Author Topic: SLOOOOW System  (Read 13211 times)

0 Members and 1 Guest are viewing this topic.

beagle1962

  • Guest
Re: SLOOOOW System
« Reply #15 on: August 21, 2006, 06:19:16 PM »
Quote
Yes there are a few infuriating internet links in the avast interface that launch IE to view the page rather than use the default browser. Better that you put the forum in your bookmarks/favourites of your default browser.
Quote
Done.

Beagle, maybe, maybe if activating logging in WebShield we can see something...

1. Edit <avast>\data\avast4.ini file
2. Find the section [WebScanner]
3. Add the line:
    EnableLogging=1
4. Restart Web Shield in XP (terminate and start again) or whole PC in case of Win98
5. Browse (trying to access some webpages)

The log file are <avast>\data\log\ashwebsv.log and ashwebsv.ws.
They would be accessible when WebShield is terminated again.
Post them here or send by mail to rypacek@asw.cz

After that, disable the logging to avoid a big log file.
Inserted line in ini file. Terminated and restarted Web Shield (actually rebooted to be on the safe side). Browsed the web. Went to both log files, which are empty. Puzzled. Have not yet deleted logging in the ini file.

Did find this in the "error" file:

8/19/2006   3:54:25 AM   1155984865   SYSTEM   1924   Function setifaceUpdatePackages() has failed. Return code is 0x20000004, dwRes is 20000004. 
8/19/2006   3:54:27 AM   1155984867   SYSTEM   1924   An error has occured while attempting to update. Please check the logs. 

aswMaiSv file shows:

08/21/06 08:57:53 0000006C:   Started as service, Log = 1
08/21/06 08:57:53 0000006C:   Build 4.7.871
08/21/06 08:57:53 0000006C:   Windows XP Workstation (Service Pack 2)
08/21/06 08:57:53 0000006C:   Using WinSock 2.0
08/21/06 08:57:53 0000006C:   AutoRedirect settings changed 1
08/21/06 08:57:53 0000006C:   IgnoreLocalhost settings changed 1
08/21/06 08:57:53 0000006C:   POP Start settings changed: 1
08/21/06 08:57:53 0000006C:   POP Listen settings changed: 127.0.0.1 12110
08/21/06 08:57:53 0000006C:   POP RedirectPort: 110
08/21/06 08:57:53 0000006C:   SMTP Start settings changed: 1
08/21/06 08:57:53 0000006C:   SMTP Listen settings changed: 127.0.0.1 12025
08/21/06 08:57:53 0000006C:   SMTP RedirectPort: 25
08/21/06 08:57:53 0000006C:   IMAP Start settings changed: 1
08/21/06 08:57:53 0000006C:   IMAP Listen settings changed: 127.0.0.1 12143
08/21/06 08:57:54 0000006C:   IMAP RedirectPort: 143
08/21/06 08:57:54 0000006C:   NNTP Start settings changed: 1
08/21/06 08:57:54 0000006C:   NNTP Listen settings changed: 127.0.0.1 12119
08/21/06 08:57:54 0000006C:   NNTP RedirectPort: 119

Will email setup file for period of 8/18 (when problem started) to today.


email sent to rypacek@asw.cz as "beagle1962 setup file 8/18 to current"
« Last Edit: August 21, 2006, 06:22:03 PM by beagle1962 »

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re: SLOOOOW System
« Reply #16 on: August 21, 2006, 07:55:22 PM »
aswMaiSv file
This is the mail log...

Will email setup file for period of 8/18 (when problem started) to today.
This setup.log file is the installation and update log...

We need the WebShield logs: <avast>\data\log\ashwebsv.log and ashwebsv.ws.
The best things in life are free.

beagle1962

  • Guest
Re: SLOOOOW System
« Reply #17 on: August 21, 2006, 09:47:44 PM »
aswMaiSv file
This is the mail log...

Will email setup file for period of 8/18 (when problem started) to today.
This setup.log file is the installation and update log...

We need the WebShield logs: <avast>\data\log\ashwebsv.log and ashwebsv.ws.
We need the WebShield logs: <avast>\data\log\ashwebsv.log and ashwebsv.ws.
Quote
I understand what you were asking for—I’m not a complete rube. As I was chided for not providing enough info. with my first post, I thought better of such reticence this time.

As I noted, the one file I was able to open was empty. I'm obviously missing something. Any clues? Followed instructions (also as noted) to add line to ini file, stop and resume WebShield, browse web, terminate WebShield again then access log file specified (could only open empty ashwebsv.log, not ashwebsv.ws). have just emailed copies of both.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re: SLOOOOW System
« Reply #18 on: August 21, 2006, 09:52:52 PM »
I understand what you were asking for—I’m not a complete rube.
Please, don't read any rude intention on the underline words... I've just made it to make reading easier...
I'm not upset... just trying to help you.

Well, the absence of the log is saying me that your WebShield isn't doing anything, not working, not being executed... seems this...
Do you have ashWebSv.exe running in background?
The best things in life are free.

beagle1962

  • Guest
Re: SLOOOOW System
« Reply #19 on: August 21, 2006, 11:46:50 PM »
I understand what you were asking for—I’m not a complete rube.
Please, don't read any rude intention on the underline words... I've just made it to make reading easier...
I'm not upset... just trying to help you.

Well, the absence of the log is saying me that your WebShield isn't doing anything, not working, not being executed... seems this...
Do you have ashWebSv.exe running in background?
I currently have the following running:
ashWebSv.exe
ashServ.exe
aswUpdSv.exe
ashDisp.exe
ashMaiSv.exe

avast tools show I am running IM, IMail, Network Shield, P2P Shield, Standard Shield and Web Shield, all in Normal mode.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re: SLOOOOW System
« Reply #20 on: August 22, 2006, 12:15:19 AM »
Yes. 12 hours and 7 symantec techs. later, I was directed to the proper tool to completely uninstall.

No. Overall usage is at 2%. Highest usage is msn.exe at ~32,000K. Next is explorer.exe at ~30,000K.

If the usage is 2% and nothing is conflicting, why are you saying the system is slow?
How much RAM do you have?
Which is your Internet speed connection?
The best things in life are free.

beagle1962

  • Guest
Re: SLOOOOW System
« Reply #21 on: August 22, 2006, 01:20:45 AM »
No. Overall usage is at 2%. Highest usage is msn.exe at ~32,000K. Next is explorer.exe at ~30,000K.

If the usage is 2% and nothing is conflicting, why are you saying the system is slow?
How much RAM do you have?
Which is your Internet speed connection?

You know the written word can be easily misconstrued without facial expression and vocal intonation. I have read several posts on this board--and in this thread--that could appear to be quite rude. I'm certain that's not what you mean to convey....

I have also read your (read: Tech.) posts that indicate a level of (understandable) frustration when the poster does not read and respond to what you have written. I understand that frustration as I have been answering the same questions more than once.

I will say again: I have 512K RAM. My connection is dedicated DSL. I say it is slow because, in addition to taking considerably longer to simply boot my system, it now takes 1 minute to 1 minute 30 to load the same pages that would take a maximum of 10 seconds before. My presumption, as the only change to my system since this symptom began, is that it is somehow related to the 8/18 update of your software.


Spiritsongs

  • Guest
Re: SLOOOOW System
« Reply #22 on: August 22, 2006, 02:36:39 AM »
 :)  Hi Beagle :

      Perhaps, by coincidence, during the same time frame as
      the Avast VPS Update took place, a piece of malware,
      such as a trojan, worm, rootkit, etc may have entered
      your computer !? Have you checked for such a possibility ?

beagle1962

  • Guest
Re: SLOOOOW System
« Reply #23 on: August 22, 2006, 02:57:46 AM »
:)  Hi Beagle :

      Perhaps, by coincidence, during the same time frame as
      the Avast VPS Update took place, a piece of malware,
      such as a trojan, worm, rootkit, etc may have entered
      your computer !? Have you checked for such a possibility ?
Hello Spiritsongs,
Yes, I have used your software for a complete system scan on 8/19 and it found no problems.

Spiritsongs

  • Guest
Re: SLOOOOW System
« Reply #24 on: August 22, 2006, 03:06:47 AM »
 :)  Hi Beagle :

     With all the different kinds of malware coming through the
     phone lines these days, should have more than just an
     antivirus ; do you have any antiSPYWARE program(s) ?
     If not, I would recommend you use Ewido from
     www.ewido.net/en ; this program "specializes" in
     detecting & quarantining trojans, worms, keyloggers,
     generic dialers, etc that antivirus or antispyware programs
     are not as good at doing . At least use Ewido's "Online
     Scanner" !?

Offline alanrf

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3870
  • Just an avast user
Re: SLOOOOW System
« Reply #25 on: August 22, 2006, 03:20:01 AM »
beagle1962,

You have referred a couple of times to "your software".

Just for clarification - every person who has participated in this thread with you is just an avast user as you are.  They have no control over or proprietary interest in the software. 

They are all volunteering their time and knowledge of avast in an effort to help other users.   


beagle1962

  • Guest
Re: SLOOOOW System
« Reply #26 on: August 22, 2006, 04:32:08 AM »
:)  Hi Beagle :

     With all the different kinds of malware coming through the
     phone lines these days, should have more than just an
     antivirus ; do you have any antiSPYWARE program(s) ?
     If not, I would recommend you use Ewido from
     www.ewido.net/en ; this program "specializes" in
     detecting & quarantining trojans, worms, keyloggers,
     generic dialers, etc that antivirus or antispyware programs
     are not as good at doing . At least use Ewido's "Online
     Scanner" !?
Hello again, Spiritsongs,
Thank you for the recommendation/suggestion. I will look into it. Is this something with which you have experience?

Post Script: It was my assumption (yes, I know what they say about one who assumes!), that the Web Shield was performing those functions. Live and learn...

beagle1962,

You have referred a couple of times to "your software".

Just for clarification - every person who has participated in this thread with you is just an avast user as you are.  They have no control over or proprietary interest in the software. 

They are all volunteering their time and knowledge of avast in an effort to help other users.   


Ah! That explains a lot....Thank you for setting me straight.
« Last Edit: August 22, 2006, 04:46:34 AM by beagle1962 »

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re: SLOOOOW System
« Reply #27 on: August 22, 2006, 04:39:41 AM »
You know the written word can be easily misconstrued without facial expression and vocal intonation. I have read several posts on this board--and in this thread--that could appear to be quite rude. I'm certain that's not what you mean to convey....
Beagle... I even think you were rude or need to ask for excuses... Don't worry  ;)

I have also read your (read: Tech.) posts that indicate a level of (understandable) frustration when the poster does not read and respond to what you have written. I understand that frustration as I have been answering the same questions more than once.
It's not frustrating... I enjoy helping (try to enjoy...), sometimes is just time consuming. Sorry to ask you the same questions again and again... I did not do on purpose...

Considerably longer to simply boot my system
Ok... avast is scanning the startup items... what can we do... You can:
1. Reduce the startup items.
2. Use the 'Normal' sensitivity for the Standard Shield.
3. Control your startup process using Try Startup Delayer.
4. Since avast! version 4.7.807 the Standard Shield has a feature called do not scan system libraries (by default on) that dramatically decrease the number of files scanned during computer boot.

It now takes 1 minute to 1 minute 30 to load the same pages that would take a maximum of 10 seconds before
Ok... WebShield is scanning the webpages being loaded... You can:
1. Set (if it's not done right now in your computer) the 'Use intelligent stream scanning'
2. Remove the 'Scan all files' and choose only a restricted set of files to be scanned.
3. Exclude safe urls to be scanned.

My presumption, as the only change to my system since this symptom began, is that it is somehow related to the 8/18 update of your software.
Their software...
But some days ago we had Microsoft patch Tuesday  ::)
The best things in life are free.

beagle1962

  • Guest
Re: SLOOOOW System
« Reply #28 on: August 22, 2006, 04:59:32 AM »
Considerably longer to simply boot my system
Ok... avast is scanning the startup items... what can we do... You can:
1. Reduce the startup items.
2. Use the 'Normal' sensitivity for the Standard Shield.
3. Control your startup process using Try Startup Delayer.
4. Since avast! version 4.7.807 the Standard Shield has a feature called do not scan system libraries (by default on) that dramatically decrease the number of files scanned during computer boot.

It now takes 1 minute to 1 minute 30 to load the same pages that would take a maximum of 10 seconds before
Ok... WebShield is scanning the webpages being loaded... You can:
1. Set (if it's not done right now in your computer) the 'Use intelligent stream scanning'
2. Remove the 'Scan all files' and choose only a restricted set of files to be scanned.
3. Exclude safe urls to be scanned.

My presumption, as the only change to my system since this symptom began, is that it is somehow related to the 8/18 update of your software.
Their software...
But some days ago we had Microsoft patch Tuesday  ::)
Tech,
Thank you for your post. I appreciate the help you are providing (especially as I am now aware that this is not "your" software).

I am currently using the "normal" setting on all providers. I will look into "Startup Delayer" later as I am currently unable to open the link you provided. I will uncheck the box to stop scanning dll files to see if that helps.

Intelligent Stream Scanning is currently checked. If I remove the "Scan all files" as you suggested, what file types would you suggest I do scan (exe, and ???). I will add urls to exclude in the scanning process.

I'm not sure I understand your Microsoft comment. Do you mean Microsoft had a recent update? I have Automatic Updates turned off, and I am very selective regarding what updates I will install. I have not done so in quite some time.

You have given me plenty to work with to see if I can speed things up. Again, I appreciate it.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re: SLOOOOW System
« Reply #29 on: August 22, 2006, 05:50:36 AM »
What file types would you suggest I do scan (exe, and ???). I will add urls to exclude in the scanning process.
I was afraid you'll ask me this... I really do not know... Need help from Alwil team or, maybe, RejZor...

I'm not sure I understand your Microsoft comment. Do you mean Microsoft had a recent update? I have Automatic Updates turned off, and I am very selective regarding what updates I will install. I have not done so in quite some time. You have given me plenty to work with to see if I can speed things up. Again, I appreciate it.
Microsoft updates on 8th August...
The best things in life are free.