Author Topic: BUG in resident shield  (Read 14398 times)

0 Members and 1 Guest are viewing this topic.

mantra

  • Guest
BUG in resident shield
« on: September 15, 2003, 10:19:57 AM »
SOMETIMES AVAST resident shield DOESN'T check the ole files like docs..

here is the report
*
* avast! Report
* This file is generated automatically
*
* Task 'Mantra' used
* Started on Monday, September 15, 2003 10:13:22 AM
*

C:\Programmi\Microsoft Office\Office\WINWORD.EXE
  • is OK

C:\WINDOWS\EXPLORER.EXE
  • is OK

C:\WINDOWS\SYSTEM\ParseDls.exe
  • is OK

C:\WINDOWS\NOTEPAD.EXE
  • is OK


my setting is SCAN OLE DOCUMENTS
I use w98se
and avast resident shield give me this problem often but not every time!!!!!
so sometime AVAST miss to scan for example doc file

i use only a resident task(i edit only one) and i run only 1
but sometime it missed to scan doc files...!!!!!!

mantra

  • Guest
Re:BUG in resident shield
« Reply #1 on: September 15, 2003, 10:22:11 AM »
for sure for the report
i clicked on a doc and i read/open it!!!!!!!!!!!!!!

mantra

  • Guest
Re:BUG in resident shield
« Reply #2 on: September 15, 2003, 10:46:46 AM »
try to open the same file doc then reboot and so on
after some reboot avast miss , doesn't check the file

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:BUG in resident shield
« Reply #3 on: September 15, 2003, 10:58:26 AM »
avast tries to minimize the number of checks - i.e. if you open the same file (without modifications) 10 times, it will only scan once.

Can't this be the case?
If at first you don't succeed, then skydiving's not for you.

mantra

  • Guest
Re:BUG in resident shield
« Reply #4 on: September 15, 2003, 12:37:10 PM »
maybe
after a reboot tooo???

but avast checkes winword but not *.dot & *.doc



by the way , u know u are  a nice guy in your last pic??

mantra

  • Guest
Re:BUG in resident shield
« Reply #5 on: September 15, 2003, 12:41:36 PM »
" Can't this be the case? "


nope !!!
i tried to open other doc other files and avast did not check them!!!

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11849
    • AVAST Software
Re:BUG in resident shield
« Reply #6 on: September 15, 2003, 02:46:30 PM »
What is your exact setting of the Standard Shield (appart from the fact that the "Scan OLE documents on open" is on - i.e. how about Scanning files on open, Created/modified files, ...)?

What version of avast! do you use - build 260?

Can you give us a full path of a missed file (an example)?

mantra

  • Guest
Re:BUG in resident shield
« Reply #7 on: September 15, 2003, 05:36:04 PM »
scanner (basic)
everything is checked
scan diskette boot
scan ole
scan executable....every.

advanced
checked
scan file on open  HT*
always scan WSH is on
the others switch are not checked

EXCLUSION : NOT SETTING! AVAST should check every path or files!!

Avast sometimes missed to check the ole documents
if i reboot w98se some time avast miss to check ole documents,every documents!!

avast built 260!

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11849
    • AVAST Software
Re:BUG in resident shield
« Reply #8 on: September 15, 2003, 05:44:52 PM »
OK, thanks.
Can you give me an example of the OLE document (I mean the filename) that was missed?

Btw, why are you mentioning the reboot? Do you mean that sometimes, when you reboot, avast! works OK (no matter how many times you try, no document is missed, everything works OK, as long as Windows are running) and on another reboot, the documents are missed (or even all of them?) - until you reboot again?

mantra

  • Guest
Re:BUG in resident shield
« Reply #9 on: September 15, 2003, 07:33:27 PM »
Istituzioni di Diritto Privato.doc
DirComun.doc
example

"Btw, why are you mentioning the reboot? Do you mean that sometimes, when you reboot, avast! works OK (no matter how many times you try, no document is missed, everything works OK, as long as Windows are running) and on another reboot, the documents are missed (or even all of them?) - until you reboot again?"

yes right!
for example while i'm typing i try to open a doc file and avast missed it
if now i reboot and try to open a doc file avast will check it!!!!
strange i know ...

mantra

  • Guest
Re:BUG in resident shield
« Reply #10 on: September 15, 2003, 07:46:17 PM »
IGOR LOOK HERE :

after a reboot i tried to open docs..but avast checked winword but not doc!

*
* avast! Report
* This file is generated automatically
*
* Task 'Mantra' used
* Started on Monday, September 15, 2003 2:06:22 PM
*

C:\WINDOWS\RUNDLL32.EXE
  • is OK

C:\WINDOWS\SYSTEM\rnaapp.exe
  • is OK

C:\WINDOWS\SYSTEM\tapisrv.exe
  • is OK

C:\Programmi\Microsoft Office\Office\WINWORD.EXE
  • is OK

C:\WINDOWS\Application Data\Microsoft\Modelli\Normal.dot
  • is OK

C:\PROGRAMMI\MICROSOFT OFFICE\OFFICE\STARTUP\dgnwnlc.dot
  • is OK

C:\WINDOWS\Desktop\Istituzioni di Diritto Privato.doc
  • is OK

C:\WINDOWS\SYSTEM\ParseDls.exe
  • is OK

C:\Programmi\Alwil Software\Avast4\ASHAVAST.EXE
  • is OK

C:\Programmi\File comuni\AVP Shared Files\avpupd.exe
  • is OK

C:\Programmi\Opera\Opera.exe
  • is OK

C:\Programmi\File comuni\AVP Shared Files\avpupd.exe
  • is OK

C:\Programmi\miranda\miranda32.exe
  • is OK

C:\Programmi\Alwil Software\Avast4\ENGLISH\ENHANCED.HTM
  • is OK

C:\Programmi\Alwil Software\Avast4\DATA\Skin\blue panel.asws
  • is OK

C:\Programmi\Alwil Software\Avast4\DATA\Skin\low res.asws
  • is OK

C:\Programmi\Alwil Software\Avast4\DATA\Skin\shadow fist.asws
  • is OK

C:\Programmi\Alwil Software\Avast4\DATA\Skin\teak zeppelin.asws
  • is OK

C:\Programmi\Outlook Express\MSIMN.EXE
  • is OK

C:\WINDOWS\SYSTEM\PSTORES.EXE
  • is OK

C:\Programmi\Internet Explorer\IEXPLORE.EXE
  • is OK

C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\CLQZO56N\jus.unitn[1].htm
  • is OK

C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\CLQZO56N\jus.unitn[1].htm
  • is OK

C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\25A5KP2F\global_var[1].js
  • is OK

C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\25A5KP2F\global_var[1].js
  • is OK

C:\WINDOWS\TEMP\aswB022.TMP
  • is OK

C:\WINDOWS\TEMP\Script_0004f90f.html
  • is OK

C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\216PS50J\function_top[1].js
  • is OK

C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\216PS50J\function_top[1].js
  • is OK

C:\WINDOWS\TEMP\aswB033.TMP
  • is OK

C:\WINDOWS\TEMP\Script_0004fd72.html
  • is OK

C:\WINDOWS\TEMP\Script_0004fd82.html
  • is OK

C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\MXULMVA5\header[1].js
  • is OK

C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\MXULMVA5\header[1].js
  • is OK

C:\WINDOWS\TEMP\aswB044.TMP
  • is OK

C:\WINDOWS\TEMP\Script_000501a8.html
  • is OK

C:\WINDOWS\TEMP\Script_000501b2.html
  • is OK

C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\25A5KP2F\subheader[1].js
  • is OK

C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\25A5KP2F\subheader[1].js
  • is OK

C:\WINDOWS\TEMP\aswB054.TMP
  • is OK

C:\WINDOWS\TEMP\Script_0005055b.html
  • is OK

C:\WINDOWS\TEMP\Script_0005056c.html
  • is OK

C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\216PS50J\supfooter[1].js
  • is OK

C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\216PS50J\supfooter[1].js
  • is OK

C:\WINDOWS\TEMP\aswB065.TMP
  • is OK

C:\WINDOWS\TEMP\Script_00050a50.html
  • is OK

C:\WINDOWS\TEMP\Script_00050a5d.html
  • is OK

C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\7PDHZZOD\footer[1].js
  • is OK

C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\7PDHZZOD\footer[1].js
  • is OK

C:\WINDOWS\TEMP\aswB072.TMP
  • is OK

C:\WINDOWS\TEMP\Script_00050c15.html
  • is OK

C:\WINDOWS\TEMP\Script_00050c27.html
  • is OK

C:\WINDOWS\TEMP\aswB076.TMP
  • is OK

C:\WINDOWS\TEMP\Script_00050e58.html
  • is OK

C:\WINDOWS\TEMP\Script_00050e64.html
  • is OK

C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\H4UAIM7C\Main[1].html
  • is OK

C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\4LA7CXQB\Main[1].html
  • is OK

C:\WINDOWS\TEMP\aswB0D0.TMP
  • is OK

C:\WINDOWS\TEMP\Script_00052281.html
  • is OK

C:\WINDOWS\TEMP\aswB103.TMP
  • is OK

C:\WINDOWS\TEMP\Script_00052fe2.html
  • is OK

C:\WINDOWS\TEMP\Script_00052fee.html
  • is OK

C:\WINDOWS\TEMP\aswB105.TMP
  • is OK

C:\WINDOWS\TEMP\Script_000530e5.html
  • is OK

C:\WINDOWS\TEMP\Script_000530f0.html
  • is OK

C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\CLQZO56N\Picturep[1].html
  • is OK

C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\CLQZO56N\Picturep[1].html
  • is OK

C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\CLQZO56N\index9[36].html
  • is OK

C:\WINDOWS\TEMP\aswB304.TMP
  • is OK

C:\WINDOWS\TEMP\Script_0005adab.html
  • is OK

C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\CLQZO56N\Picturep[1].html
  • is OK

C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\CLQZO56N\index9[37].html
  • is OK

C:\WINDOWS\TEMP\aswC0B3.TMP
  • is OK

C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\CLQZO56N\Picturep[1].html
  • is OK

C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\UK0UOTD2\index9[28].html
  • is OK

C:\WINDOWS\TEMP\aswD063.TMP
  • is OK

C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\CLQZO56N\Picturep[1].html
  • is OK

C:\Programmi\Opera\Cache4\opr007IY.htm
  • is OK

C:\WINDOWS\Local Settings\File temporanei Internet\Content.IE5\4LA7CXQB\index9[26].html
  • is OK

C:\WINDOWS\TEMP\aswE2D2.TMP
  • is OK

C:\Programmi\Babylon\babylon.exe
  • is OK

C:\PROGRAMMI\BABYLON\utils\shlhook.exe
  • is OK

C:\Programmi\Microsoft Office\Office\WINWORD.EXE
  • is OK

C:\WINDOWS\Application Data\Microsoft\Modelli\Normal.dot
  • is OK

C:\PROGRAMMI\MICROSOFT OFFICE\OFFICE\STARTUP\dgnwnlc.dot
  • is OK

C:\WINDOWS\Desktop\Istituzioni di Diritto Privato.doc
  • is OK

C:\Programmi\Microsoft Office\Office\WINWORD.EXE
  • is OK

C:\WINDOWS\Application Data\Microsoft\Modelli\Normal.dot
  • is OK

C:\PROGRAMMI\MICROSOFT OFFICE\OFFICE\STARTUP\dgnwnlc.dot
  • is OK

C:\WINDOWS\Desktop\Istituzioni di Diritto Privato.doc
  • is OK

C:\WINDOWS\EXPLORER.EXE
  • is OK

C:\WINDOWS\NOTEPAD.EXE
  • is OK


*
* Task stopped: Monday, September 15, 2003 2:18:46 PM
* Run-time was 12 minute(s), 24 second(s)
*

*
* avast! Report
* This file is generated automatically
*
* Task 'Mantra' used
* Started on Monday, September 15, 2003 7:39:59 PM
*

C:\Programmi\Microsoft Office\Office\WINWORD.EXE
  • is OK

C:\WINDOWS\Application Data\Microsoft\Modelli\Normal.dot
  • is OK

C:\PROGRAMMI\MICROSOFT OFFICE\OFFICE\STARTUP\dgnwnlc.dot
  • is OK

C:\WINDOWS\Desktop\dirtto pub.doc
  • is OK

C:\Programmi\Microsoft Office\Office\WINWORD.EXE
  • is OK

C:\WINDOWS\Application Data\Microsoft\Modelli\Normal.dot
  • is OK

C:\PROGRAMMI\MICROSOFT OFFICE\OFFICE\STARTUP\dgnwnlc.dot
  • is OK

C:\WINDOWS\Desktop\dirtto pub.doc
  • is OK

C:\Programmi\Microsoft Office\Office\WINWORD.EXE
  • is OK

C:\WINDOWS\Application Data\Microsoft\Modelli\Normal.dot
  • is OK

C:\PROGRAMMI\MICROSOFT OFFICE\OFFICE\STARTUP\dgnwnlc.dot
  • is OK

C:\WINDOWS\Desktop\dirtto pub.doc
  • is OK

C:\Programmi\Microsoft Office\Office\WINWORD.EXE
  • is OK

C:\WINDOWS\Application Data\Microsoft\Modelli\Normal.dot
  • is OK

C:\PROGRAMMI\MICROSOFT OFFICE\OFFICE\STARTUP\dgnwnlc.dot
  • is OK

C:\WINDOWS\Desktop\dirtto pub.doc
  • is OK


*
* Task stopped: Monday, September 15, 2003 7:40:44 PM
* Run-time was 45 second(s)
*

*
* avast! Report
* This file is generated automatically
*
* Task 'Mantra' used
* Started on Monday, September 15, 2003 7:40:45 PM
*

C:\Programmi\Microsoft Office\Office\WINWORD.EXE
  • is OK

C:\WINDOWS\Application Data\Microsoft\Modelli\Normal.dot
  • is OK

C:\PROGRAMMI\MICROSOFT OFFICE\OFFICE\STARTUP\dgnwnlc.dot
  • is OK

C:\WINDOWS\Desktop\dirtto pub.doc
  • is OK

C:\Programmi\Microsoft Office\Office\WINWORD.EXE
  • is OK

C:\WINDOWS\Application Data\Microsoft\Modelli\Normal.dot
  • is OK

C:\PROGRAMMI\MICROSOFT OFFICE\OFFICE\STARTUP\dgnwnlc.dot
  • is OK

C:\WINDOWS\Desktop\Istituzioni di Diritto Privato.doc
  • is OK

C:\WINDOWS\rundll32.exe
  • is OK

*
* avast! Report
* This file is generated automatically
*
* Task 'Mantra' used
* Started on Monday, September 15, 2003 7:42:43 PM
*

C:\Programmi\Microsoft Office\Office\WINWORD.EXE
  • is OK

C:\Programmi\Microsoft Office\Office\WINWORD.EXE
  • is OK

C:\Programmi\Microsoft Office\Office\WINWORD.EXE
  • is OK

C:\WINDOWS\SYSTEM\ParseDls.exe
  • is OK

C:\Programmi\Microsoft Office\Office\WINWORD.EXE
  • is OK

C:\Programmi\Microsoft Office\Office\WINWORD.EXE
  • is OK

C:\Programmi\Microsoft Office\Office\WINWORD.EXE
  • is OK

C:\WINDOWS\EXPLORER.EXE
  • is OK

C:\Programmi\Microsoft Office\Office\WINWORD.EXE
  • is OK

C:\Programmi\Microsoft Office\Office\WINWORD.EXE
  • is OK

mantra

  • Guest
Re:BUG in resident shield
« Reply #11 on: September 15, 2003, 07:53:54 PM »
the last tentative are
tring to open whatever *.doc files!!!!
i try to open several doc file!!!

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11849
    • AVAST Software
Re:BUG in resident shield
« Reply #12 on: September 15, 2003, 08:30:09 PM »
OK, I can see you tried to open a number of DOC files in the last part of the report.
Do I understand it  correctly that there was a reboot between 7:40:45 PM (where all the .DOC files were tested) and  7:42:43 PM (where no files were tested)?

To narrow down the problem, I'd like to know 2 things (if you can reproduce the problem and boot the Windows such that the .DOC files are not scanned, again).

When the .DOC files are not scanned - at the same moment:
1. Does the "Scan files on open" works? You have the HT* mask enabled, so - what happens when you open a HTML file? Does it appear in the log? Or only the browser (opera, IE, ...)?
2. If you check the resident protection settings, is the "Scan OLE documents on open" really checked? (I mean, maybe the task configuration was not read correctly...)

But as I said... it must be in the situation when the .DOC files are not scanned - if possible.
Thanks.

mantra

  • Guest
Re:BUG in resident shield
« Reply #13 on: September 16, 2003, 08:09:03 AM »
" OK, I can see you tried to open a number of DOC files in the last part of the report.
Do I understand it correctly that there was a reboot between 7:40:45 PM (where all the .DOC files were tested) and 7:42:43 PM (where no files were tested)?"

YES right!

"1. Does the "Scan files on open" works? You have the HT* mask enabled, so - what happens when you open a HTML file? Does it appear in the log? Or only the browser (opera, IE, ...)?"
when avast miss doc  , miss html files too!!!
i tried some minutes ago and it missed doc and html!!
(if u want i can send the log)
resident shield checked only explorer.exe many times but not htlm pages

"2. If you check the resident protection settings, is the "Scan OLE documents on open" really checked? (I mean, maybe the task configuration was not read correctly...)"

i made one new with the right setting the problem persist!

have u same behave to your pc?igor
i have a clean install on w98se (new install)
i installed some time ago!
so my w98se has not problems

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11849
    • AVAST Software
Re:BUG in resident shield
« Reply #14 on: September 16, 2003, 09:49:48 AM »
Well, the problem is that I don't have the same behavior... if I had, it would be (probably) rather easy to fix.

So, it looks like the Scanning files on open isn't working correctly sometimes...
Could you please download StartupList, run it as StartupList.exe /complete /full /forceall and send me the resulting log (maybe not to the forum, but better by a private message)?

Thanks.