Author Topic: Problem with log files  (Read 5647 times)

0 Members and 1 Guest are viewing this topic.

Offline yatha

  • Newbie
  • *
  • Posts: 12
Problem with log files
« on: November 16, 2010, 11:37:47 PM »
I have a problem with log files.
Avast are not cleared the log files.
My folder
C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\log
now about 18 GB.
Moreover files are created every second and I have 1-3 GB of logs every day!

Is it bug or feature?

I have Avast Internet Security 5.0.677 and Windows XP SP3.
« Last Edit: January 11, 2011, 06:15:52 PM by yatha »

Offline Charyb

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2298
Re: Problem with log files
« Reply #1 on: November 16, 2010, 11:59:30 PM »
How long have you had AIS installed and how long have you been having this problem? Do you currently have any other security software installed and what security software have you used in the past? How did you uninstall it?

You might want to post in the International Forum. The log files are not in English. Difficult to troubleshoot without knowing what the logs say. What are the logs telling you? Which log file is it being written to? Does the Avast! icon in the system tray spin non-stop?

http://forum.avast.com/index.php?board=21.0

Wow, that is quite a few entries. Why don't you try downloading Malwarebytes Free and perform a full scan. Make sure you update Malwarebytes first. http://www.malwarebytes.org/

Maybe there is some type of malware causing Avast! to write all of those logs and/or security software conflict. Make sure that you have uninstalled other security apps with the developers uninstall tool.
« Last Edit: November 17, 2010, 12:30:06 AM by Charyb »

Offline yatha

  • Newbie
  • *
  • Posts: 12
Re: Problem with log files
« Reply #2 on: November 17, 2010, 12:26:42 AM »
thank you
I will perform full scan with malwarebytes.
i have avast about 3 month and doesn't remember when problem is appear.
I had free version of avast and then upgraded it to Internet security.
There is Anvir Taskmanager Software on computer yet.

The log files in english. It consists of:

14.11.2010   1:10:40   SQL command 'INSERT INTO Packet (Time, LocalAddr, LocalPort, RemoteAddr, RemotePort, Protocol, PathId, Rule, Action, Flags) VALUES (129341598401093750, 858379977, 50838, 697697034, 2699, 6, 1, ?, 1, 65536);' failed, error 11 (database disk image is malformed)
14.11.2010   1:10:40   SQL command 'INSERT INTO Packet (Time, LocalAddr, LocalPort, RemoteAddr, RemotePort, Protocol, PathId, Rule, Action, Flags) VALUES (129341598401093750, 348930477, 46651, 697697034, 2700, 6, 1, ?, 1, 65536);' failed, error 11 (database disk image is malformed)
14.11.2010   1:10:40   SQL command 'INSERT INTO Packet (Time, LocalAddr, LocalPort, RemoteAddr, RemotePort, Protocol, PathId, Rule, Action, Flags) VALUES (129341598401250000, 2149279587, 51415, 697697034, 2701, 6, 1, ?, 1, 65536);' failed, error 11 (database disk image is malformed)
14.11.2010   1:10:40   SQL command 'INSERT INTO Packet (Time, LocalAddr, LocalPort, RemoteAddr, RemotePort, Protocol, PathId, Rule, Action, Flags) VALUES (129341598401250000, 1654231854, 35691, 697697034, 2538, 6, 1, ?, 1, 65536);' failed, error 11 (database disk image is malformed)
14.11.2010   1:10:40   SQL command 'INSERT INTO Packet (Time, LocalAddr, LocalPort, RemoteAddr, RemotePort, Protocol, PathId, Rule, Action, Flags) VALUES (129341598401250000, 1654231854, 35691, 697697034, 2538, 6, 1, ?, 1, 65536);' failed, error 11 (database disk image is malformed)
14.11.2010   1:10:40   SQL command 'INSERT INTO Packet (Time, LocalAddr, LocalPort, RemoteAddr, RemotePort, Protocol, PathId, Rule, Action, Flags) VALUES (129341598401250000, 863027290, 20747, 697697034, 3804, 6, 1, ?, 1, 65536);' failed, error 11 (database disk image is malformed)
14.11.2010   1:10:40   SQL command 'INSERT INTO Packet (Time, LocalAddr, LocalPort, RemoteAddr, RemotePort, Protocol, PathId, Rule, Action, Flags) VALUES (129341598401250000, 83911178, 80, 697697034, 2702, 6, 1, ?, 1, 65536);' failed, error 11 (database disk image is malformed)
14.11.2010   1:10:40   SQL command 'INSERT INTO Packet (Time, LocalAddr, LocalPort, RemoteAddr, RemotePort, Protocol, PathId, Rule, Action, Flags) VALUES (129341598401250000, 3174091085, 27547, 697697034, 2703, 6, 1, ?, 1, 65536);' failed, error 11 (database disk image is malformed)
14.11.2010   1:10:40   SQL command 'INSERT INTO Packet (Time, LocalAddr, LocalPort, RemoteAddr, RemotePort, Protocol, PathId, Rule, Action, Flags) VALUES (129341598401250000, 1887570775, 54657, 697697034, 2704, 6, 1, ?, 1, 65536);' failed, error 11 (database disk image is malformed)
14.11.2010   1:10:40   SQL command 'INSERT INTO Packet (Time, LocalAddr, LocalPort, RemoteAddr, RemotePort, Protocol, PathId, Rule, Action, Flags) VALUES (129341598401406250, 83911178, 80, 697697034, 2702, 6, 1, ?, 1, 65536);' failed, error 11 (database disk image is malformed)
14.11.2010   1:10:40   SQL command 'INSERT INTO Packet (Time, LocalAddr, LocalPort, RemoteAddr, RemotePort, Protocol, PathId, Rule, Action, Flags) VALUES (129341598401406250, 83911178, 80, 697697034, 2702, 6, 1, ?, 1, 65536);' failed, error 11 (database disk image is malformed)
14.11.2010   1:10:40   SQL command 'INSERT INTO Packet (Time, LocalAddr, LocalPort, RemoteAddr, RemotePort, Protocol, PathId, Rule, Action, Flags) VALUES (129341598401406250, 83911178, 80, 697697034, 2702, 6, 1, ?, 1, 65536);' failed, error 11 (database disk image is malformed)
« Last Edit: November 17, 2010, 12:28:29 AM by yatha »

Offline Charyb

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2298
Re: Problem with log files
« Reply #3 on: November 17, 2010, 12:30:50 AM »
What is the name of the log file? Does the Avast! icon in the system tray spin continuously? Have you opened task manager/show processes from all users/processes to see if there is anything that may be using excessive memory? It might give you a clue. Are you using any database programs that use SQL?
« Last Edit: November 17, 2010, 12:38:03 AM by Charyb »

Offline yatha

  • Newbie
  • *
  • Posts: 12
Re: Problem with log files
« Reply #4 on: November 17, 2010, 12:38:19 AM »
Name like Logging1288198061.log, Logging1288198124.log and other.
I token a screenshot above.
Avast! icon in the system tray spin continuously.
But some weeks ago I disabled it some times for 10 minutes, because I had a problem with online game in vk.com (analog facebook).

Offline Charyb

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2298
Re: Problem with log files
« Reply #5 on: November 17, 2010, 12:55:32 AM »
I personally do not know what the log is referring to. Maybe firewall database? The tags look like something that you would see in a firewall database. Or maybe something trying to access the internet? Malware?

I wonder if logging.log is a log created when there is an error with Avast? Maybe Avast is looking for something that is not there or is corrupt? Or maybe it is malware? Why don't you try an Avast! repair before anything else. It couldn't hurt.

Go to add/remove programs, select Avast! Internet Security, click on Uninstall/Change, then scroll down and select Repair then reboot. Please let us know of the results of this. If it fixes the problem then that would save some steps. Please continue with the Malwarebytes scan and post the results.

But some weeks ago I disabled it some times for 10 minutes, because I had a problem with online game in vk.com (analog facebook).
Will you please perform each one of these tasks and report your findings?
1. Please run the Malwarebytes scan and report the results.
2. Please open up task manager (right click on task bar and select start task manager)/show processes from all users/processes and report back which processes are using extraordinary amount of memory.
3. Please open MSCONFIG (see attachment example) and list (or attach) each program that runs at startup?

What version is your virus definitions? Has Avast been updating properly?(Open Avast GUI/Maintenance/Update)

Will you please answer each one of these questions?
1. Did you uninstall the game? I would if you haven't already. May have installed malware or it may be what has a corrupt database.
2. What web browser are you using?
3. Are you using any backup software?
4. Have you had any windows or program error messages.
5. What is the earliest date recorded in the log files?
6. Are you having any other problems? Problems with specific programs? Windows problems? Any programs crash recently?
7. Does the Avast! icon spin continuously when you open a specific program or does it spin continuously at startup and continue spinning?
8. Are you using any database programs that use SQL?
« Last Edit: November 17, 2010, 11:23:31 PM by Charyb »

Offline Nesivos

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1352
  • Artists Rendering of New Pauley Pavilion @ UCLA
Re: Problem with log files
« Reply #6 on: November 17, 2010, 01:11:23 AM »
I know this seems obvious, but I think Avast reports errors when it scans a corrupted file for whatever reason including "database disk image is malformed".  Just recently I got a bunch of files listed in the log file by the Avast scan.  The log said that the files were corrupt and could not be scanned.

Try running Windows or some other tool to check and fix your hard drive where the errors are occurring.

I don't think doing that can hurt anything.
« Last Edit: November 17, 2010, 01:13:47 AM by Nesivos »
OS: W7-SP1, Security: AIS 7, SAS Pro, WinPatrol Plus Network:2 Dell 570MT x64 1 Dell 660 Desktop with 8GB RAM Default Browser & Email: Firefox & Thunderbird latest Betas

Offline Charyb

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2298
Re: Problem with log files
« Reply #7 on: November 17, 2010, 01:25:59 AM »
I know this seems obvious, but I think Avast reports errors when it scans a corrupted file for whatever reason including "database disk image is malformed".  Just recently I got a bunch of files listed in the log file by the Avast scan.  The log said that the files were corrupt and could not be scanned.

Try running Windows or some other tool to check and fix your hard drive where the errors are occurring.

I don't think doing that can hurt anything.

@Nesivos
What was the name of the log file that had the files in it? Wish the log identified which program is causing the problem. That is why I was wanting OP to open task manager to see if there are any processes using abnormally high amounts of memory to help identify which program it may be. Do you have any other ideas on narrowing down the program? I recommended Malewarebytes before I even knew what the logs said.
« Last Edit: November 17, 2010, 05:35:37 AM by Charyb »

Offline yatha

  • Newbie
  • *
  • Posts: 12
Re: Problem with log files
« Reply #8 on: November 17, 2010, 11:00:24 PM »
Hello.
Thank you for help.
I've scanned my disk with Malwarebytes Free and find cml.exe (see attach)
When i deleted files all is ok. No more logs created :)

1. Did you uninstall the game? I would if you haven't already. May have installed malware or it may be what has a corrupt database.
it is onlain game/ i played it/
2. What web browser are you using?
chrome, firefox
3. Are you using any backup software?
no
4. Have you had any windows or program error messages.
no
5. What is the earliest date recorded in the log files?
don't remember i deleted it
august maybe
6. Are you having any other problems? Problems with specific programs? Windows problems? Any programs crash recently?
restart some times without errors
7. Does the Avast! icon spin continuously when you open a specific program or does it spin continuously at startup and continue spinning?
yes
8. Are you using any database programs that use SQL?
no


I will try REPAIR.
But now i have other problem.
when i try to go http://translate.google.ru/
avast tell me troyan detected  and disconnect firefox ^)


Offline Charyb

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2298
Re: Problem with log files
« Reply #9 on: November 17, 2010, 11:10:49 PM »
I will try REPAIR.
But now i have other problem.
when i try to go http://translate.google.ru/
avast tell me troyan detected  and disconnect firefox ^)



I have the same problem opening that website. Avast has detected it as infected with a java script trojan with its webshield. This is not a problem with your Avast program. Does MalwareBytes show that you are clean? From what little that I could read of the log it showed that you took no action. You need to make sure that MalwareBytes removes the infection.
« Last Edit: November 17, 2010, 11:20:22 PM by Charyb »

Offline yatha

  • Newbie
  • *
  • Posts: 12
Re: Problem with log files
« Reply #10 on: November 17, 2010, 11:21:06 PM »
Yes all ok and clean.
I didn't find this file in system32
and I remember that push delete button
I thought this log had created before i pushed delete button
and no strange logs is created now
but now I check again :)
it's a pity that avast didn't find malware :(
and it's qute strange that translator in google have a virus

Offline Charyb

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2298
Re: Problem with log files
« Reply #11 on: November 17, 2010, 11:28:43 PM »
Glad it worked. When I first viewed the log file I had no clue to exactly which program it was reporting on. It gave no specific information except that the outbound ports kept changing. That is the confusion created with malware. I am not a malware expert.
 
One security solution can not protect 100% against all threats. I am certain that Avast has protected you from more than you or I will ever know. And if I do get infected or have any problems, I know there are many on this forum that are willing to help. This is a major plus for me.

Before you run MalwareBytes again make certain that you update it again. The definitions are updated throughout the day so you want to make sure you are using the most recent.

Here is some details on the infection:
http://www.threatexpert.com/files/Cml.exe.html
http://www.prevx.com/filenames/2211892662966177613-X1/CML.EXE.html
« Last Edit: November 18, 2010, 12:35:01 AM by Charyb »

Offline yatha

  • Newbie
  • *
  • Posts: 12
Re: Problem with log files
« Reply #12 on: November 17, 2010, 11:48:54 PM »
I'm glad too  ;D
But i think that problem with log exists.
Avast have the logging.log file.
When this file file reached 4 MB it saved as loggingNNNNNN.log
but didn't delete this files after 30 days of creation.
Moreover this malware was not in autostart.
AnvirTask manager always tell me when autostart list changed.
Thank you.

 

Offline Charyb

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2298
Re: [Resolved]Problem with log files
« Reply #13 on: November 18, 2010, 12:09:16 AM »
I would just continue to monitor the logs. The malware may have played a part in that. You had a new 4096kb log created every second all day long. Kind of crazy isn't it? The default settings for each log is 4096kb and deletion after 30 days. Surprised it didn't bring your system down to a crawl. You could always reduce the days to test it. (instead of waiting a full 30 days)

After getting past the translation problems you have made it very easy for me by keeping the communication lines wide open. I wish everyone was as responsive as you. Thank you!
« Last Edit: November 18, 2010, 12:22:46 AM by Charyb »

Offline yatha

  • Newbie
  • *
  • Posts: 12
Re: Problem with log files
« Reply #14 on: January 11, 2011, 06:18:30 PM »
I had deleted Avast from computer till 1 month ago. And I used trial version of Kaspersky Internet Security. But trial version is end I i install Avast again.
And again received this problem.