Author Topic: Problem with Downloads with WebShield [Outpost 1.0 FREE Issues]  (Read 30025 times)

0 Members and 1 Guest are viewing this topic.

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: Problem with Downloads (Mozilla) with WebShield (EDIT)
« Reply #15 on: February 20, 2005, 08:34:45 PM »
I doubt it as well. :) Especially if disabling HTTP scanning solves the problem.
Maybe I could send you a version with some extended logging to find out where the problem is.
If at first you don't succeed, then skydiving's not for you.

Sgt.Schumann

  • Guest
Re: Problem with Downloads (Mozilla) with WebShield (EDIT)
« Reply #16 on: February 20, 2005, 08:39:47 PM »
This would be fine.

I suppose you have my email-adress, otherwise please ask for it and i will send it to you.

Thanks for your help!!

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: Problem with Downloads (Mozilla) with WebShield (EDIT)
« Reply #17 on: February 20, 2005, 08:42:35 PM »
What time do you go to bed? I'm now watching an interesting TV show and won't be able to prepare it till 10pm :P :)
Is that OK? ;)
If at first you don't succeed, then skydiving's not for you.

Sgt.Schumann

  • Guest
Re: Problem with Downloads (Mozilla) with WebShield (EDIT)
« Reply #18 on: February 20, 2005, 09:11:02 PM »
No problem, Vlk!

The problem is not so important to destroy your spare time! (I really understand this, cause I am also workin' in IT-Business too ... and I am also "waiting for the weekend").

So, if you send me the version tomorrow ...  I am in office the whole day ... so if you send me the version in the evening, it is really o.k.

Thanks in advance.


Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: Problem with Downloads (Mozilla) with WebShield (EDIT)
« Reply #19 on: February 20, 2005, 09:45:40 PM »
OK, here I am.
Please follow these steps:

1. Stop the WebShield provider in avast
2. Download http://cat.asw.cz/misc/ashwsftr.zip and extract its contents to the avast folder. Overwrite ashWsFtr.dll that's there (it shouldn't be locked because of 1.)
3. Start the WebShield provider
4. Download and run the DebugView utility from http://www.sysinternals.com/files/dbgvnt.zip
5. Simulate the problem
6. Send me the contents of the DebugView window that gets generated.

Maybe it sounds complicated, but it shouldn't take you more than 5 minutes... :)

Thanks
Vlk
If at first you don't succeed, then skydiving's not for you.

Sgt.Schumann

  • Guest
Re: Problem with Downloads (Mozilla) with WebShield (EDIT)
« Reply #20 on: February 20, 2005, 10:10:58 PM »
Here it is:

[1596] Open new addresses 81EA28A0    0.0.0.0:2700(6)
[1596]  Conn=00000000 (81EA28A0), Prot 0, Process MOZILLA.EXE, Local 0.0.0.0:2700, Remote 0.0.0.0:0
[1596] Process connect to 2700 -> 127.0.0.1:12080 (outgoing)
[1596] Open new addresses 82233458    0.0.0.0:2701(6)
[1596]  Conn=00000000 (82233458), Prot 0, Process ASHWEBSV.EXE, Local 0.0.0.0:2701, Remote 0.0.0.0:0
[1596] Process connect to 2701 -> 140.211.166.204:80 (outgoing)
[1032] *OnEndOfRequest for http://download.mozilla.org/?product=firefox&os=win&lang=en-US
[1032] No body sent so far, flushing all
[1032] *OnEndOfRequest - returning 134217730
[1596] Process ASHWEBSV.EXE disconnect from 140.211.166.204:80 (incoming)
[1596] Process ASHWEBSV.EXE disconnect from 127.0.0.1:2700 (incoming)
[1596] Process MOZILLA.EXE disconnect from 127.0.0.1:12080 (incoming)
[1596] TDI_MSG_CLOSE_CONNECTION 82246538
[1596]  -- unknown
[1596] TDI_MSG_CLOSE_ADDRESS 81EA28A0
[1596]  -- unknown
[1596] TDI_MSG_CLOSE_CONNECTION 8221DC08
[1596]  -- unknown
[1596] Address info 822FAC18(0)    0.0.0.0:0->127.0.0.1:12080 added
[1596] TDI_MSG_CLOSE_CONNECTION 81E65F90
[1596]  -- unknown
[1596] TDI_MSG_CLOSE_ADDRESS 82233458
[1596]  -- unknown
[1596] Open new addresses 82233458    0.0.0.0:2702(6)
[1596]  Conn=00000000 (82233458), Prot 0, Process MOZILLA.EXE, Local 0.0.0.0:2702, Remote 0.0.0.0:0
[1596] Process connect to 2702 -> 127.0.0.1:12080 (outgoing)
[1596] Open new addresses 82246538    0.0.0.0:2703(6)
[1596]  Conn=00000000 (82246538), Prot 0, Process ASHWEBSV.EXE, Local 0.0.0.0:2703, Remote 0.0.0.0:0
[1596] Process connect to 2703 -> 64.202.105.103:80 (outgoing)
[1032] *OnEndOfRequest for http://mozilla.mirrors.hoobly.com/firefox/releases/1.0/win32/en-US/Firefox%20Setup%201.0.exe
[1032] Calling g_pfnAavmCheckFile
[1032] Object clean
[1032] File opened OK
[1032] xfer buffer allocated
[1032] Writing rest of data - body
[EEF94849] Bad MDL diagnostic 90: 1: 00040110-81654000-0003C09A-00000000 [81EA91B0]
 
[1032] Everything OK
[1032] Closing body file handle
[1032] *OnEndOfRequest - returning 134217730
[1596] [EEF94849] Bad MDL diagnostic 90: 1: 00040110-81654000-0003C09A-00000000 [81EA91B0]
[1596] Process MOZILLA.EXE disconnect from 127.0.0.1:12080 (incoming)
[1596] TDI_MSG_CLOSE_CONNECTION 81E65F90
[1596]  -- unknown
[1596] TDI_MSG_CLOSE_ADDRESS 82233458
[1596]  -- unknown
[1596] Process ASHWEBSV.EXE disconnect from 127.0.0.1:2702 (incoming)
[1596] TDI_MSG_CLOSE_CONNECTION 81EA91B0
[1596]  -- unknown
[1596] Address info 822FAC18(0)    0.0.0.0:0->127.0.0.1:12080 added
[1596] Process ASHWEBSV.EXE disconnect from 64.202.105.103:80 (incoming)
[1596] TDI_MSG_CLOSE_CONNECTION 8234E9C8
[1596]  -- unknown
[1596] TDI_MSG_CLOSE_ADDRESS 82246538
[1596]  -- unknown
[1596] Process MOZILLA.EXE disconnect from 66.193.254.46:80 (incoming)
[1596] TDI_MSG_CLOSE_CONNECTION 81CE1168
[1596]  -- unknown
[1596] TDI_MSG_CLOSE_ADDRESS 81760130
[1596]  -- unknown
[1596] Open new addresses 82221888    0.0.0.0:2704(6)
[1596]  Conn=00000000 (82221888), Prot 0, Process MOZILLA.EXE, Local 0.0.0.0:2704, Remote 0.0.0.0:0
[1596] Process connect to 2704 -> 127.0.0.1:12080 (outgoing)
[1596] Open new addresses 82262B18    0.0.0.0:2705(6)
[1596]  Conn=00000000 (82262B18), Prot 0, Process ASHWEBSV.EXE, Local 0.0.0.0:2705, Remote 0.0.0.0:0
[1596] Process connect to 2705 -> 67.15.62.22:80 (outgoing)
[1032] *OnEndOfRequest for http://forum.avast.com/index.php?action=post;topic=11318.15;num_replies=19
[1032] Calling g_pfnAavmCheckFile
[1032] Object clean
[1032] File opened OK
[1032] xfer buffer allocated
[1032] Was check-encoded, sending the rest
[1032] Writing rest of data - body
[1032] Chunked encoded - writing last chunk
[1032] Everything OK
[1032] Closing body file handle
[1032] *OnEndOfRequest - returning 134217730
[1596] Process ASHWEBSV.EXE disconnect from 67.15.62.22:80 (incoming)
[1596] Process ASHWEBSV.EXE disconnect from 127.0.0.1:2704 (incoming)
[1596] Process MOZILLA.EXE disconnect from 127.0.0.1:12080 (incoming)
[1596] TDI_MSG_CLOSE_CONNECTION 82202B78
[1596]  -- unknown
[1596] TDI_MSG_CLOSE_ADDRESS 82221888
[1596]  -- unknown
[1596] TDI_MSG_CLOSE_CONNECTION 8221DC08
[1596]  -- unknown
[1596] Address info 822FAC18(0)    0.0.0.0:0->127.0.0.1:12080 added
[1596] TDI_MSG_CLOSE_CONNECTION 822FC518
[1596]  -- unknown
[1596] TDI_MSG_CLOSE_ADDRESS 82262B18
[1596]  -- unknown

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: Problem with Downloads (Mozilla) with WebShield (EDIT)
« Reply #21 on: February 20, 2005, 10:29:02 PM »
Can you use the Processes tab of Task Manager to find out which process has the PID (process ID) value of 1596???

This column is not shown in Task Manager by default. Use the View -> Select Columns option to enable it.


Thanks!
Vlk
If at first you don't succeed, then skydiving's not for you.

Sgt.Schumann

  • Guest
Re: Problem with Downloads (Mozilla) with WebShield (EDIT)
« Reply #22 on: February 20, 2005, 10:37:24 PM »
It is the Outpost Firewall "outpost.exe".

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: Problem with Downloads (Mozilla) with WebShield (EDIT)
« Reply #23 on: February 20, 2005, 10:40:59 PM »
Hmm, this really looks like an Outpost problem... Outpost is reporting this:

[EEF94849] Bad MDL diagnostic 90: 1: 00040110-81654000-0003C09A-00000000 [81EA91B0]

which probably means it can't let the data thru. Maybe they're coming too fast? :-\
Anyway, if I were you, I'd try to uninstall (and possibly reinstall) Outpost and see if it helps (I'd bet my hat it will :)).
Maybe a clean install will resolve the issue...


BTW I'm SHOCKED that Outpost is dumping so much info in its release build - not really a common (neat) programming practice... :-\ ;D


Cheers
Vlk
If at first you don't succeed, then skydiving's not for you.

Sgt.Schumann

  • Guest
Re: Problem with Downloads (Mozilla) with WebShield (EDIT)
« Reply #24 on: February 20, 2005, 10:44:50 PM »
Hi Vlk,

here is the "DebugView" with Shudown of Outpost:
[1032] *OnEndOfRequest for http://www.mozilla.org/
[1032] No body sent so far, flushing all
[1032] *OnEndOfRequest - returning 134217730
[1032] *OnEndOfRequest for http://download.mozilla.org/?product=firefox&os=win&lang=en-US
[1032] No body sent so far, flushing all
[1032] *OnEndOfRequest - returning 134217730
[1032] *OnEndOfRequest for http://ftp-mozilla.netscape.com/pub/mozilla.org/firefox/releases/1.0/win32/en-US/Firefox%20Setup%201.0.exe
[1032] Calling g_pfnAavmCheckFile
[1032] Object clean
[1032] File opened OK
[1032] xfer buffer allocated
[1032] Writing rest of data - body
!dbg no buffer: EEF93290<-EEF94849 ebp:EE2299B0
[1032] Everything OK
[1032] Closing body file handle
[1032] *OnEndOfRequest - returning 134217730
[1032] *OnEndOfRequest for http://forum.avast.com/index.php?action=post;topic=11318.15;num_replies=22
[1032] Calling g_pfnAavmCheckFile
[1032] Object clean
[1032] File opened OK
[1032] xfer buffer allocated
[1032] Was check-encoded, sending the rest
[1032] Writing rest of data - body
[1032] Chunked encoded - writing last chunk
[1032] Everything OK
[1032] Closing body file handle
[1032] *OnEndOfRequest - returning 134217730

All Outpost processes are killed, all services are killed and still that error!! I am hardly considered to reinstall this things again, but I don't really know if it would be the solution, what a mess  ???
« Last Edit: February 20, 2005, 10:53:00 PM by Sgt.Schumann »

gbark

  • Guest
Re: Problem with Downloads (Mozilla) with WebShield (EDIT)
« Reply #25 on: February 20, 2005, 10:52:07 PM »
Sgt.Schumann and Vlk,

Please excuse my jumping in here, but Sgt.Schumann , you're using a very old version of Outpost. That version was great for it's day, but had quite a few weird problems. In fact, IIRC, one of them was disabling it didn't really disable it.

I'd suggest upgrading to the new V2.5 version (it has a 30 free trial - then its pay up or give up  ;) ) and see if your download will work. Since you're behind a router, if you feel safe enough you could "Exit and shutdown" Outpost and try the D/L. Just don't forget to restart OP.

If your girlfriend isn't using the same version of OP on her computer and she is getting the same problem, then I'm pretty sure that OP is not the problem.

NOTING THAT NEW POST MADE WHILE BABLING ABOVE

That extra info is another problem with the old Outpost.!

HTH

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: Problem with Downloads (Mozilla) with WebShield (EDIT)
« Reply #26 on: February 20, 2005, 10:55:04 PM »
Again, Outpost was dumping this info

!dbg no buffer: EEF93290<-EEF94849 ebp:EE2299B0

(even though it should've been disabled). Well I'm guessing it's Outpost in this case (but who else? Do you have any other filter installed?).

Clearly, Outpost interferes with the communication stream even though it's turned off... not good for debugging ;)
If at first you don't succeed, then skydiving's not for you.

Sgt.Schumann

  • Guest
Re: Problem with Downloads (Mozilla) with WebShield (EDIT)
« Reply #27 on: February 20, 2005, 11:03:25 PM »
I did already "Exit and shutdown" in Outpost (since I am behind a router and I have nothing to "fear") and the same problems still occur . There were no more outpost-task and no more servicea running, but I'am still  having the same problems.  So I suppose that Outpost is not the problem ...   
the next step could "to deinstall the Outpost Firewall completely", but  I do not want to do really that thing ... and actually I don't think that this is the problem (PLEASE correct me, if I am false!!!)

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: Problem with Downloads (Mozilla) with WebShield (EDIT)
« Reply #28 on: February 20, 2005, 11:06:38 PM »
If the last debug dumps were captured with Outpost disabled, then yes, I still think Outpost is interfering with the HTTP traffic. Please see my previous post.

Even though you disable/kill all its processes, there's still the kernel-driver active and it cannot be "killed" - it can only be uninstalled (or deleted/renamed, if you can find it - it's a *.sys file).

Thanks
Vlk
« Last Edit: February 20, 2005, 11:25:25 PM by Vlk »
If at first you don't succeed, then skydiving's not for you.

Sgt.Schumann

  • Guest
Re: Problem with Downloads (Mozilla) with WebShield (EDIT)
« Reply #29 on: February 20, 2005, 11:10:40 PM »
Hi *,

seems like Outpost is the problem, even it is "shut down", whatis quite strange in my eyes  :(

I'll try out tomorrow evening again (if I will have hopefully the time),  since it is now time to go to bed, and I should be in office tomorrow.

Thanks for your help today!!

Greetings
 Sgt. Schumann