Author Topic: Avast prevent NAS to hibernate !  (Read 11921 times)

0 Members and 1 Guest are viewing this topic.

Offline PDI

  • Avast team
  • Full Member
  • *
  • Posts: 159
Re: Avast prevent NAS to hibernate !
« Reply #15 on: July 04, 2017, 02:16:08 PM »
Hi Baudav,

it'd really help if you can share the procmon log with us. We'd like to check the file operation information only and the log may contain only 20s run. 10s before the NAS connection is established and 10s after it. If we don't have the log we can only guess what's happening on your computer.

I'll continue on lukor's post with addition question. Do you have any program/script on the NAS server which you run from it?

Thanks for the cooperation,
PDI

REDACTED

  • Guest
Re: Avast prevent NAS to hibernate !
« Reply #16 on: July 04, 2017, 08:14:36 PM »

Offline PDI

  • Avast team
  • Full Member
  • *
  • Posts: 159
Re: Avast prevent NAS to hibernate !
« Reply #17 on: July 04, 2017, 08:52:57 PM »
Hi Baudav,

thanks a lot for the log. It helped me to understand the problem.

You once run SYNOLOGY-ASSISTANT-6.1-15030.EXE from the NAS or this file is stored somewhere in the registry/lnk file and the AswIDSagent tries to get the information from it which causes the NAS to start again.

You can try to do following steps:
1) stop the agent via UI or SCM (the aswidsagent.exe must be stopped before the next step)
2) delete C:\ProgramData\AVAST Software\Avast\IDS\malwareprofile\nodes.dat
3) restart you computer

We'll try to figure how to handle your use case better. We made some changes in this part of code recently and the fix'd be available in the next beta build.

Regards,
PDI

REDACTED

  • Guest
Re: Avast prevent NAS to hibernate !
« Reply #18 on: July 04, 2017, 10:29:35 PM »
Hi,

thanks  ;)

Yes I runSyno..assistant-installer from NAS last year, and another time after clean avast installation to update this Assistant synology with new version (6.1.15030).

agent already removed.. wait now next update to reinstall and test, or can test now, after nodes.dat removed? (if add exclusion from my NAS, or not execute this file)

note: to remove nodes.dat file, I must stop the Avast autoprotect first

Offline PDI

  • Avast team
  • Full Member
  • *
  • Posts: 159
Re: Avast prevent NAS to hibernate !
« Reply #19 on: July 05, 2017, 09:18:20 AM »
Hi Baudav,

yes, I forgot to mention that.

Please try to run Behavioral Shield when you deleted the file if the issue is fixed for you.

Thanks,
PDI

REDACTED

  • Guest
Re: Avast prevent NAS to hibernate !
« Reply #20 on: July 07, 2017, 08:16:08 PM »
issue not fixed  :(

REDACTED

  • Guest
Re: Avast prevent NAS to hibernate !
« Reply #21 on: July 07, 2017, 08:25:25 PM »
If it can help you, now I removed folder IDS and retest...
and previous IDS folder saved here: https://drive.google.com/open?id=0B-PnHjbdw-GwZXFkbWh0Vm9PRTQ

log file exist for this agent ?

REDACTED

  • Guest
Re: Avast prevent NAS to hibernate !
« Reply #22 on: July 11, 2017, 10:20:50 PM »
It's good, after remove all folder.

perhaps because in step 2 when remove nodes.dat; must remove backup.dat ?   I see before remove all folder, the new nodes.dat is same size as backup.dat.

Offline PDI

  • Avast team
  • Full Member
  • *
  • Posts: 159
Re: Avast prevent NAS to hibernate !
« Reply #23 on: July 13, 2017, 12:33:54 AM »
Hi Baudav,

I forgot about the backup :(

Thanks for the retest after the directory removal.

PDI

REDACTED

  • Guest
Re: Avast prevent NAS to hibernate !
« Reply #24 on: July 16, 2017, 10:41:09 PM »
 >:(  another time, NAS not hibernate.. now with process monitor see aswidsagenta.exe search \\myNASname\...\SUBTITLEEDIT-3.5.3-SETUP.EXE
just installed

must add exclusion ?  Does not seem to be resolved with latest update.

Offline PDI

  • Avast team
  • Full Member
  • *
  • Posts: 159
Re: Avast prevent NAS to hibernate !
« Reply #25 on: July 18, 2017, 07:05:07 PM »
Hi Baudav,

the update doesn't contain any change for this issue. The change is planned for next release.

You can do the same steps as before. If you don't want to see the problem again, please, do not run any program from the NAS. Copy the executable to your PC and run the executable from it.

Regards,
PDI