Author Topic: ashmaisv.exe, Thunderbird, Internet Explorer  (Read 3416 times)

0 Members and 1 Guest are viewing this topic.

Jarmo P

  • Guest
ashmaisv.exe, Thunderbird, Internet Explorer
« on: September 10, 2005, 08:52:52 PM »
Really strange. I have IE blocked in Kerio 2.1.5 rule and set to alert if that rule matches.

When I go to check my email, if I have that mail protection proxy running I get a popup from Kerio:

10/Sep/2005 17:24:50   Internet Explorer(Alert)(Log)   blocked; Out TCP; localhost:1177->66.249.93.104:80; Owner: C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE

Geektools site traces that IP to:
NetRange: 66.249.64.0 - 66.249.95.255
CIDR: 66.249.64.0/19
NetName: GOOGLE
NetHandle: NET-66-249-64-0-1
Parent: NET-66-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.GOOGLE.COM
NameServer: NS2.GOOGLE.COM
Comment:
RegDate: 2004-03-05
Updated: 2004-11-10

But when I go to Task Manager, no iexplore.exe is running there.


If I stop that Avast provider, starting Thunderbird causes no such popup.

 ???

Jarmo
« Last Edit: September 10, 2005, 08:56:17 PM by Jarmo P »

Jarmo P

  • Guest
Re: ashmaisv.exe, Thunderbird, Internet Explorer
« Reply #1 on: September 10, 2005, 09:26:02 PM »
After rebooting my PC and running thunderbird again, that prompt is not popping up anymore.

I was playing with Kerio's settings, blocking IE and stuff. Something was propably left on some buffer in Kerio, so I suspect it was Kerio's fault. Not Avast's mail provider's.


Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: ashmaisv.exe, Thunderbird, Internet Explorer
« Reply #2 on: September 11, 2005, 06:33:29 AM »
Maybe you can add the following line to the [MailScanner] section of <avast>\data\avast4.ini:
Log=20
Then generate some traffic, simulate the problem (i.e. force the avast mail scanner to time out by sending an email with attachment) and then post here the contents of the file <avast>\data\log\aswMaiSv.log

Details: http://forum.avast.com/index.php?topic=12234.msg103474#msg103474
The best things in life are free.

Jarmo P

  • Guest
Re: ashmaisv.exe, Thunderbird, Internet Explorer
« Reply #3 on: September 11, 2005, 09:51:45 AM »
Tech, I believe this had nothing to do with Avast.

I believe all that was related to me having got a lots of permission popups to IE, but not wanting to make a rule. So I closed IE. And then closed the permission popups. Or the other way around, whatever. Not possible to reproduce it now. Must have been some "buffer" glitch with Kerio.

Jarmo P

  • Guest
Re: ashmaisv.exe, Thunderbird, Internet Explorer
« Reply #4 on: September 20, 2005, 09:40:13 PM »
It had nothing to do with Kerio either really. It was silly me.
 
Kerio 2.1.5 showed in it's alerts list first only the first one that ever came, not the last one.  A little shortcoming

So I apologize all who saw this post and tell: Both avast and Kerio work fine, no complains to either of these programs.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: ashmaisv.exe, Thunderbird, Internet Explorer
« Reply #5 on: September 20, 2005, 10:13:56 PM »
It had nothing to do with Kerio either really.
Thanks for posting... but, after all, how is guilty here?
You've made innocent the two souspects: antivirus and firewall.
Well, which email program are you using?  ;D
The best things in life are free.