Problem with Downloads with WebShield [Outpost 1.0 FREE Issues]

[Sgt.Schumann]

Hi *,

the new WebShield runs fine, if I am just browsing.

But if I download larger files with Mozilla (1.7.5), I get the following error box just I few seconds before the end of the download:

"D:\Firefox Setup 1.0.exe.part could not be saved because the source file could not be read".

And the download is broken.

If I disable the WebShield, I do not get this error, and the download gets finished.

[EDIT]

I first thought that this a problem with Outpost Firewall but even with Outpost disabled,  I ALSO got this error and the broken download.

If I enable the detailed information in WebShield, I can see that the error always occurs when the Shield writes, that it scans the file.

[/EDIT]

My OS: WinXP Prof SP1

Has anyone a similar problem and/or a solution?

[DavidR]

Are you using a download manager or Mozilla 1.7.5 default downloader

The .exe.part shows that only a part of the file has been downloded, so you could try a resume.

[Sgt.Schumann]

Mozilla is my default downloader, because up to now it worked perfectly.

As I have written above, the error occurs exactly at the time when the WebShield is scanning the download.

[EDIT]

Now I tried downloading with Firefox 1.0.
Here the download freezes when the WebShield scans the file. Nothing is going on afterwards. I have to press "cancel" and the download is broken again.

[/EDIT]

[DavidR]

I'm using firefox and have used both its default downloader and star downloader and no problems.

What is you firewall? is there anything in the logs to indicate some form of bloacking and/or has ashwebsv.exe been allowed access (a bit of a clutch at straws moment as you wouldn't be able to browser if it wasn't).

[Sgt.Schumann]

I use Outpost Free (1.0).

Mozilla and the Avast! WebShield are completely trusted applications. There are also no entries in the "blocked"-logs. Even when I disable or completely shutdown Outpost I have the same problems.

Very strange 

BTW, I am sitting behind a SMC Barricade Router, but this shouldn't be the problem 

[DavidR]

That is very strange, are you using the latest avast version 4.6.603?
Have you tried downloading a smaller file, does this only happen with large downloads?

[Vlk]

So this happens AFTER the file is scanned (as seen in the WebShield's info display)?
Very strange. It almost sounds like avast thinks that the file is actually infected and aborts the connection...

BTW just for the sake of completeness, could you try downloading the file with IE?
BTW2 what is the URL, exactly?
BTW3 what if you disable HTTP scanning in the WebShield's settings, does that make any difference?


Thanks
Vlk

[Sgt.Schumann]

I am using Avast! Home 4.6.603.

The error message appears a bit later after the blue notification about scanning appears.

This error occures in Mozilla, Firefox and IE (tested 5 minutes ago).

The WebShield is not in silent mode.

If I disable "Web Scanning" in WebShield, the error does not occur. ("Intelligent Stream Scanning" still enabled).

The size of the files seems to play a role:
So bigger downloads produce the error, e.g.
http://dlc.sun.com/jdk/j2re-1_4_2_07-windows-i586-p.exe
or
http://dlc.sun.com/jdk/j2sdk-1_4_2_07-windows-i586-p.exe
or
http://download.mozilla.org/?product=firefox&os=win&lang=en-US

But not smaller downloads do not produce an error, e.g.
http://www.abisource.com/downloads/abiword/2.2.3/Windows/abiword-plugins-impexp-2.2.3.exe

Thanks in advance for your help ... strange problem 

[lee16]

The size of the files seems to play a role:
So bigger downloads produce the error, e.g.
http://dlc.sun.com/jdk/j2re-1_4_2_07-windows-i586-p.exe
or
http://dlc.sun.com/jdk/j2sdk-1_4_2_07-windows-i586-p.exe
or
http://download.mozilla.org/?product=firefox&os=win&lang=en-US

But not smaller downloads do not produce an error, e.g.
http://www.abisource.com/downloads/abiword/2.2.3/Windows/abiword-plugins-impexp-2.2.3.exe

I was just able to download them all.

WinXp Home SP2
Avast 4.6.603
Outpost 2.5 Pro (trial)
Firefox 1.0

EDIT: Ok was just able to download the files in mozilla 1.7.5 and IE 6.0.2900.2180

--lee

[Vlk]

Sgt.Schumann , please check the avast logs - especially the Error and Warning categories. Aren't there any related entries?
It seems to me that the scan is somehow failing and avast is aborting the connection..

Thanks
Vlk

[Sgt.Schumann]

I have checked the logs.

Last entries in warning.log:
19.02.2005   12:52:41   1108813961   SYSTEM   1524   Sign of "EICAR Test-NOT virus!!" has been found in "http://www.eicar.org/download/eicar.com" file. 
19.02.2005   12:53:50   1108814030   SYSTEM   1524   Sign of "EICAR Test-NOT virus!!" has been found in "http://www.eicar.org/download/eicar.com" file. 
19.02.2005   12:54:52   1108814092   SYSTEM   1524   Sign of "EICAR Test-NOT virus!!" has been found in "D:\eicar.com" file. 

This was yesterday, when I checked the functionality of WebShield.

Last entries in error.log:
17.01.2005   20:20:13   1105989613      1556   AAVM - initialization error: Unhandled exception in AavmProviderStop, STANDARD. 
19.02.2005   21:35:50   1108845350      1564   AAVM - initialization error: Unhandled exception in AavmProviderStop, STANDARD. 

Hmm, seems not to be related to the problem, or?.

And in the other logs there is also nothing suspicious.

[Vlk]

Just another guess - how much space do you have on your system partition?

[Sgt.Schumann]

Used: 12,3 GB
Free: 26,7 GB

[Vlk]

OK, that's no problem then... The problem is perfectly reproducible? I mean, it happens every time you try it?

[Sgt.Schumann]

Yes it is reproducible, I tried it (too) often today.

In the meantime I tried it also on my girl friend's notebook (similar configuration but XP Home instead of Prof. and same inet-connection via my router) and I got the same results.

I am wondering if not my router is the bad guy in this problem. But I haven't configured something unusual on this machine (SMC 2804WBR ... not so new but with latest firmware 11/04) ... but I doubt that the router is the problem