IMHO there is something that not only prevents the automatic redirection to the mail scanner, but also block the mail scanner from connecting to mail servers.
Have you tried to search for the presence of the AVG's file avgemc.exe ?
Hi vojtech,
I have searched the windows registry and can not find the avgemc.
Regards,
Rex
The log contents:
05/23/06 08:03:35 00000650: Started as service, Log = 20
05/23/06 08:03:35 00000650: Build 4.7.827
05/23/06 08:03:35 00000650: Windows XP Workstation (Service Pack 2)
05/23/06 08:03:35 00000650: Using WinSock 2.0
05/23/06 08:03:35 00000650: PID = 972
05/23/06 08:03:35 00000650: AutoRedirect settings changed 1
05/23/06 08:03:36 00000650: IgnoreAddress set
05/23/06 08:03:36 00000650: IgnoreProcess set
05/23/06 08:03:36 00000650: IgnoreProcess set avast.setup,winroute.exe,ccEvtMgr.exe,ccPxySvc.exe,ccProxy.exe,ccApp.exe,ccPwdSvc.exe,ccSetMgr.exe,ccLgView.exe,SMPROXY.EXE,isafe.exe,TMPROXY.EXE,EMULE.EXE,WEBPROXY.EXE,NAVAPW32.EXE,SYMPROXYSVC.EXE,NETMONSV.EXE,CRAXY.EXE,CZDCPlusPlus.exe,ABC.EXE,mpftray.exe,bitcomet.exe,V3P3AT.EXE,ypager.exe
05/23/06 08:03:36 00000650: IgnoreProcess set avgemc.exe
05/23/06 08:03:36 00000650: IgnoreLocalhost settings changed 1
05/23/06 08:03:36 00000650: POP Start settings changed: 1
05/23/06 08:03:36 00000650: POP Listen settings changed: 127.0.0.1 12110
05/23/06 08:03:36 00000650: POP Listening daemon starting
05/23/06 08:03:36 00000650: POP Listen handler: 0x000007F8
05/23/06 08:03:36 00000650: POP RedirectPort: 110
05/23/06 08:03:36 00000650: Redirect set 110->127.0.0.1:12110
05/23/06 08:03:36 00000650: IgnoreLocalAddresses set 110
05/23/06 08:03:36 00000650: POP Listening daemon started
05/23/06 08:03:36 00000650: SMTP Start settings changed: 1
05/23/06 08:03:36 00000650: SMTP Listen settings changed: 127.0.0.1 12025
05/23/06 08:03:36 00000650: SMTP Listening daemon starting
05/23/06 08:03:36 00000650: SMTP Listen handler: 0x00000084
05/23/06 08:03:36 00000650: SMTP RedirectPort: 25
05/23/06 08:03:36 00000650: Redirect set 25->127.0.0.1:12025
05/23/06 08:03:36 00000650: IgnoreLocalAddresses set 25
05/23/06 08:03:36 00000650: SMTP Listening daemon started
05/23/06 08:03:36 00000650: IMAP Start settings changed: 1
05/23/06 08:03:36 00000650: IMAP Listen settings changed: 127.0.0.1 12143
05/23/06 08:03:36 00000650: IMAP Listening daemon starting
05/23/06 08:03:36 00000650: IMAP Listen handler: 0x00000088
05/23/06 08:03:36 00000650: IMAP RedirectPort: 143
05/23/06 08:03:36 00000650: Redirect set 143->127.0.0.1:12143
05/23/06 08:03:36 00000650: IgnoreLocalAddresses set 143
05/23/06 08:03:36 00000650: IMAP Listening daemon started
05/23/06 08:03:36 00000650: NNTP Start settings changed: 1
05/23/06 08:03:36 00000650: NNTP Listen settings changed: 127.0.0.1 12119
05/23/06 08:03:36 00000650: NNTP Listening daemon starting
05/23/06 08:03:36 00000650: NNTP Listen handler: 0x0000008C
05/23/06 08:03:36 00000650: NNTP RedirectPort: 119
05/23/06 08:03:36 00000650: Redirect set 119->127.0.0.1:12119
05/23/06 08:03:36 00000650: IgnoreLocalAddresses set 119
05/23/06 08:03:36 00000650: NNTP Listening daemon started
05/23/06 08:03:36 00000650: Ignored PIDs: 1624 972
05/23/06 08:03:36 00000650: Ignored Addresses: 169.254.225.94:119 127.0.0.1:119 169.254.225.94:143 127.0.0.1:143 169.254.225.94:25 127.0.0.1:25 169.254.225.94:110 127.0.0.1:110 72.3.135.203:80 193.243.128.78:80 193.243.128.76:80 62.132.1.234:80 198.200.173.74:80 198.200.173.139:80 127.0.0.1:80
05/23/06 08:03:36 00000650: Ignored Processes: avgemc.exe forx.exe FXMadeEasy.exe aoltpspd.exe waol.exe ypager.exe V3P3AT.EXE bitcomet.exe mpftray.exe ABC.EXE CZDCPlusPlus.ex CRAXY.EXE NETMONSV.EXE SYMPROXYSVC.EXE NAVAPW32.EXE WEBPROXY.EXE EMULE.EXE TMPROXY.EXE isafe.exe SMPROXY.EXE ccLgView.exe ccSetMgr.exe ccPwdSvc.exe ccApp.exe ccProxy.exe ccPxySvc.exe ccEvtMgr.exe winroute.exe avast.setup
05/23/06 08:14:36 00000720: IgnoreProcess set avast.setup,winroute.exe,ccEvtMgr.exe,ccPxySvc.exe,ccProxy.exe,ccApp.exe,ccPwdSvc.exe,ccSetMgr.exe,ccLgView.exe,SMPROXY.EXE,isafe.exe,TMPROXY.EXE,EMULE.EXE,WEBPROXY.EXE,NAVAPW32.EXE,SYMPROXYSVC.EXE,NETMONSV.EXE,CRAXY.EXE,CZDCPlusPlus.exe,ABC.EXE,mpftray.exe,bitcomet.exe,V3P3AT.EXE,ypager.exe
05/23/06 08:14:37 00000720: IgnoreProcess set avgemc.exe
05/23/06 08:53:24 000007F8: POP accept connection from: 127.0.0.1
05/23/06 08:53:24 000007F8: Connection handler: 00000A50 (484)
05/23/06 08:53:25 00000A50: Ignored PIDs: 1624 972
05/23/06 08:53:25 00000A50: Ignored Addresses: 72.3.135.203:80 193.243.128.78:80 193.243.128.76:80 62.132.1.234:80 198.200.173.74:80 198.200.173.139:80 127.0.0.1:80 169.254.225.94:119 127.0.0.1:119 169.254.225.94:143 127.0.0.1:143 169.254.225.94:25 127.0.0.1:25 169.254.225.94:110 127.0.0.1:110
05/23/06 08:53:25 00000A50: Ignored Processes: avgemc.exe forx.exe FXMadeEasy.exe aoltpspd.exe waol.exe ypager.exe V3P3AT.EXE bitcomet.exe mpftray.exe ABC.EXE CZDCPlusPlus.ex CRAXY.EXE NETMONSV.EXE SYMPROXYSVC.EXE NAVAPW32.EXE WEBPROXY.EXE EMULE.EXE TMPROXY.EXE isafe.exe SMPROXY.EXE ccLgView.exe ccSetMgr.exe ccPwdSvc.exe ccApp.exe ccProxy.exe ccPxySvc.exe ccEvtMgr.exe winroute.exe avast.setup
05/23/06 08:53:26 00000A50: --POP no command
05/23/06 08:53:26 00000A50: sent 30 (484)
05/23/06 08:53:26 00000A50: received 39 (484)
05/23/06 08:53:26 00000A50: ->POP USER myid@hotpop.com#pop.hotpop.com
05/23/06 08:53:29 00000A50: Cannot connect to POP server pop.hotpop.com (255.255.255.255:110), gethostbyname error 11001
05/23/06 08:53:29 00000A50: <-POP -ERR Cannot connect to POP server pop.hotpop.com (255.255.255.255:110), gethostbyname error 11001
05/23/06 08:53:29 00000A50: sent 99 (484)
05/23/06 08:53:29 00000A50: received 0 (484)
05/23/06 08:53:29 00000A50: --POP Finishing connection handler
05/23/06 08:53:36 000007F8: POP accept connection from: 127.0.0.1
05/23/06 08:53:36 000007F8: Connection handler: 00000C80 (428)
05/23/06 08:53:36 00000C80: Ignored PIDs: 1624 972
05/23/06 08:53:36 00000C80: Ignored Addresses: 72.3.135.203:80 193.243.128.78:80 193.243.128.76:80 62.132.1.234:80 198.200.173.74:80 198.200.173.139:80 127.0.0.1:80 169.254.225.94:119 127.0.0.1:119 169.254.225.94:143 127.0.0.1:143 169.254.225.94:25 127.0.0.1:25 169.254.225.94:110 127.0.0.1:110
05/23/06 08:53:36 00000C80: Ignored Processes: avgemc.exe forx.exe FXMadeEasy.exe aoltpspd.exe waol.exe ypager.exe V3P3AT.EXE bitcomet.exe mpftray.exe ABC.EXE CZDCPlusPlus.ex CRAXY.EXE NETMONSV.EXE SYMPROXYSVC.EXE NAVAPW32.EXE WEBPROXY.EXE EMULE.EXE TMPROXY.EXE isafe.exe SMPROXY.EXE ccLgView.exe ccSetMgr.exe ccPwdSvc.exe ccApp.exe ccProxy.exe ccPxySvc.exe ccEvtMgr.exe winroute.exe avast.setup
05/23/06 08:53:36 00000C80: --POP no command
05/23/06 08:53:36 00000C80: sent 30 (428)
05/23/06 08:53:36 00000C80: received 39 (428)
05/23/06 08:53:36 00000C80: ->POP USER myid@hotpop.com#pop.hotpop.com
05/23/06 08:53:38 00000C80: Cannot connect to POP server pop.hotpop.com (255.255.255.255:110), gethostbyname error 11001
05/23/06 08:53:38 00000C80: <-POP -ERR Cannot connect to POP server pop.hotpop.com (255.255.255.255:110), gethostbyname error 11001
05/23/06 08:53:38 00000C80: sent 99 (428)
05/23/06 08:53:38 00000C80: received 0 (428)
05/23/06 08:53:38 00000C80: --POP Finishing connection handler