« previous next »
Pages: [1] 2   Go Down

Author Topic: Extraneous I/O activity?  (Read 9966 times)

0 Members and 1 Guest are viewing this topic.

Arnb

  • Guest
Extraneous I/O activity?
« on: October 29, 2003, 07:01:23 AM »
Anyone know why Outpost Firewall, which seems to do some I/O every 4 seconds, triggers AVAST Home 4.1.289 on a quiet Win98FE system.  Results captured with Filemon.exe

Thank you
Arn

12:45:49 AM   Outpost:FFFE90CF   Attributes   C:\PROGRAM FILES\COMMON FILES\AGNITUM SHARED\AUPDATE\UPDATE.INI   SUCCESS   GetAttributes   
12:45:49 AM   Outpost:FFFE90CF   Open   C:\PROGRAM FILES\COMMON FILES\AGNITUM SHARED\AUPDATE\UPDATE.INI   SUCCESS   OPENEXISTING READWRITE DENYWRITE    
12:45:49 AM   Outpost:FFFE90CF   Ioctl   C:   SUCCESS   Subfunction: 08h   
12:45:49 AM   Outpost:FFFE90CF   Attributes   C:\PROGRAM FILES\COMMON FILES\AGNITUM SHARED\AUPDATE\UPDATE.INI   SUCCESS   Get Modify   
12:45:49 AM   Outpost:FFFE90CF   Seek   C:\PROGRAM FILES\COMMON FILES\AGNITUM SHARED\AUPDATE\UPDATE.INI   SUCCESS   End Offset: 0 / New offset: 0   
12:45:49 AM   Outpost:FFFE90CF   Seek   C:\PROGRAM FILES\COMMON FILES\AGNITUM SHARED\AUPDATE\UPDATE.INI   SUCCESS   Beginning Offset: 0 / New offset: 0   
12:45:49 AM   Outpost:FFFE90CF   Read   C:\PROGRAM FILES\COMMON FILES\AGNITUM SHARED\AUPDATE\UPDATE.INI   SUCCESS   Offset: 0 Length: 512   
12:45:49 AM   Outpost:FFFE90CF   Close   C:\PROGRAM FILES\COMMON FILES\AGNITUM SHARED\AUPDATE\UPDATE.INI   SUCCESS   CLOSE_FINAL   
12:45:49 AM   Ashserv:FFFE8213   Attributes   C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\DATA\AVAST4.INI   SUCCESS   GetAttributes   
12:45:49 AM   Ashserv:FFFE8213   Open   C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\DATA\AVAST4.INI   SUCCESS   OPENEXISTING READWRITE DENYWRITE    
12:45:49 AM   Ashserv:FFFE8213   Ioctl   C:   SUCCESS   Subfunction: 08h   
12:45:49 AM   Ashserv:FFFE8213   Attributes   C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\DATA\AVAST4.INI   SUCCESS   Get Modify   
12:45:49 AM   Ashserv:FFFE8213   Seek   C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\DATA\AVAST4.INI   SUCCESS   End Offset: 0 / New offset: 0   
12:45:49 AM   Ashserv:FFFE8213   Seek   C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\DATA\AVAST4.INI   SUCCESS   Beginning Offset: 0 / New offset: 0   
12:45:49 AM   Ashserv:FFFE8213   Read   C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\DATA\AVAST4.INI   SUCCESS   Offset: 0 Length: 2620   
12:45:49 AM   Ashserv:FFFE8213   Close   C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\DATA\AVAST4.INI   SUCCESS   CLOSE_FINAL   
Logged

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re:Extraneous I/O activity?
« Reply #1 on: October 29, 2003, 12:13:37 PM »
I'm not sure but seems that your firewall is being notified about avast! updates... Do you use a dial-up or a permanent connection to the Internet?
Logged
The best things in life are free.

Arnb

  • Guest
Re:Extraneous I/O activity?
« Reply #2 on: October 29, 2003, 12:22:11 PM »
Quote from: Technical on October 29, 2003, 12:13:37 PM
I'm not sure but seems that your firewall is being notified about avast! updates... Do you use a dial-up or a permanent connection to the Internet?

Permanent cable connection.  FYI the log is from oldest (top) to newest (bottom)
Logged

Arnb

  • Guest
Re:Extraneous I/O activity?
« Reply #3 on: October 29, 2003, 12:26:39 PM »
Just changed the options to include millisecond to the log
6:24:52.636 AM   Outpost:F7557987   Attributes   C:\PROGRAM FILES\COMMON FILES\AGNITUM SHARED\AUPDATE\UPDATE.INI   SUCCESS   GetAttributes   
6:24:52.636 AM   Outpost:F7557987   Open   C:\PROGRAM FILES\COMMON FILES\AGNITUM SHARED\AUPDATE\UPDATE.INI   SUCCESS   OPENEXISTING READWRITE DENYWRITE    
6:24:52.636 AM   Outpost:F7557987   Ioctl   C:   SUCCESS   Subfunction: 08h   
6:24:52.636 AM   Outpost:F7557987   Attributes   C:\PROGRAM FILES\COMMON FILES\AGNITUM SHARED\AUPDATE\UPDATE.INI   SUCCESS   Get Modify   
6:24:52.636 AM   Outpost:F7557987   Seek   C:\PROGRAM FILES\COMMON FILES\AGNITUM SHARED\AUPDATE\UPDATE.INI   SUCCESS   End Offset: 0 / New offset: 0   
6:24:52.636 AM   Outpost:F7557987   Seek   C:\PROGRAM FILES\COMMON FILES\AGNITUM SHARED\AUPDATE\UPDATE.INI   SUCCESS   Beginning Offset: 0 / New offset: 0   
6:24:52.636 AM   Outpost:F7557987   Read   C:\PROGRAM FILES\COMMON FILES\AGNITUM SHARED\AUPDATE\UPDATE.INI   SUCCESS   Offset: 0 Length: 512   
6:24:52.636 AM   Outpost:F7557987   Close   C:\PROGRAM FILES\COMMON FILES\AGNITUM SHARED\AUPDATE\UPDATE.INI   SUCCESS   CLOSE_FINAL   
6:24:53.211 AM   Ashserv:FFFE8213   Attributes   C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\DATA\AVAST4.INI   SUCCESS   GetAttributes   
6:24:53.211 AM   Ashserv:FFFE8213   Open   C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\DATA\AVAST4.INI   SUCCESS   OPENEXISTING READWRITE DENYWRITE    
6:24:53.211 AM   Ashserv:FFFE8213   Ioctl   C:   SUCCESS   Subfunction: 08h   
6:24:53.211 AM   Ashserv:FFFE8213   Attributes   C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\DATA\AVAST4.INI   SUCCESS   Get Modify   
6:24:53.211 AM   Ashserv:FFFE8213   Seek   C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\DATA\AVAST4.INI   SUCCESS   End Offset: 0 / New offset: 0   
6:24:53.211 AM   Ashserv:FFFE8213   Seek   C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\DATA\AVAST4.INI   SUCCESS   Beginning Offset: 0 / New offset: 0   
6:24:53.211 AM   Ashserv:FFFE8213   Read   C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\DATA\AVAST4.INI   SUCCESS   Offset: 0 Length: 2620   
6:24:53.211 AM   Ashserv:FFFE8213   Close   C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\DATA\AVAST4.INI   SUCCESS   CLOSE_FINAL   
Logged

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re:Extraneous I/O activity?
« Reply #4 on: October 29, 2003, 12:40:18 PM »
Will desinstalling and reinstalling avast! work?
Try avast 4.0 Uninstall...

I'm using ZA with no such trouble with avast!
Maybe you can make a search in foruns to Outpost Firewall and see if anybody related a similar trouble...  ;)
Logged
The best things in life are free.

Arnb

  • Guest
Re:Extraneous I/O activity?
« Reply #5 on: October 29, 2003, 01:03:10 PM »
Quote from: Technical on October 29, 2003, 12:40:18 PM
Will desinstalling and reinstalling avast! work?
Try avast 4.0 Uninstall...

I'm using ZA with no such trouble with avast!
Maybe you can make a search in foruns to Outpost Firewall and see if anybody related a similar trouble...  ;)
I'll hold re-installing as a last resort. It took me awhile to get Avast working the way I wanted, and I don't want to mess with success.

Which version of ZA are you running? Iwas a long time ZAF user, but switched to Sygate  then Outpost.

I cross posted this topic on Agnitum's forum, maybe someone over there has an answer.  


Logged

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:Extraneous I/O activity?
« Reply #6 on: October 29, 2003, 01:19:32 PM »
This "problem" is not related to Outpost in any way. It's normal for avast to periodically touch its avast4.ini file (it's not triggered by Output), just like it's normal for Outpost to periodically touch its update.ini...

Do you care?
Vlk ;)
Logged
If at first you don't succeed, then skydiving's not for you.

Arnb

  • Guest
Re:Extraneous I/O activity?
« Reply #7 on: October 29, 2003, 01:33:10 PM »
Quote from: Vlk on October 29, 2003, 01:19:32 PM
This "problem" is not related to Outpost in any way. It's normal for avast to periodically touch its avast4.ini file (it's not triggered by Output), just like it's normal for Outpost to periodically touch its update.ini...

Do you care?
Vlk ;)

Yes, I care, but I may be unable to do anything about it. I keep overhead to a mininimum on my geriatric 300mhz chip. However, when I terminate Outpost, Avast's activity totally stops.

C:\PROGRAM FILES\COMMON FILES\AGNITUM SHARED\AUPDATE\UPDATE.INI   was added to Avast's excluded files; rebooted system; no change.      

Are you saying Avast! hits it's avast4.ini file every 4 to 5 seconds? That's what shows on my system monitor.
Logged

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:Extraneous I/O activity?
« Reply #8 on: October 29, 2003, 02:14:07 PM »
Quote
Are you saying Avast! hits it's avast4.ini file every 4 to 5 seconds? That's what shows on my system monitor.


I wouldn't be too surprised... but maybe only under Win2K/XP. Under (geriatric ;D) Win98 it behaves differently (the Standard Shield's are very different).

Quote
However, when I terminate Outpost, Avast's activity totally stops.

That is an interesting point (you didn't say that in the original post). In this case I guess there must be some connection -- try e.g. pausing the Standard Shield and/or terminating the whole on-access protection to see if it has any effect...

Thanks
Vlk
Logged
If at first you don't succeed, then skydiving's not for you.

Arnb

  • Guest
Re:Extraneous I/O activity?
« Reply #9 on: October 29, 2003, 03:27:01 PM »
Quote from: Vlk on October 29, 2003, 02:14:07 PM
That is an interesting point (you didn't say that in the original post). In this case I guess there must be some connection -- try e.g. pausing the Standard Shield and/or terminating the whole on-access protection to see if it has any effect...

Thank you for the suggestions

1. Stopped Standard Shield - no change
2. Stopped Onaccess protection and exited - no change
Logged

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:Extraneous I/O activity?
« Reply #10 on: October 29, 2003, 03:32:25 PM »
3. Stopped Outpost - BIG change?
Logged
If at first you don't succeed, then skydiving's not for you.

Arnb

  • Guest
Re:Extraneous I/O activity?
« Reply #11 on: October 29, 2003, 03:53:07 PM »
Quote from: Vlk on October 29, 2003, 03:32:25 PM
3. Stopped Outpost - BIG change?
Ummm.. How do I do that?  I can't find a close request or a flag that says do not run on next boot. Maybe I'm just missing something.  Can I safely close ASHMAISV in the Task manager???
Logged

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:Extraneous I/O activity?
« Reply #12 on: October 29, 2003, 04:27:56 PM »
I meant the Outpost firewall ;)
Logged
If at first you don't succeed, then skydiving's not for you.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re:Extraneous I/O activity?
« Reply #13 on: October 29, 2003, 08:30:25 PM »
Quote from: Arnb on October 29, 2003, 01:03:10 PM
Which version of ZA are you running? I was a long time ZAF user, but switched to Sygate then Outpost.

My version is the last freeware one (3.7.211)  ;)
For your answers to Vlk I suppose the trouble remains in Outpost Firewall...  :-\
Logged
The best things in life are free.

Arnb

  • Guest
Re:Extraneous I/O activity?
« Reply #14 on: October 30, 2003, 03:18:16 AM »
Quote from: Vlk on October 29, 2003, 04:27:56 PM
I meant the Outpost firewall ;)

Oops I was in a hurry to get out of the house when I read that message.  ::) That info was posted earlier.

When I terminate Outpost, Avast's activity totally stops.  
Logged
Pages: [1] 2   Go Up
« previous next »