New *release* build of avast now available (5.0.677)

[Gopher John]

http://secunia.com/advisories/windows_insecure_library_loading/

It is still vulnerabilitiy for Avast5.

After patch about one week.

My Secunia PSI says avast! V5.0.677 is secure.

I have Secunia PSI 2.0 beta installed, too.  It also indicates that Adobe Reader 9.3.4 is patched and shows no vulnerability but that's not true.

http://www.adobe.com/support/security/advisories/apsa10-02.html

The information that PSI 2 presents to the user is not as complete as PSI 1.5.0.2, plus by default it is set to autoupdate any programs that has patches.  I've disabled that function, as I'd rather control that myself.

Secunia is aware of the Acrobat Reader issue.  http://secunia.com/advisories/41340.  There is an issue with QuickTime 7.6.7 http://secunia.com/advisories/41213/.  However, since Adobe and Apple haven't yet made patches available, PSI 2 reports nothing in it's default view as it did before.  One can double-click on the individual program's line in PSI's results page and another window will open with a link where one can click on the Secunia Advisory to view the advisory in their default browser.

I think that the DLL loading vulnerability mentioned in http://secunia.com/advisories/41109 was addressed in one of the Avast beta releases, but at this time cannot find it in the forums.

[YoKenny]

@ Gopher John

Please go and read:
Why I do not use Adobe Reader
http://forum.avast.com/index.php?topic=63684.0 

[Gopher John]

@ Gopher John

Please go and read:
Why I do not use Adobe Reader
http://forum.avast.com/index.php?topic=63684.0 

I just visited the link you provided.  Adobe has had major problems with vulnerabilities in all their products for some time.

I've mitigated some of the Reader vulnerability by disabling Adobe JavaScripting, and disabling the plugin within Firefox.  Most of the other PDF viewers have had vulnerabilities in the past, most notably Foxit.

Based on my post about PSI 2, do you still fully trust the results it presents to you?

[Arizona]

 When in manual update no animate tray icon.Automatic update tray icon animate.

[Martinss]

Updated in XP SP3 and Win7 ultimate, all works fine 

[Hopper15]

The update went so smooth for me.  Job well done guys.

[Cahya Legawa]

I have been trying for a week to upgrade but without a single luck. From avast GUI, I always got error while the job on progress, using direct download from avast website - the job always stopped when reach 99%, it makes me frustrate, I'll try another day maybe .

[Light Archangel]

All fine here!!

Thanks for the new update Avast Team.

Regards

[Cahya Legawa]

Nope, still doesn't work, it stopped again at 99% when reach 47.08 MB from 47.12 MB, the link said that I am downloading from download858.avast.com. It always like this for this version, and the automatic download always failed. I don't know what is happening.

[DavidR]

Are you using a download manager ?
If not try one and see if that makes any difference, at the least it should be able to pick up where it left off.

[Cahya Legawa]

David,

Yes, I am using the lastest Orbit Downloader, I can see Orbit is trying to create a new link to download, but it closed again & again. I don't know what happen with the last 0.04 MB, why Orbit can't retrieve it.

Updating from GUI, said "connection terminated, retrying... http:download***.avast.com/iavs5x/setup_ais-2a5.vpx" and it always ended fail with error connection terminated at the very last.

I would like to download from other site for this version (avast pro), but I guess the only direct download available today is from avast website.

[DavidR]

You say that you are trying to download avast pro (stand alone antivirus, no firewall or anti-spam), but what you were trying to download is AIS (avast pro, plus firewall and anti-spam), which is different, not that that should make a difference. So what version is it that you are after ?

This is a direct link for avast pro http://files.avast.com/iavs5x/setup_av_pro.exe if it is the pro version you are looking for.

I gave up on Orbit Downloader a while back and just went for the firefox add-on (if you are using firefox), Download Them All, http://www.downthemall.net/ I'm not using any beta version just the 1.1.10 version.

[spg SCOTT]

You say that you are trying to download avast pro (stand alone antivirus, no firewall or anti-spam), but what you were trying to download is AIS (avast pro, plus firewall and anti-spam), which is different, not that that should make a difference. So what version is it that you are after ?
...

When you update from the GUI, it is the ais one that is downloaded...IIRC, I noticed this when updating to 677 myself.

(and I use the free version)

EDIT: you can also see it in the setup log:

Code: [Select]

...
17:57:02 min/gen  Running setup_ais-2a5 (677)
...

[Cahya Legawa]

Here is the log message if you can find anything wrong, I don't think I have a bad Internet connection.

16.09.2010 19:27:14 general: Started: 16.09.2010, 19:27:14
16.09.2010 19:27:14 general: Running setup_ais-252 (594)
16.09.2010 19:27:14 system: Operating system: Windows Vista ver 6.0, build 6002, sp 2.0 [Service Pack 2]
16.09.2010 19:27:14 system: Memory: 34% load. Phys:2017820/2097151K free, Page:4194303/4194303K free, Virt:2043952/2097024K free
16.09.2010 19:27:14 system: Computer WinName: NAOMI
16.09.2010 19:27:14 system: Windows Net User: Naomi\Haridiva
16.09.2010 19:27:14 general: Cmdline: /uninstwiz 
16.09.2010 19:27:14 general: Old version: 252 (594)
16.09.2010 19:27:14 registry: Deleted registry: Software\Alwil Software\Avast\5.0\UpdateReady
16.09.2010 19:27:14 system: Using temp: C:\Users\Haridiva\AppData\Local\Temp\_asw_aisI.tm~a02036 (35545M free)
16.09.2010 19:27:14 general: SGW32AIS::CheckIfInstalled set m_bAlreadyInstalled to 1
16.09.2010 19:27:14 general: DldSrc set to inet
16.09.2010 19:27:14 internet: SYNCER: Agent=Syncer/5.00 (ais-594;p)
16.09.2010 19:27:14 system: Computer DnsName: Naomi
16.09.2010 19:27:14 system: Computer Ip Addr: 172.16.6.48
16.09.2010 19:27:14 system: Installed in: C:\Program Files\Alwil Software\Avast5 (35545M free)
16.09.2010 19:27:14 internet: SYNCER: Type: use IE settings
16.09.2010 19:27:14 internet: SYNCER: Auth: another authentication, use WinInet
16.09.2010 19:27:14 package: Part prg_ais-2a5 is installed
16.09.2010 19:27:14 package: Part vps_win32-10091600 is installed
16.09.2010 19:27:14 package: Part setup_ais-2a5 is installed
16.09.2010 19:27:14 package: Part jrog-a7 is installed
16.09.2010 19:27:14 package: Part jrog2-2c is installed
16.09.2010 19:27:14 general: LoadState: Edition=2
16.09.2010 19:27:14 general: Old version: 252 (594)
16.09.2010 19:27:14 file: SetExistingFilesBitmap: 406->94->94
16.09.2010 19:27:14 general: GUID: 6f39d3d5-2ebb-4b67-a9d8-763bbb92b5b1
16.09.2010 19:27:15 general: Server definition(s) loaded for 'main': 293 (maintenance:0)
16.09.2010 19:27:15 general: SelectCurrent: selected server 'Download647 AVAST5 Server' from 'main'
16.09.2010 19:27:15 internet: SYNCER: Type: use IE settings
16.09.2010 19:27:15 internet: SYNCER: Auth: another authentication, use WinInet
16.09.2010 19:27:20 general: progress thread start
16.09.2010 19:27:25 internet: Used server: http://download647.avast.com/iavs5x
16.09.2010 19:27:25 file: GetFileWithRetry: servers.def.vpx downloaded .
16.09.2010 19:27:25 file: servers.def.vpx not changed, 1284356793
16.09.2010 19:27:26 general: Server definition(s) loaded for 'main': 293 (maintenance:0)
16.09.2010 19:27:26 general: SelectCurrent: selected server 'Download681 AVAST5 Server' from 'main'
16.09.2010 19:27:26 internet: SYNCER: Type: use IE settings
16.09.2010 19:27:26 internet: SYNCER: Auth: another authentication, use WinInet
16.09.2010 19:27:27 internet: Used server: http://download681.avast.com/iavs5x
16.09.2010 19:27:27 file: GetFileWithRetry: prod-ais.vpx downloaded .
16.09.2010 19:27:27 file: prod-ais.vpx not changed, 1284620523
16.09.2010 19:27:27 package: LoadProductVpu: C:\Program Files\Alwil Software\Avast5\Setup\prod-ais.vpx
16.09.2010 19:27:27 package: LoadPartInfo: jrog = jrog-a7 returned 00000000
16.09.2010 19:27:27 package: LoadPartInfo: jrog2 = jrog2-2c returned 00000000
16.09.2010 19:27:27 package: LoadPartInfo: program = prg_ais-2a5 returned 00000000
16.09.2010 19:27:27 package: LoadPartInfo: setup = setup_ais-2a5 returned 00000000
16.09.2010 19:27:27 package: LoadPartInfo: vps = vps_win32-10091600 returned 00000000
16.09.2010 19:27:27 package: LoadProductVpu: C:\Program Files\Alwil Software\Avast5\Setup\prod-ais.vpx ended with 00000000
16.09.2010 19:27:47 general: Operation set to INST_OP_UPDATE
16.09.2010 19:27:47 general: Entered SetupProcessAIS::Do( INST_OP_UPDATE )
16.09.2010 19:27:47 general: Entered SetupProcessWin32Avast::Do( INST_OP_UPDATE )
16.09.2010 19:27:47 general: progress thread start
16.09.2010 19:27:47 general: Entered SetupProcessAIS::Do( INST_OP_UPDATE_GET_PACKAGES )
16.09.2010 19:27:47 general: Entered SetupProcessWin32Avast::Do( INST_OP_UPDATE_GET_PACKAGES )
16.09.2010 19:27:47 general: Entered SetupProcessWin32::Do( INST_OP_UPDATE_GET_PACKAGES )
16.09.2010 19:27:47 general: Entered SetupProcess::Do( INST_OP_UPDATE_GET_PACKAGES )
16.09.2010 19:27:47 internet: SYNCER: Agent=Syncer/5.00 (ais-594;p)
16.09.2010 19:27:50 internet: Used server: http://download681.avast.com/iavs5x
16.09.2010 19:27:50 file: GetFileWithRetry: servers.def.vpx downloaded .
16.09.2010 19:27:50 file: servers.def.vpx not changed, 1284356793
16.09.2010 19:27:51 general: Server definition(s) loaded for 'main': 293 (maintenance:0)
16.09.2010 19:27:51 general: SelectCurrent: selected server 'Download699 AVAST5 Server' from 'main'
16.09.2010 19:27:51 internet: SYNCER: Type: use IE settings
16.09.2010 19:27:51 internet: SYNCER: Auth: another authentication, use WinInet
16.09.2010 19:27:53 internet: Used server: http://download699.avast.com/iavs5x
16.09.2010 19:27:53 file: GetFileWithRetry: prod-ais.vpx downloaded .
16.09.2010 19:27:53 file: prod-ais.vpx not changed, 1284620523
16.09.2010 19:27:53 package: LoadProductVpu: C:\Program Files\Alwil Software\Avast5\Setup\prod-ais.vpx
16.09.2010 19:27:53 package: LoadPartInfo: jrog = jrog-a7 returned 00000000
16.09.2010 19:27:53 package: LoadPartInfo: jrog2 = jrog2-2c returned 00000000
16.09.2010 19:27:53 package: LoadPartInfo: program = prg_ais-2a5 returned 00000000
16.09.2010 19:27:53 package: LoadPartInfo: setup = setup_ais-2a5 returned 00000000
16.09.2010 19:27:53 package: LoadPartInfo: vps = vps_win32-10091600 returned 00000000
16.09.2010 19:27:53 package: LoadProductVpu: C:\Program Files\Alwil Software\Avast5\Setup\prod-ais.vpx ended with 00000000
16.09.2010 19:27:53 general: Customer 12920064
16.09.2010 19:27:55 package: IsFullOkay: setup_ais-2a5.vpx - not okay (doesn't exist)
16.09.2010 19:27:55 package: Setup version is different: 594<>677
16.09.2010 19:27:56 internet: Used server: http://download699.avast.com/iavs5x
16.09.2010 19:27:56 file: GetFileWithRetry: servers.def.vpx downloaded .
16.09.2010 19:27:56 file: servers.def.vpx not changed, 1284356793
16.09.2010 19:27:57 general: Server definition(s) loaded for 'main': 293 (maintenance:0)
16.09.2010 19:27:57 general: SelectCurrent: selected server 'Download725 AVAST5 Server' from 'main'
16.09.2010 19:27:57 internet: SYNCER: Type: use IE settings
16.09.2010 19:27:57 internet: SYNCER: Auth: another authentication, use WinInet
16.09.2010 19:27:58 internet: Used server: http://75.126.120.201/iavs5x
16.09.2010 19:27:58 file: GetFileWithRetry: prod-ais.vpx downloaded .
16.09.2010 19:27:58 file: prod-ais.vpx not changed, 1284620523
16.09.2010 19:27:58 package: LoadProductVpu: C:\Program Files\Alwil Software\Avast5\Setup\prod-ais.vpx
16.09.2010 19:27:58 package: LoadPartInfo: jrog = jrog-a7 returned 00000000
16.09.2010 19:27:58 package: LoadPartInfo: jrog2 = jrog2-2c returned 00000000
16.09.2010 19:27:58 package: LoadPartInfo: program = prg_ais-2a5 returned 00000000
16.09.2010 19:27:58 package: LoadPartInfo: setup = setup_ais-2a5 returned 00000000
16.09.2010 19:27:58 package: LoadPartInfo: vps = vps_win32-10091600 returned 00000000
16.09.2010 19:27:58 package: LoadProductVpu: C:\Program Files\Alwil Software\Avast5\Setup\prod-ais.vpx ended with 00000000
16.09.2010 19:27:58 general: Customer 12920064
16.09.2010 19:28:01 package: FilterOutExistingFiles: 94 & 94 = 0
16.09.2010 19:28:01 package: IsFullOkay: setup_ais-2a5.vpx - not okay (doesn't exist)
16.09.2010 19:28:01 package: SetDownloadBits: setup_ais setting 1 diffs to process
16.09.2010 19:28:23 internet: Used server: http://75.126.120.201/iavs5x
16.09.2010 19:28:23 file: GetFileWithRetry: setup_ais-2a5-252.vpx downloaded  and verified
16.09.2010 19:28:23 package: DldPackage: C:\Program Files\Alwil Software\Avast5\Setup\setup_ais-2a5-252.vpx, returned 0x00000000
16.09.2010 19:28:23 package: PerformPkgDiff: pPkgDiffStorage->m_pbtBufNew allocated 3016560
16.09.2010 19:28:23 package: PerformDiff: Ok
16.09.2010 19:28:23 package: ERROR PerformPkgDiff: DSA_FileVerify(C:\Program Files\Alwil Software\Avast5\Setup\setup_ais-2a5.vpx) failed, error 0x2000000B
16.09.2010 19:28:23 package: IsFullOkay: setup_ais-2a5.vpx - not okay (doesn't exist)
16.09.2010 19:28:23 package: SetFullAsMarked: Package setup_ais set to 1
16.09.2010 19:30:02 internet: ERROR:HttpGetWininet, catch returned 0x00002EE2 (12002)
16.09.2010 19:31:08 internet: ERROR:HttpGetWininet, catch returned 0x00002EE2 (12002)
16.09.2010 19:32:15 internet: ERROR:HttpGetWininet, catch returned 0x00002EE2 (12002)
16.09.2010 19:33:41 internet: ERROR:HttpGetWininet, catch returned 0x00002EE2 (12002)
16.09.2010 19:34:09 package: DldPackage: C:\Program Files\Alwil Software\Avast5\Setup\setup_ais-2a5.vpx, returned 0x000004c7

Since the process always got terminated at the middle, so I canceled it before the log file becomes too long. Could someone told me if there is anything wrong with my update system.

Thanks before.

[DavidR]

Yes, but Cahya doesn't appear to be updating from the GUI as he said he is using a Orbit download manager, thought the reference he gave was from a failed UI update.

So I don't know what error message he got in Orbit download or what file he tried to download or what location he tried. That is what I'm trying to find out, I guess we will have to wait for a response from Cahya.

@ Cahya
What is your internet connection (dial-up or broadband) ?
leave the update from the UI for the time being, did you try one from Orbit downloader, if so what was the error you got there ?