Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: bahman2000 on May 31, 2009, 06:51:22 PM

Title: web shield slows/stops browsing
Post by: bahman2000 on May 31, 2009, 06:51:22 PM
Hi,

I'm running a stock Windows XP SP3 Home with Avast Home and Windows Firewall. Just did a full system factory settings recovery from the hidden partition.

With Avast Web Shield running, opening any web pages either does not work at all or the pages do not load open; the status bar takes forever after about 80-90% of the page load. This happens on Firefox and IE.

The system originally had McAfee preloaded. Before installing Avast for the first time, I removed McAfee with Add/Remove, then followed up with MCRP.exe.

I tried disabling the Windows Firewall to no effect.

Last night I did a full uninstall of Avast with the Avast Removal Tool; then a fresh install with a freshly downloaded package. No effect.

The only way for me to have Avast ON and browse the web is to stop the Web Shield and turn the Regular Shield to Max sensitivity.

Is my workaround a safe enough solution?

Are there other ways to get this working?
Title: Re: web shield slows/stops browsing
Post by: mkis on May 31, 2009, 07:19:28 PM
You could find some info here

http://www.google.co.nz/search?hl=en&q=MCRP.exe.&btnG=Google+Search&meta=&aq=f&oq= (http://www.google.co.nz/search?hl=en&q=MCRP.exe.&btnG=Google+Search&meta=&aq=f&oq=)

if you havent already been there

Someone should reply to your post soon.
Title: Re: web shield slows/stops browsing
Post by: bahman2000 on May 31, 2009, 08:42:06 PM
You could find some info here

http://www.google.co.nz/search?hl=en&q=MCRP.exe.&btnG=Google+Search&meta=&aq=f&oq= (http://www.google.co.nz/search?hl=en&q=MCRP.exe.&btnG=Google+Search&meta=&aq=f&oq=)

if you havent already been there

Someone should reply to your post soon.

You posted a link to a google nz search result for MCRP.exe. I guess it is a suggestion to run the MCRP.exe to remove McAfee.

I appreciate your trying to help! I did run MCRP.exe like I mentioned in the original post. Unfortunately it does not help.  :'(

Title: Re: web shield slows/stops browsing
Post by: mkis on May 31, 2009, 09:03:46 PM
The search results tell you is that using MCRP.exe does not necessarily solve your problem. I would add particularly if McAfee had been installed as part of factory package.
Title: Re: web shield slows/stops browsing
Post by: bahman2000 on May 31, 2009, 09:36:57 PM
The search results tell you is that using MCRP.exe does not necessarily solve your problem. I would add particularly if McAfee had been installed as part of factory package.

Thanks! You see how this response was much more constructive and actually told me something useful. Can't say that for a google search result. But google is promising intelligence in their searches soon, fingers crossed!

I should have mentioned that I did a significant amount of research on this issue; I read through dozens of relevant threads on this forum; performed about 4 complete factory settings restores, trying to get this to work.

In this last instance I tried Revo Uninstaller before MCRP as well. Removed only relevant registry keys, selecting them individually by drilling down.

After all that I still can't get proper browsing performance out of my browsers, not with Web Shield running.
Title: Re: web shield slows/stops browsing
Post by: mkis on May 31, 2009, 10:10:33 PM
I've done restores to factory settings on early IBM laptops and more recently a Compaq laptop (UK model) and both went okay with one run. I am left with the impression that this is a good option and I would not hesitate to do it again. The IBMs had 40GB HDD with 10GB of that an IBM tools package which I left alone and they had Norton lifetimes (so far, a year has passed) which are still updating and running fine. But the web link to IBM support is defunct. The Compaq was reset with another six months Norton as part of the restore process and I havent seen it since. So as far as uninstalling antivirus, I didn't get to do it on any of these jobs, and unfortunately I cannot really help you there.

Just a thought. Did you run the Evidence Remover in Revo UnInstaller tools. It takes ages to complete its cycle so it must do something. If I'm really having trouble bringing up a good defrag, I resort to Evidence Remover and it works. (Have to say, though, I do worry about it a bit, but so far so good).   
Title: Re: web shield slows/stops browsing
Post by: mkis on May 31, 2009, 10:20:37 PM
By the way, the IBMs were 2002 so probably born in a different age than your computer.

And I'm not sure whether McAfee ships from factory the way that Norton does. We dont get much of that here anyway, not that I've noticed.
Title: Re: web shield slows/stops browsing
Post by: bahman2000 on June 01, 2009, 07:11:12 AM
It appears that there is no real solution for the dismal performance of web browsers due to the Web Shield slowdown issue.

Someone, please answer me: by disabling the Web Shield and switching the sensitivity of the regular shield to Max, am I still being safe? What other alternative configurations could I try?
Title: Re: web shield slows/stops browsing
Post by: YoKenny on June 01, 2009, 10:25:44 AM
How much RAM does the system have and what is the CPU type and speed?
Title: Re: web shield slows/stops browsing
Post by: Tarq57 on June 01, 2009, 10:38:26 AM
Personally I wouldn't want to disable the webshield component. Avast scores very highly for prevention, and well for removal. My point being that prevention is better than cure, and the webshield a significant part of that prevention.
There must be something else at play; the presence of the webshield doesn't seem to affect my browsing speed perceptibly.
System, RAM and CPU might be factors.
Pre-loaded applications that might also be connecting might be factors, I guess. Depends what has been loaded at the factory, and how that might interface with the web.
PCDecrapifier (http://www.pcdecrapifier.com/) might be some use, but it's totally a stab in the dark.
You might want to consider posting a HijackThis log, it might give the experts here (or even me) an idea of what is at play.
Title: Re: web shield slows/stops browsing
Post by: onlysomeone on June 01, 2009, 10:54:17 AM
Hi bahman2000!

I suggest the following:

-Uninstall Avast via the control panel.
-Download and run the avast! uninstall utility (http://avast.com/eng/avast-uninstall-utility.html).
-Download and run CCleaner (http://www.filehippo.com/download_ccleaner/).
-Download a new installation file (http://avast.com/eng/download-avast-home.html) and install avast! again.
-Then post back the results, please. ;)

yours
onlysomeone
Title: Re: web shield slows/stops browsing
Post by: bahman2000 on June 01, 2009, 11:04:54 AM
It's a brand new Acer Aspire One D150, with 1.6GHz Intel Atom N270, 1GB RAM, well above the Avast system requirements http://avast.com/eng/system-requirements-avast-home.html

Kudos to Acer for shipping only a moderately "crapified" system. Other than McAfee, Google Desktop/Bar and eSobi, everything else is legit.

I personally removed all so-called crap with Revo + CCCleaner, further scans with Spybot S&D, AdAware, HijackThis.

I set a virtual memory static paging file to 2,048MB; processor resources allocated for Background Services (I tried Programs too, no effect). Visual Effects set for Best Performance. Error Reporting and Desktop Cleanup services turned off.
Title: Re: web shield slows/stops browsing
Post by: bahman2000 on June 01, 2009, 11:05:52 AM
Hi bahman2000!

I suggest the following:

-Uninstall Avast via the control panel.
-Download and run the avast! uninstall utility (http://avast.com/eng/avast-uninstall-utility.html).
-Download and run CCleaner (http://www.filehippo.com/download_ccleaner/).
-Download a new installation file (http://avast.com/eng/download-avast-home.html) and install avast! again.
-Then post back the results, please. ;)

yours
onlysomeone

No effect :(
Title: Re: web shield slows/stops browsing
Post by: bahman2000 on June 01, 2009, 11:09:25 AM
Personally I wouldn't want to disable the webshield component. Avast scores very highly for prevention, and well for removal. My point being that prevention is better than cure, and the webshield a significant part of that prevention.
There must be something else at play; the presence of the webshield doesn't seem to affect my browsing speed perceptibly.
System, RAM and CPU might be factors.
Pre-loaded applications that might also be connecting might be factors, I guess. Depends what has been loaded at the factory, and how that might interface with the web.
PCDecrapifier (http://www.pcdecrapifier.com/) might be some use, but it's totally a stab in the dark.
You might want to consider posting a HijackThis log, it might give the experts here (or even me) an idea of what is at play.

I've been an Avast Evangelist in my professional career as an IT Consultant for many years now. Believe me, I understand. This is the only reason I am still trying to find a solution. Any other person would have switched products by now.

This machine however is useless with the Web Shield on!  :'(

Title: Re: web shield slows/stops browsing
Post by: Tarq57 on June 01, 2009, 11:19:59 AM
You sure have to wonder why this issue does seem to affect what seems to be a relatively small number of computers.
Can't be just luck.
Anyone who finds the common factor would probably be promoted to Uber-something.

I know you're an IT consultant, but what do you think about the idea of a HJT posting? Worth it or waste of time?
Title: Re: web shield slows/stops browsing
Post by: bahman2000 on June 01, 2009, 11:33:30 AM
No probs with the HJT, just need to get my hands on that machine - it's my neighbors, he just bought it and gave it to me to set it up for him; i spent 3 days trying every single iteration of this avast issue; this whole ordeal makes me feel bad about taking his time and recommending a product that hinders his experience :(

You say this affects a very small amount of users... do a search on this forum for Browsing. Dozens of threads, lots of blame on Zone Alarm or McAfee or AVG; no effective solutions :( If there was one, I am sure you'd proudly tag it FIXED and make it sticky!

An average user just gives up and switches products, only 0.01% can be bothered with seeking help on the forums, of those maybe 10% are patient enough with the "remove this, clean that, reinstall, reformat..." back and forth, that doesn't seem to lead anywhere.
Title: Re: web shield slows/stops browsing
Post by: bahman2000 on June 01, 2009, 12:40:56 PM
HJT log hopefully attached to this message.
Title: Re: web shield slows/stops browsing
Post by: YoKenny on June 01, 2009, 12:53:00 PM
See:
http://www.superantispyware.com/definition/mswsock2

Suspicious:
O10 - Unknown file in Winsock LSP: c:\windows\system32\mswsock2.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mswsock2.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mswsock2.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mswsock2.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mswsock2.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mswsock2.dll

Download SUPERAntiSpyware then update it then run a scan.
Title: Re: web shield slows/stops browsing
Post by: DavidR on June 01, 2009, 06:01:30 PM
Yes looks like that system is already infected, also see http://www.systemlookup.com/search.php?type=filename&client=malwaresearch-ff&search=mswsock2.dll (http://www.systemlookup.com/search.php?type=filename&client=malwaresearch-ff&search=mswsock2.dll).

Check the suspect file/s at: VirusTotal - Multi engine on-line virus scanner (http://www.virustotal.com/) and report the findings here in the topic, the URL in the Address bar of the VT results page.

If multiple scanners detect this and avast doesn't - Send the sample to virus@avast.com zipped and password protected with the password in email body, a reference to this topic (give URL) and undetected malware in the subject.
 
Or you can also add the file to the User Files (File, Add) section of the avast chest (if it isn't already there) where it can do no harm and send it from there. A copy of the file/s will remain in the original location, so you will need to take further action and can remove/rename that.
 
Send it from the User Files section of the chest (select the file, right click, email to Alwil Software). It will be uploaded (not actually emailed) to avast when the next avast auto (or manual) update is done.
Title: Re: web shield slows/stops browsing
Post by: bahman2000 on June 01, 2009, 10:40:23 PM
See:
http://www.superantispyware.com/definition/mswsock2

Suspicious:
O10 - Unknown file in Winsock LSP: c:\windows\system32\mswsock2.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mswsock2.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mswsock2.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mswsock2.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mswsock2.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mswsock2.dll

Download SUPERAntiSpyware then update it then run a scan.

Did that. One was sitting in %windir%\system32\ and was running too. Removed, afterwards my Broadcom wifi connects but can no longer negotiate an IP address. HJT log attached.

I restored the file for now.
Title: Re: web shield slows/stops browsing
Post by: lukor on June 03, 2009, 11:25:36 PM
You also try to run the following command to restore default LSP configuration in Winsock.

Start Command Line window (Press START button, click start, type "cmd" and press enter)

type:

netsh winsock reset

(and press enter)

It should reset the Winsock LSP catalog to the default state, removing possibly reference to deleted malware and returning there possible deleted entries - this may help.
Title: Re: web shield slows/stops browsing
Post by: bahman2000 on June 11, 2009, 06:12:58 PM
You also try to run the following command to restore default LSP configuration in Winsock.

Start Command Line window (Press START button, click start, type "cmd" and press enter)

type:

netsh winsock reset

(and press enter)

It should reset the Winsock LSP catalog to the default state, removing possibly reference to deleted malware and returning there possible deleted entries - this may help.

I updated the super-duper-antispyware, removed the detected files.

Thanks to the above I was able to regain wifi connectivity.

Uploaded the suspect file to VirusTotal. 0/39 hits.
http://www.virustotal.com/ru/analisis/2d62bba2e9012e4baa23a07942836a9e02edcc8d6a1a9b4b2c8dc4240a2d9129-1244733307 (http://www.virustotal.com/ru/analisis/2d62bba2e9012e4baa23a07942836a9e02edcc8d6a1a9b4b2c8dc4240a2d9129-1244733307)

Since zero out of 39 utilities said this was a virus, should I report a False Positive to SuperAntiSpyware?

Enabled Web Shield. Kills my browsing.

Disabled Web Shield.

Any more ideas?
Title: Re: web shield slows/stops browsing
Post by: bahman2000 on June 12, 2009, 04:39:50 PM
there are about 10 related threads just on the first two pages of this forum.

there are dozens that have been left to age.

there is less than a handful of those where the user said: great, my issue has been fixed !


what needs to be done for this issue to be seriously looked at by avast product engineering?

what is a good alternative to avast? avg? avira?
Title: Re: web shield slows/stops browsing
Post by: Lisandro on June 12, 2009, 04:43:22 PM
what is a good alternative to avast? avg? avira?
Avira is better than AVG, imho.
Title: Re: web shield slows/stops browsing
Post by: onlysomeone on June 12, 2009, 04:55:27 PM
what is a good alternative to avast? avg? avira?
Avira is better than AVG, imho.

AVG has bad detection rates...
Avira has very annoying pop-up advertisement... but good detection rates...
So the best one for sure would be avast! (a very good detection rate and no pop-up-ads...) ;)
Title: Re: web shield slows/stops browsing
Post by: bahman2000 on June 12, 2009, 05:11:30 PM
what is a good alternative to avast? avg? avira?
Avira is better than AVG, imho.

AVG has bad detection rates...
Avira has very annoying pop-up advertisement... but good detection rates...
So the best one for sure would be avast! (a very good detection rate and no pop-up-ads...) ;)

let's operate on the apparent conclusion that avast unfortunately does not work for me and many others !
Title: Re: web shield slows/stops browsing
Post by: mkis on June 12, 2009, 05:16:09 PM
Quote
there are about 10 related threads just on the first two pages of this forum.

there are dozens that have been left to age.

there is less than a handful of those where the user said: great, my issue has been fixed !


On the contrary.

You really have to speak for yourself.
Title: Re: web shield slows/stops browsing
Post by: YoKenny on June 12, 2009, 10:00:18 PM
let's operate on the apparent conclusion that avast unfortunately does not work for me and many others !

avast! celebrates 80 million registered users:
http://www.avast.com/eng/news.html

Sorry avast! does not work for you.