Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: hake on January 15, 2011, 11:02:30 PM
-
Web Shield seems to be corrupting downloads - Avast free 5.1.889
When I stop Web Shield, downloads are not corrupted. The problem seems to apply to .exe files. Downloaded installation files have been failing MD5 or are crashing when run. When I restart Web Shield, the problem returns.
The curious thing is that general internet traffic seems unaffected or at least no errors are apparent. This problem exists on all four of my Windows XP Pro SP3 systems.
-
Web Shield seems to be corrupting downloads - Avast free 5.1.889
When I stop Web Shield, downloads are not corrupted. The problem seems to apply to .exe files. Downloaded installation files have been failing MD5 or are crashing when run. When I restart Web Shield, the problem returns.
The curious thing is that general INTERNET traffic seems unaffected or at least no errors are apparent. This problem exists on all four of my Windows XP Pro SP3 systems.
Hello hake: This seems extremely peculiar that you would have the exact same (Avast??) issue on all 4 machines.
Have you tried an uninstall and 'Clean install' of Avast on one of your machines and see if anything changes on that machine?
As you can see from my signature I run Avast Pro on both my machines and have never seen an issue like this. As a matter of fact, I've never had a download of executables and Web Shield issue ever. ???
-
Can you give us an example of the URLs you were downloading from?
If you download the same file repeatedly, does it always give the same result for you, or is it random?
Did you try to compare (e.g. the hash of) the file downloaded with and without the Web Shield?
-
I have done as requested and reinstalled by uninstalling then using aswclear5.exe then finally giving the registry a clean with cclean and PC Tools Registry Mechanic. I then did a clean install using Avast 5 free setup_av_free.exe (v5.1.889).
The problem remains. It is late and I must sleep. I had no problem with v5.0.677. I have only become aware of a problem since v5.1.889 but cannot be absolutely certain that it did not exist with v5.1.864. I was first aware that something was amiss when I tried to do the weekly update of Spybot - Search and Destroy last Wednesday (January 12) and wondered why I could not download good updates.
So far, I am only aware of .exe files being affected.
I can try reverting to v5.1.864 tomorrow.
-
Version 5.1.864 contained some problems, it's certainly not what you want to revert to.
Could you please answer my questions? (when you have a while)
-
Problem also occurs with v5.1.864. I intend to revert to v5.0.677, the use of which did not coincide with this problem.
-
Igor, one of the avast developers is trying to help you (after all that is why you came to the forums) so that you can use avast 5.1, which is better than avast 5.0.
So answering his questions helps him to see if there is a fault/bug that can be rectified and may also help others.
-
Yes, I realise that. I am struggling with incompatibility between latest database updates and v5.0.677. Database update proclaimed to have invalid file. Looks like I cannot revert.
It's one o'clock in the morning. I am tired and need to sleep so my head works properly. The evidence I am trying to gather is sparse and inconsistent.
-
Thanks for looking at this Igor. Sorry I didn't supply more help last night at 0100 hours.
Example download 'detection updates' (filename: spybotsd_includes.exe)
from URL http://www.safer-networking.org/en/download/index.html
I get a different MD5 hash for each copy downloaded when Web Shield is ON. I have seen correct MD5 hash when Web Shield is ON but it rarely happens.
When Web Shield is OFF, MD5 hash is the same for each copy of the file.
The problem seems to be general to any downloaded .exe file. I have not noticed if any other file type is also affected.
I am running a fully patched Windows XP Pro SP3. I use Agnitum Outpost Firewall Pro 7.0.4 (3412.520.1245). There is no other real time security software. Avast File System Shield is set to exclude the Agnitum folder in Program Files. All other installed security software is for on-demand scanning only.
Oops! I forgot to say that I also use Trusteer Rapport (build 1005.71) and that the problem persists even when Agnitum Outpost Firewall Pro Web Control feature is disabled.
I do my best to supply further information.
-
yep that's a weird and interesting issue... never saw that happen but I want to follow the topic.
-
just checked with SS&D download and web shield on, sorry man but MD5 matches here, see screen shots
-
That is not the MD5 hash shown on http://www.safer-networking.org/en/download/index.html which is '4F993A9A08BC97C0BCEBE99592FD033F'.
The important thing for me is that I am now aware of a problem so I can anticipate and work round it when I need to download a .exe file. I was puzzled for a few days when downloaded .exe files would not execute. Some downloads do work, for instance the very recent Google Chrome update worked fine so, presumably, not all downloads pass through Web Shield / port 12080.
In spite of this, I am very pleased with Avast v5.1.889. The improvements to Behaviour Shield are especially welcome since Threatfire appears to be dead in the water (Threatfire has been removed from my systems).
-
That is not the MD5 hash shown on http://www.safer-networking.org/en/download/index.html which is '4F993A9A08BC97C0BCEBE99592FD033F'.
you must be kidding me, I'm talking about s&d.exe, and again as shown on the page and reported on my screen shot above MD5 matches perfectly.
Your referred to MD5 is a database update, and I didn't test that ::) ... but now I did, and it matches too ;D ... sounds like you got a bit mixed up didn't you :)
-
I was talking about Detection updates (I clearly stated this), not the product installation package. Can you please check MD5 hash on detection updates for 12 January (filename: spybotsd_includes.exe). The MD5 hash '4F993A9A08BC97C0BCEBE99592FD033F' is for that.
-
I was talking about Detection updates (I clearly stated this), not the product installation package. Can you please check MD5 hash on detection updates for 12 January (filename: spybotsd_includes.exe). The MD5 hash '4F993A9A08BC97C0BCEBE99592FD033F' is for that.
jesus christ I just did!!! ::) ... if you read MD5's as carefully as you read posts here we got a problem.
-
Sorry I spoke. I made a mistake.
-
I have most reluctantly replaced Avast with AVG. I don't enjoy using AVG but it works so I have no choice. As soon as it was in use, the download problems ceased.
I am keeping a machine with Avast installed so I can assess new versions with a view to continuing with Avast when I believe that the problem has been cleared - soon I hope.
-
That's much better. Two systems with Avast :)
I like Behaviour Shield more and more.
The problems have been resolved by going back to system clones, thoroughly cleaning out Avast 5.0.677 then clean installing Avast 5.1.889 (no 5.1.864). It seemed impossible to get Avast working once 5.1.864 had been on the system and I did not have a recent clone to fall back on for that system.
One system refuses to behave with Avast so AVG it must be on that one. :'(
I wish I could be more informative. It's taken a whole day of intense activity to get to this.
-
That's much better. Two systems with Avast :)
I like Behaviour Shield more and more.
The problems have been resolved by going back to system clones, thoroughly cleaning out Avast 5.0.677 then clean installing Avast 5.1.889 (no 5.1.864). It seemed impossible to get Avast working once 5.1.864 had been on the system and I did not have a recent clone to fall back on for that system.
One system refuses to behave with Avast so AVG it must be on that one. :'(
I wish I could be more informative. It's taken a whole day of intense activity to get to this.
I can understand how frustrating and time consuming this process can be. :-\
If you should choose to try again later, I would suggest you follow these instructions to completely remove 5.1.864 and all its remnants.
Remenber, now that you installed AVG, you will have to be extremely diligent in removing that software and all of it remnants for any remnants left from any other security software you have had installed in the past can invariably corrupt the installation of Avast.
Here are the removal tools for AVG: http://www.avg.com/us-en/download-tools (http://www.avg.com/us-en/download-tools)
If you have had v.4.8 installed or v.5.0 or 5.1(beta) and had issues with the functioning of the version or an install of a newer version over top did not work properly, there is a possibility of File corruption. I have found this process to be extremely effective in many situations. Consider executing a ‘Clean Install’ using this format.
I recommend you follow these instruction in the order they are presented
Please download the latest official version of Avast (5.1.889) for the product you need and save it to your HDD:
Free AV: http://files.avast.com/iavs5x/setup_av_free.exe (http://files.avast.com/iavs5x/setup_av_free.exe)
Pro AV: http://files.avast.com/iavs5x/setup_av_pro.exe (http://files.avast.com/iavs5x/setup_av_pro.exe)
Internet Security: http://files.avast.com/iavs5x/setup_ais.exe (http://files.avast.com/iavs5x/setup_ais.exe)
Then please download aswClear5.exe (Clean up Utility) http://www.avast.com/uninstall-utility (http://www.avast.com/uninstall-utility) and save it to your hard drive where you can access it easily.
1. IN NORMAL MODE, Please go to Start/Control Panel/Add and Remove Programs and choose Avast and click Change/Remove, and then Uninstall from the options listed. Once the uninstall process is completed, Reboot your computer
2. When up and running, Reboot again, this time into 'SAFE MODE' and find the (aswClear5.exe) download you saved to your hard drive and run the Clean up tool. Make sure you first choose the version from the list supplied in the tool that you want to cleanup and then run the tool by choosing Uninstall; your computer will automatically reboot.
3. Once up and running in Normal Mode, if you choose too, follow the NOTE BELOW, before finally installing the latest version of Avast you saved to your hard drive.
Remember, if you have had more then one version of Avast installed on your computer, you need to choose the version in the Clean up tool that you have had installed on your system one at a time. If you have had both v.4 and v.5.0 installed, then you need to follow the ‘safe mode’ process twice; once for each version separately.
NOTE: It has also been suggested to run CCLeaner after you Reboot and before the Clean install of Avast.
CCLeaner is Free and Safe System Optimizing, Privacy and Hard Drive Cleaner> http://www.piriform.com/ (http://www.piriform.com/)
If you have any problems please feel free to let us know.
-
Thank you schmidthouse. Those were very helpful comments and I appreciate the time and trouble you have given to help me. I have a notion that something to do with the network connection or proxy (port 12080) must have gone wrong deep in the system. I was only able to fix the problem by restoring from clone backups predating the update installation of Avast free 5.1.864. My desktop systems have 2 drives so this is simple. It is less simple for the laptops which only have one drive each. I have clones but the restoration is more messy and I am going to do this in a few days time.
I wonder if Avast could consider a repair kit for those who have been unfortunate enough to have installed Avast 5.1.864. I think that the possibility of damage by 5.1.864 to lower level network stuff should be looked at.
I uninstalled Avast 5.0.677, also ran aswclear5.exe then clean installed Avast free 5.1.889. It works great. As I remarked earlier, I love the Behaviour Shield and with the probable demise of Threatfire, it is just what I need. It doesn't disturb system stability like Threatfire sometimes did.
Avast is sooooo elegant and fast compared with AVG. :)
-
Alas, the problem remains. I did all that I was advised to do by schmidthouse (a totally clean install) but to no avail.
I find that downloads which are not done through Web Shield (e.g. Malwarebytes updates, Spybot- Search and Destroy updates, SuperAntispyware updates, Avast updates and Outpost Firewall updates) seem not to be affected by the problem, only stuff coming through the Avast proxy port 12080.
I can do no more and await a later version.
While running Avast 5.0.677, the problem did not occur. Unfortunately, I cannot reinstate 5.0.677 because of database update incompatibilities ('invalid file' message). Yes, I installed it. No, it wouldn't accept the database updates.
I did try some web downloads with the out-of-date v5.0.677 and found that they worked, i.e. no file corruption. It would seem therefore that Avast 5.1.889 has not broken my systems.
I hazard a guess that this problem only affects Windows XP systems since Windows 7 users seem not to experience it.
Shame that Avast has this flaw. It performs beautifully but that is irrelevant when it cannot cleanly pass web downloads.