Author Topic: Avast can't scan incoming POP3 mail error  (Read 47926 times)

0 Members and 1 Guest are viewing this topic.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re: Avast can't scan incoming POP3 mail error
« Reply #45 on: April 08, 2007, 03:43:10 PM »
I ran Outlook Express and no incoming mail was scanned so I'm right back to where I started.
Why are you sure about this?

I've had even less dealings with .ini file so I'm not sure how to follow Tech's directions to add to the mail scanner in that file.
I posted how to create logs of the mail scanner activity... I did not post anything related to how to scan a file...
The best things in life are free.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88897
  • No support PMs thanks
Re: Avast can't scan incoming POP3 mail error
« Reply #46 on: April 08, 2007, 04:08:14 PM »
An ini file is just a text file containing installation and setting information (Configuration Settings), it can be edited by a text editor like notepad, always make a copy and save in another location before editing the original. Just navigate to it in explorer "C:\Program Files\Alwil Software\Avast4\DATA\avast4.ini" Find the [MailScanner] section, directly under it, create an new line and enter the Log=20, save, exit and reboot.

I would say proceed with the HiJackThis download, create a folder for it HJT will do rather than leave it on the desktop or a temporary folder, run it, save the log and post the contents here. You can find the download and tutorial links in my previous pots here, http://forum.avast.com/index.php?topic=27569.msg224673#msg224673.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline alanrf

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3870
  • Just an avast user
Re: Avast can't scan incoming POP3 mail error
« Reply #47 on: April 08, 2007, 11:52:20 PM »
I may be missing something here but what is the point of getting Donna to create this log?

We are told that outbound mail is being scanned.  A log will simply confirm this (to what end?).  Since avast reports that the inbound intercept cannot be set then avast will not be logging any inbound activity because it cannot intercept it.  How does that get us any further?

I really think the effort on HJT and perhaps on getting a TCPView we can see would yield more information.


Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88897
  • No support PMs thanks
Re: Avast can't scan incoming POP3 mail error
« Reply #48 on: April 09, 2007, 12:21:18 AM »
I too don't feel it will reveal anything as the error is at boot and as you say if inbound traffic isn't being scanned there will be no log data for that, I was simply answering Donna's question.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

dford3772

  • Guest
Re: Avast can't scan incoming POP3 mail error
« Reply #49 on: April 09, 2007, 02:49:49 AM »
Avast! knows before or as it goes into the system tray on bootup that it cannot check my mail.  Since it worked briefly, it sounds more
like a bug in the Avast installation.  It checks outgoing mail perfectly still.  In fact that can't protect mail is the first thing I see on my desktop.  ASAP follows a Comodo allow/deny for Avast.  I agree that there is really nothing to log with HJT unless I am looking for an intruder.

I'm almost tempted to uninstall again using all the reboots, tools and scans and see if it would begin working again.  A log might be helpful from that point especially if it quits again so I guess I could do HJT first and then do all the remove etc.  It may even be
necessary to remove Avast files from register if there is something rotten in there so to speak.  As you can see I don't give up easily
especially when a solution is so near and yet so far.  I may even need to remove all Avast permissions from Comodo and let them
add themselves because I think there are already duplicates there.  Once they are removed I have to re-boot for that too as I
understand it.
Donna

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67195
Re: Avast can't scan incoming POP3 mail error
« Reply #50 on: April 09, 2007, 03:07:46 AM »
I may be missing something here but what is the point of getting Donna to create this log?
Try to know why the emails aren't being scanned...
The best things in life are free.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88897
  • No support PMs thanks
Re: Avast can't scan incoming POP3 mail error
« Reply #51 on: April 09, 2007, 03:37:24 AM »
Quote
I agree that there is really nothing to log with HJT unless I am looking for an intruder.
If this is in response to Alan and I saying it will reveal nothing that is about the avast log and 'not' HJT.

HJT doesn't just provide information on intruders, it provides information on everything running on your system. HJT if nothing else is useful for elimination purposes.

I honestly don't see another re-installation as a resolution of all the times you did that it only worked once (after the use of the uninstall utility, also cleaning registry) and then for only a short time, if this were a genuine avast bug it wouldn't just be happening to you and it would be consistent, it wouldn't be intermittent, now it works, now it doesn't.

I'm not sure deleting the comodo entries for avast will achieve what you are hoping, if it were blocking avast's ashMaiSv.exe then none of your email would work and not outbound works and inbound doesn't. However, it won't hurt to do it, but avast doesn't add itself to comodo, the firewall challenges an unknown (first use) application, your authorisation or denial adds it to comodo's applications list.

There really is only one option and that is running HJT and getting a log or Alan's suggestion of TCPview that will show what is using TCP connections. Personally I would go for HJT first.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline alanrf

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3870
  • Just an avast user
Re: Avast can't scan incoming POP3 mail error
« Reply #52 on: April 09, 2007, 06:42:14 AM »
Tech,

The avast mail log will show us what avast is intercepting - nothing.

Donna,

Do you know all of the drivers that are being loaded in your system at startup?  Do you know all of the programs that are being started during startup?  Have you used a product to tell you? 

Do you know what might still be there and loading an intercept that is preventing avast from loading its port 110 intercept?  Have you looked at what might be controlling the ports on your system?

If you do and you have already determined how to solve the problem (however briefly) then you will, most likely, not need any further help in resolving this.  It would be helpful if you could report the solution here to help anyone else who might face a similar problem.

dford3772

  • Guest
Re: Avast can't scan incoming POP3 mail error
« Reply #53 on: April 09, 2007, 02:42:21 PM »
David,

dford3772

  • Guest
Re: Avast can't scan incoming POP3 mail error
« Reply #54 on: April 09, 2007, 02:45:07 PM »
David,
   Don't know what happened as IE just cut off my message.  I have run a system log with HJT.  I'm confused on where you want me to send it and exactly how using notepad.  I'm a bit in over my head here.
Donna

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88897
  • No support PMs thanks
Re: Avast can't scan incoming POP3 mail error
« Reply #55 on: April 09, 2007, 02:54:16 PM »
When you complete the HJT scan there is a button to Save the Log, doing that opens the log in notepad. Simply copy and paste the contents of the log into your post.

If it is to large to post in one piece, copy the first half and paste that, then copy the second half and post that in another post.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

dford3772

  • Guest
Re: Avast can't scan incoming POP3 mail error
« Reply #56 on: April 09, 2007, 03:14:53 PM »
Logfile of HijackThis v1.99.1
Scan saved at 7:37:50 AM, on 4/9/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\bgsvcgen.exe
C:\Program Files\Comodo\Firewall\cmdagent.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe
C:\WINDOWS\system32\svchost.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Comodo\Firewall\CPF.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Zinio\ZinioDeliveryManager.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Audible\Bin\AudibleDownloadHelper.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\Documents and Settings\HP_Owner\My Documents\HJT\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q105&bd=pavilion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q105&bd=pavilion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q105&bd=pavilion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q105&bd=pavilion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q105&bd=pavilion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q105&bd=pavilion&pf=desktop
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SpywareBlock Class - {0A87E45F-537A-40B4-B812-E2544C21A09F} - C:\Program Files\SpyCatcher 2006\SCActiveBlock.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O3 - Toolbar: HP view - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: &Web Eyes - {C8C0204E-F720-4ec9-96F2-DF6C33C1E3CB} - C:\PROGRA~1\IONSYS~1\WEBEYE~1\WEBEYE~1.DLL
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\CPF.exe" /background
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [Zinio DLM] C:\Program Files\Zinio\ZinioDeliveryManager.exe /autostart
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Audible Download Manager.lnk = C:\Program Files\Audible\Bin\AudibleDownloadHelper.exe
O8 - Extra context menu item: Add To HP Organize... - C:\PROGRA~1\HEWLET~1\HPORGA~1\bin/module.main/favorites\ie_add_to.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {FC4F8941-BB5B-45c1-857C-E5B32157D00B} - C:\PROGRA~1\IONSYS~1\WEBEYE~1\WEBEYE~1.DLL
O9 - Extra 'Tools' menuitem: Web Eyes &Page Control - {FC4F8941-BB5B-45c1-857C-E5B32157D00B} - C:\PROGRA~1\IONSYS~1\WEBEYE~1\WEBEYE~1.DLL
O9 - Extra button: (no name) - {FD67E839-BCC2-4487-88DF-FB54C083CB14} - C:\PROGRA~1\IONSYS~1\WEBEYE~1\WEBEYE~1.DLL
O9 - Extra 'Tools' menuitem: Web &Eyes Reader - {FD67E839-BCC2-4487-88DF-FB54C083CB14} - C:\PROGRA~1\IONSYS~1\WEBEYE~1\WEBEYE~1.DLL
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkId=39204&clcid=0x409
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} - https://www-secure.symantec.com/techsupp/asa/LSSupCtl.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www1.snapfish.com/SnapfishActivia.cab
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} - http://ipgweb.cce.hp.com/rdqcpc/downloads/sysinfo.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1159798113515
O16 - DPF: {6F750200-1362-4815-A476-88533DE61D0C} (Ofoto Upload Manager Class) - http://www.kodakgallery.com/downloads/BUM/BUM_WIN_IE_1/axofupld.cab
O16 - DPF: {72C23FEC-3AF9-48FC-9597-241A8EBDFE0A} (InstallShield International Setup Player) - http://software.newsstand.com/reader/live/Disk1/isetupml.cab
O16 - DPF: {8BC53B30-32E4-4ED3-BEF9-DB761DB77453} (CInstallLPCtrl Object) - http://u3.sandisk.com/download/apps/LPInstaller.CAB
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/asa/ctrl/SymAData.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://www.streamload.com/Upload/XUpload.ocx
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINDOWS\system32\bgsvcgen.exe
O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Sansa Updater Service (SansaService) - Unknown owner - C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe


dford3772

  • Guest
Re: Avast can't scan incoming POP3 mail error
« Reply #57 on: April 09, 2007, 04:44:35 PM »
Even my untrained eye can see that something is wrong in Section 23 with two missing files that are crucial to Avast.

I wanted to check startup on my PC just out of curiosity but when I type MISCONFIG in an error appears saying that Windows cannot
find the file.  That's pretty scary to me as I have been using Selective Startup for some time after I got rid of some unneeded icons.
Donna

dford3772

  • Guest
Re: Avast can't scan incoming POP3 mail error
« Reply #58 on: April 09, 2007, 05:06:35 PM »
Well do I feel like a fool or not?  Guess it is a clue as to how rattled I am from this whole procedure. LOL

MSCONFIG works fine as it always does when you don't put in extra letters.  I'm still worried about the two Avast
missing files.
Donna

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88897
  • No support PMs thanks
Re: Avast can't scan incoming POP3 mail error
« Reply #59 on: April 09, 2007, 05:23:14 PM »
Ignore any 023 reference to avast processes, this is a hiccup in the HJT 1.99.1 (especially missing file entry for avast). If they were truly missing the web shield wouldn't work and if you check the physical location you will see they are there.

The correct Run command is MSCONFIG not  MISCONFIG.

Re your log, your untrained ey should also see references to symantec, these should be fixed, e.g. run HJT again and tick the box to the left of these entries and click the Fix checked button.

O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} - https://www-secure.symantec.com/techsupp/asa/LSSupCtl.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/asa/ctrl/SymAData.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/asa/ctrl/SymAData.cab

Other entries to fix:
O2 - BHO: SpywareBlock Class - {0A87E45F-537A-40B4-B812-E2544C21A09F} - C:\Program Files\SpyCatcher 2006\SCActiveBlock.dll (file missing)
O11 - Options group: [INTERNATIONAL] International*

Check, did you install this, do you know what they are, check on VirusTotal - Multi engine on-line virus scanner if not sure.

C:\WINDOWS\system32\bgsvcgen.exe
http://www.file.net/process/bgsvcgen.exe.html


Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security