html)
Did you also use any other security software before? (before AVG/parallel with AVG)
Are you using any other security software parallel to Avast?
(Antivirus, Firewall, Antispyware,...)
If yes - which ones?
yours
onlysomeone
-
I installed Avast in place of AVG Free for the first time a couple of days ago
Hi Ross
You don't say which version of AVG Free you removed. The AVG Remover (http://www.avg.com/download-tools) won't help if it's 7.5. It's for 8.X only.
-
Thanks for your responses, guys.
onlysomeone, I was using Zonealarm (free) years ago on this computer and have not reformatted since then. I am currently running Spybot and Adaware as well as Avast.
Re your query, Vladimyr, I was using the most recent AVG (8.5).
I'm interested to know if you think any of these programs has conflicted with Avast in some way that might have produced the problem I'm having with the IE7 and FF. I'd rather be running less, rather than more of these anti-virus/spyware programs, so if I'm needlessly doubling up or over-protected and this is resulting in conflicts, I'll be happy to uninstall the offender(s). I WANNA like Avast, believe me, as AVG seemed to be getting a little bloated in its current version, slowing the computer down a bit I suspected, and was taking a bloody long time to run its check on the HD!
Cheers
Ross
-
The problem is that Antivirus Programs sometimes let something on the computer although they get uninstalled...
So please try what I suggested in my first post
Please run the AVG Remover (http://www.avg.com/download-tools) which removes all parts of the previous AVG installation...
(Remaining parts can cause conflicts...)
Then run the Avast! Uninstall Utility (http://avast.com/ger/avast-uninstall-utility.html)
And then try to install Avast again with a new installation file from the Avast! Homepage (http://avast.com/ger/programs.html)
Spybot and Adaware shouldn't conflict with avast... so you can let them on your PC.
-
http://forum.avast.com/index.php?topic=44543.msg373241#msg373241 If you have the same problem then do what its say :)
-
Which is your firewall? Is ashWebSv.exe allowed to connect?
-
Tech, my firewall is the Windows one (OS is Win XP Home + SP2). I don't know what you mean by your question "is ashWebSv.exe allowed to connect" - could you explain please?
-
Did you already do what I suggested?
Please run the AVG Remover (http://www.avg.com/download-tools) which removes all parts of the previous AVG installation...
(Remaining parts can cause conflicts...)
Then run the Avast! Uninstall Utility (http://avast.com/ger/avast-uninstall-utility.html)
And then try to install Avast again with a new installation file from the Avast! Homepage (http://avast.com/ger/programs.html)
-
onlysomeone,
I've done all you suggested. The new installation of Avast, again, will not allow IE7 or FF to open while On-Access Protection is on. As soon as I disable it, both browsers start operating normally, as before.
I'm not sure how to tell if AVG has been completely removed - maybe it hasn't been and this is the problem. I ran the AVG remover several times and restarted the computer each time. Still the same two entries come up in the Win DOS window each time I run the remover. How do I know whether the remover has, indeed, removed all remnants of AVG, please?
If AVG has been completely removed, WTF is going on? I want to give Avast a fair try, but this is starting to look like too much of a hassle. Maybe I should just go back to AVG - I never had a moment's problem installing it. Disappointing, though. Avast looked good. Any other suggestions as to how to rectify this browser problem, and I will follow up on them, though. I don't want to give up on Avast without trying it properly. Damn!
-
And you never used Norton or Mc Affee?
-
Hi :)
When I uninstalled AVG 8.5 from my desktop computer about 5 weeks ago...
1/ I was expecting trouble getting rid ::) So! ... Uninstalled AVG 8.5 with - Revo Uninstaller.
2/ Thinking AVG 8.5 was completely gone.. I Installed - Avast Home 4.8 8)
3/ Avast seemed happy ... But ... The computer had a couple of rather dodgy Start Ups :'(
4/ I found an - AVG Folder >:(
5/ I downloaded and ran the AVG Removal Tool ;D
6/ Computer Happy! :D
However!
7/ 4 days ago I once again found another AVG Folder .. For The - AVG Toolbar :o
8/ Deleted The Flamin AVG Toolbar Folder :P
9/ Don't ever want AVG back again ... I'm Stickin With Avast ;)
10/ AVG is almost as hard to get rid of as Norton ::)
-
10/ AVG is almost as hard to get rid of as Norton
It never used to be like that, but with introduction of avg8 and avg8.5 it has become more prone to leaving remnants that are hard to get rid of.
-
I have run AVG Removal multiple times, and just did a search of my files/folders containing "AVG" - I was surprised to discover many still left! I manually deleted those that I could, but some indicated that removal was not possible (forget the explanation).
I'm still not able to open IE7 or FF after now 3 times uninstalling and reinstalling Avast - except when disabling the On-Access Protection. Having followed all suggestions by you kind folk who have responded to my post, I am now completely stuck.
-
I'm not clear, you say you can't 'open' IE7 or FF, is that exactly what you mean or do you mean you can't browse and sites when using them.
If you literally mean you can't physically open them, then there is something going on in the background, that appears to be conflict. Typically two AVs trying to hook a file to scan it, so what is strange is that this only effects IE7 and FF and not other executable files when you try to run them. So there is certainly something strange going on in your system, as it has all the hallmarks of a conflict yet it is only when opening browsers ???
To get round the problem, you could pause the standard shield open the browser, using about blank as your home page so it doesn't connect immediately and once open resume the standard shield so you are protected.
This isn't a permanent solution but a test, can you then browse or do you experience other issues and if so what ?
What were the errors when you tried to manually delete what avg registry entries you found ?
I suspect some sort of permission error, in which case you would have to take control of the key, e.g. Right click on the key, select Permissions, and ensure your user account is allowed Full control, that should allow you to delete that avg entry in the key.
-
Hi David.
When On-Access Protection Control is on and I attempt to open up IE7 I get a page with the following statement:
"Internet Explorer cannot display the webpage
Most likely causes:
You are not connected to the Internet.
The website is encountering problems.
There might be a typing error in the address."
When I try FF, I get a page stating:
"Connection Interrupted
The connection to the server was reset while the page was loading.
The network link was interrupted while negotiating a connection. Please try again." (Trying again makes no difference).
Weirdly, a few minutes ago FF started working normally for a short while when I had the On-Access Protection on. I managed to bring up two sites, then the "Connection Interrupted" page came up when I tried a third site. That's persisted since, so I turned OAP off and now I can browse normally. Still, it's the first time either browser has worked at all for browsing while OAP was on. - even if it was only for a couple of sites.
I just tried to duplicate the errors I got when I tried to manually delete the AVG files I found on a search of the HD, but now I can find NO TRACE of anything to do with AVG! I don't know how this came about - there were certainly AVG remnants on view when I was trying to delete them this morning, but that they're gone now (however that happened) is a plus, I guess.
I don't understand your suggestion "you could pause the standard shield open the browser, using about blank as your home page so it doesn't connect immediately and once open resume the standard shield so you are protected." What is "about blank" (that you suggest using for a home page), for instance?
Anyway, thanks for your comments. I thought people had deserted the thread. I would REALLY like to get this browser issue sorted out so I can give Avast! a fair go for a while.
Cheers
Ross
-
That is more like it as I couldn't believe you couldn't even open them.
Now this aside from possible conflict with another AV (that also monitors web traffic) it could be firewall blocking (this is more common). However, now you say it worked for a time and that would indicate that the firewall isn't blocking. But we are back to what appears to be conflicting processes for web traffic scanning.
Did AVG alter the IE (or firefox) proxy setting to be able to scan the internet traffic, I believe I have seen this before in the forums and that change wasn't reversed when it was uninstalled.
Check the Internet Options, Connections tab, Settings button, Proxy Server, if there is anything there remove it (unless of course you have to use a proxy ?).
Whilst this is going on, you are scaring me to death, so I have no idea what it is doing to you. You keep mentioning switching off The on-Access Protection leaving you with your trousers round your ankles metaphorically speaking, Just Terminate the Web Shield as that would be the only avast element involved and it leaves the standard shield as a last line of defence.
avast has 7 shields/providers, right click the avast 'a' icon and hover over the Pause provider and from the list select the Standard Shield, this is reversed by right click the avast 'a' icon, and from the Resume provider select the Standard Shield. This however shouldn't be required as contrary to what you said IE and FF are opening, my suggestion was to allow them to start and the re-setting home bake of your browser was to avoid it trying to connect when you had no defence.
-
David,
Thanks for your ongoing interest in this annoying problem of mine.
I checked the Proxy Server - there is nothing there.
I terminated Avast's Standard Shield as you suggested, and immediately got the "Internet Explorer cannot display the webpage" page when I tried IE, and the "Connection Interrupted" for Firefox. I then tried terminating the Web Shield instead - same result. Then terminated both the Web Shield and the Standard Shield - same result. So all these combinations render the web unsurfable while On-Access Protection Control is on.
I know that is not what you expected. Does this new information, including the absence of any Proxy, give any other clues as to what could be going on, please?
-
The suggestion on the standard shield is totally unrelated to the problem (I also said Pause not Terminate), as I said it was only suggested because of your comment that you couldn't 'open' IE or FF not that you couldn't browse when they were 'open.' So the suggestion related to possible blocking of the executables that are run for IE or FF.
The Termination was related to the 'Web Shield' as I said:
No problem, glad I could help. Welcome to the forums.
So you will have to read carefully or you could leave yourself unprotected.
I now want you to ensure the standard shield is running, reverse what you did and do the same for the web shield so they are both running.
I want you to manually set your browsers to use the avast proxy and see if that makes a difference. The IE one may relate to IE6 but I'm sure you can find the appropriate settings if it differes in the version you are using.
For IE - broadband users: - Tutorial - Web Shield Proxy Set-up for IE (http://www.avast.com/files/tutorials/ws_ieproxy.htm)
For IE - dialup users - Tutorial - Web Shield Proxy Set-up for IE (Dial-up) (http://www.avast.com/files/tutorials/ws_ieproxy_dialup.htm)
For Firefox users - Tutorial - Web Shield Proxy Set-up for Firefox (http://www.avast.com/files/tutorials/ws_ffproxy.htm)
That's me for the night, almost 2:45am here.
-
David,
I meant "paused", not terminated. I do read your advice carefully - my carelessness was in my phrasing when responding. I am, as you may have noted, terminologically challenged, although I am fairly well experienced on computer matters generally...but as with many non-techies, there are yawning gaps in my knowledge that may make me appear more ignorant than I am.
I am new to Avast, having used AVG without a hitch for years. The reason I made the change was that AVG was taking a long, long time to scan, and several folk I trust who are up with the tech side of things recommended Avast as a superior and more streamlined free alternative to AVG. So, I ask for your patience. I am close to abandoning Avast, simply because I can't resolve whatever this current problem is with the browsers, and as you say, it is dangerous to leave myself unprotected when I am forced to stop On-Access Protection any time I need to browse (like now!).
I really do want to try to get this bloody problem fixed, though.
I have tried setting FF to use the Avast proxy - I couldn't browse with FF at all, whether On-Access Protection was on or off!
So, getting nowhere fast.
If you or anyone else have any further suggestions, I'll gladly follow them. In the meantime, I'll uninstall and reinstall Avast later, and see if that works now that the remnants of AVG appear to be gone.
Cheers
-
Hi,
Here's a couple of long shot ideas, which may help for troubleshooting.
1) You used Revo Uninstaller for AVG. It is easy when using this uninstaller to delete more reg values than should be deleted, unless the tree for the reg entries is expanded, and only the bolded entries are removed.
Solution: -Uninstall and re-install the programs subsequently affected, or
-System restore to prior to the removal date, then re-run the AVG remover, or
-Restore the registry from the backup (you make backups, of course?) then re-run AVG remover.
If that is not applicable,
2) You have used ZoneAlarm in the past. Is it fully uninstalled?
Any other security software installed in the past?
Are you running (or using the "run as" command) as an administrator when installing/uninstalling software?
-
Hi Tarq57, and thanks for your comments.
I will try uninstalling and reinstalling Avast later (next few hours - short of time right now).
ZoneAlarm does appear to be completely uninstalled. A search didn't pick up any files, and I can't see any remnants in the C drive.
No other security software installed in the past (not anti-virus, that is). I have tried Spyware Blaster (uninstalled now). I currently run Spybot Search and Destroy and Adaware. Other than Avast (and AVG until recently), that's it.
-
OK simply saying it didn't work as that doesn't give much in the way of detail and the main issue is exactly what you entered (localhost and 12080 some missed one of the 0s off).
Earlier I asked if you had to use a proxy to connect to the internet (ISPs sometimes insist or using a web accelerator) ?
Though what is really getting me is everything is so intermittent it works, it doesn't work as many of the suggestions we give including the one above are to correct fixed permanent problems.
So the problem in applying a fix/suggestion when it is an intermittent problem, could introduce its own issues and that has me totally stumped (and you have to ensure that you reverse any change that doesn't work or we could be fighting the change).
-
David,
I entered localhost and 12080, as instructed.
I don't think I use a proxy to connect to the net. Not sure where to check this, though.
The problem as described isn't really intermittent - only once, for two page downloads using FF, has browsing been as normal when On-Access Protection Control has been on. The rest of the time - which is over a week now - the problem has been as described at all times when On-Access Protection Control has been on, and browsing has been normal at all times when On-Access Protection Control is off.
There is one other issue I have been experiencing that I haven't mentioned until now because I assumed it was not related to Avast. I mention it now in case it does offer some clue to you tech-initiated folk as to what could be amiss with Avast and the browsers. It has been occurring for 2 weeks or so - ie: before I changed from AVG to Avast. Anyway, it's this: autologin is not working in FF.
When this first started happening, which was suddenly one day, for no apparent reason, it also affected IE7. Sites I had been autologging into for literally months or longer suddenly asked me to log in. My username and PW were already filled out, but even when I ticked the box asking the browser to keep me logged in, it failed to do so next time I brought up the site(s). I restored the default settings in IE7, and that resolved the problem for that browser. The problem remains for FF, despite uninstalling and reinstalling it. Bewilderingly, last night I got a notice that FF had completed some upgrade (automatically...that is, I didn't manually upgrade it), and soon after, autologin started working in FF. This morning, it had stopped working again in FF. IE7 remains OK for autologin.
I was wondering if I have some virus or spyware messing things up, but AVG did not detect anything, and I ran a thorough check including archives when I downloaded Avast - again, nothing detected. I've run scans with Adaware and Spybot, also, and they have detected nothing.
Maybe I need to reformat Win XP. I bloody hope not, but I'm starting to get desperate. I'd better log off now, because as you know, I am unprotected any time I am online. Will check back later after I've uninstalled and reinstalled Avast.
Thanks to all for your help to this point.
-
Well the problem with autologin (though I have no idea what one you might be using, I have never used it) I always log on to sites and don't use a password, login manager, etc. but anything that is common for both browsers is possibly a factor. If you disable that would it make any difference.
I'm sorry as I'm totally clutching at straws here as I have never experienced what you are experiencing in the five years I have been on the forums. For me intermittent is obviously different something either works or it doesn't no change, so when it works even for a short period without having done something. That I call intermittent especially when for no reason it fails again.
Well if you had to use one I would have thought it would be in the IE connection settings.
FF 3.0.10 has just been released so that may have been your auto update (I don't have this enabled, I'm on dial-up and need to control what connects and what updates, etc.).
You could try these tools as adaware is IMHO a waste of hard disk space and S&D I'm no great fan of either.
If you haven't already got this software (freeware), download, install, update and run it and report the findings (it should product a log file).
- 1. MalwareBytes Anti-Malware, On-Demand only in free version http://download.bleepingcomputer.com/malwarebytes/mbam-setup.exe (http://download.bleepingcomputer.com/malwarebytes/mbam-setup.exe), right click on the link and select Save As or Save File (As depending on your browser), save it to a location where you can find it easily later.
- 2. SUPERantispyware (http://www.superantispyware.com) On-Demand only in free version.
-
Hi again, David.
The "autologin" I referred to is just the facilities inbuilt in IE and FF - I don't have any specific separate autologin programs.
I uninstalled Spybot S&D, Adaware and Avast. Then I reinstalled Avast. The problem persists as before with both browsers.
I downloaded, installed and updated MalwareBytes Anti-Malware and ran it. It detected a single file, Rogue.Antispyware, which was in my Applications folder. I got rid of it using MBAM. Here is MBAM's report:
Malwarebytes' Anti-Malware 1.36
Database version: 2059
Windows 5.1.2600 Service Pack 2
30/04/2009 12:55:12 AM
mbam-log-2009-04-30 (00-55-12).txt
Scan type: Quick Scan
Objects scanned: 97053
Time elapsed: 6 minute(s), 44 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 1
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
C:\Documents and Settings\Ross B\Application Data\AntispywareBot (Rogue.AntiSpywareBot) -> Quarantined and deleted successfully.
Files Infected:
(No malicious items detected)
------------
Now I am about to install SUPERantispyware. If nothing else, at least you have the satisfaction of being responsible for my binning SpyBot S&D and Adaware in favour of the two programs you recommended!
Sheeyit, I just wish this damned browser issue with Avast could be resolved though.
-
Update! :) :) :)
I just installed Superantispyware, ran it, and it detected 17 Adaware cookies. I quarantined them, and now both IE and FF can be used to browse as normal WITH Avast's On-Access Protection Control ON!!!
Maybe, at long, long last, the issue is finally resolved. It's hard to believe the problem was caused by Adaware cookies, but that's the only conclusion that can be made from where I sit...
Going to bed now (it's nearly 2am here), so fingers crossed everything will still be fine in the morning. Will check back in to let you guys who have so kindly offered your advice and recommendations throughout this long thread know the situation. Sincere thanks to all. :D
-
Re Reply #25
There are some applications that can do the login stuff and that was something I was more concerned with. Since using two different methods/browsers to login that fails, seems to point in a totally different direction than say a common application for logon.
There is certainly some very strange goings on in your system but what is the question, I haven't seen the like of.
Re MBAM results, good that it found a rogue application, though I'm surprised as these normally throw up pop-ups stating your infected/vulnerable, etc. and you would notice that. Though it is possible that it had other effects, possibly to make you consider (if pop-ups were present) buying it, etc.
Re Reply #26
The tracking cookies are a very minor issue and certainly not a security one, so once again I'm surprised (twice in one post) if they could have had this effect.
So it may be that the rogue detected by MBAM or possibly adware messed with your connections.
Thankfully it seems to be clear, fingers crossed and you now have two of the top anti-spyware/malware applications to compliment avast.
-
I can't believe this. Just logged on this morning and the problem is back - while On-Access Protection Control is on, I get page load errors with IE7 ( "Internet Explorer cannot display the webpage etc") and FF "Connection Interrupted etc". What can I say? SHIIIIIIT!
-
Maybe it's time to post a HijackThis log. http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis (http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis)
I feel a bit rude suggesting this, as I do not have the training to back it up by being able to actually analyze the log.
But there are folk at this forum who do have that ability.
-
Unfortunately I don't know what to say other than what I did earlier what was found in the scans I wouldn't have though would have been the cause so were back to this intermittent on off problem.
Whilst it isn't ideal the only alternative would be to terminate the web shield. If doing this personally I would stop using IE and only use firefox with the NoScript add-on installed.
You say you have reinstalled before, but I don't know if you have done a clean reinstall, so give this a shot.
Download the latest version of avast http://www.avast.com/eng/download-avast-home.html (http://www.avast.com/eng/download-avast-home.html) and save it to your HDD, somewhere you can find it again. Use that when you reinstall.
Download the avast! Uninstall Utility, find it here (http://www.avast.com/eng/avast-uninstall-utility.html) and save it to your HDD (if you didn't already do that). - 1. Now uninstall (using add remove programs, if you can't do that start from the next step), reboot.
- 2. run the avast! Uninstall Utility, reboot. If step 1 failed it may be necessary to run this from safe mode, once complete reboot into normal mode.
- 3. install the latest version, reboot.
The HJT may show some possible connection issues.
Other than that I have no idea what else to suggest.
-
David, you have been tremendous in your efforts to assist - thank you. I've uninstalled and reinstalled several times now, as you suggest (although only once used the avast! uninstall utility), but after seeing what sort of responses come back re the HJT report, I'll try again if necessary.
tarq57 - not rude at all! I am extremely grateful for any suggestions that might lead to a resolution of this situation, which is now REALLY getting under my skin.
So thanks! I've done as you suggest and have the HJT report, but can't post it here as the message exceeds the maximum allowed length of 10000 characters! Can I attach it, or something?
-
Attach it by posting it in two (or if needed, three) posts.
-
When you click the Reply button, there is an Additional Options link, this expands the options to attach a file, that can be an image file or a text file (.log or .txt).
-
Thanks, David - HJT report attached herewith.
-
Fix:
O3 - Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file)
This is the Ask toolbar considered adware by some, but it doesn't appear to be active so the entry should be removed.
Is this your ISP ?
Amnet IT Services Pty as that is what the IP address indicates in the O17 - HKLM\System\CCS\Services\Tcpip entry is.
Other than those I don't see anything obvious, certainly not anything that might be related to this problem.
-
Hi again, David.
How do I remove the O3 - Toolbar, please? I'm not sure what it is or where it is!
Amnet IT Services Pty is my ISP, yes.
Bloody hell, it seems this problem is weird in extremis. It ain't no virus, it ain't spyware, it ain't anything picked up by HJT - WTF is it? Sigh...
Thanks so much for your ongoing assistance, anyway, David.
-
Run HJT again (close any other windows except HJT), tick the box to the left of the suspect entry you wish to fix, click the Fix Selected Button.
-
I have been messing around with the Avast settings trying to isolate whatever might be causing the problem with my browsers, and find that stopping Webshield returns the browsers to normal function. UNtil now, I thought turning off On-Access Protection Control was the only way to get the browsers browsing normally.
I subsequently noticed on the Avast FAQ page, there is the following question and answer:
Q: I have installed avast! and I can no longer browse the Web. How can I solve this?
A: Check your firewall configuration. For the correct operation the Web Shield process (ashWebSv.exe or aswWebSv.exe) needs a permission to access the Internet (TCP port 80) and a permission to act as a server and accept incoming connections from localhost (the local machine) on TCP port 12080.
I have the Windows XP (Home, SP2) Firewall. Can anyone give me simple instructions for granting the Web Shield process "a permission to access the Internet (TCP port 80) and a permission to act as a server and accept incoming connections from localhost (the local machine) on TCP port 12080" please? Maybe not having done this is the problem??
-
The XP firewall has zero outbound protection so there is no need to apply anything to it.
The FAQ instruction related to firewall that monitor outbound traffic.
-
OK, ta David.
Latest update - browsers behaving normally today with On-Access Protection on! Dunno why, don't care. Hopefully whatever the problem was has somehow resolved itself. Fingers firmly crossed...
-
You're welcome, my fingers are crossed too, I hate mysteries though, intermittent ones even more so.