Avast trouble with Windows Live Mail, any ideas?

[wiesshund]

I can not get avast (current version) to work with Windows Live Mail.

All my mail accounts require SSL to connect
Hotmail, Gmail, etc.
I use pop3/smtp as opposed to imap.
Live mail works fine when set up normaly and the accounts check to use SSL, but avast then pops up a warning message.
Disabling the SSL in live mail, as avast wants, results in not being able to send or recieve mail.

Avast does have the connections in the mail shield properly, but it doesn't seem to be redirecting windows live mail through it.
Anyone know how to fix this?

WLM's error messages are below.


Unable to send or receive messages for the Gmail account. The e-mail server returned an error.

Server Error: 0x800CCC90
Server Response: -ERR Cannot establish SSL with POP server 74.125.67.109:995, SSL_connect error 336142597
Server: 'pop.gmail.com'
Windows Live Mail Error ID: 0x800CCC90
Protocol: POP3
Port: 110
Secure(SSL): No

Unable to send or receive messages for the Hotmail account. The e-mail server returned an error.

Server Error: 0x800CCC90
Server Response: -ERR Cannot connect to POP server 65.54.62.215 (65.54.62.215:110), connect error 10060
Server: 'pop3.live.com'
Windows Live Mail Error ID: 0x800CCC90
Protocol: POP3
Port: 110
Secure(SSL): No

Avast mail log pasted in next post

[wiesshund]

12/16/2010   5:16:33 PM   00000EA4:   POP accept connection from: 127.0.0.1
12/16/2010   5:16:33 PM   00000EA4:   POP Connection handler: 000009E8 0000107C
12/16/2010   5:16:33 PM   000009E8:   Ignored PIDs: 1404 1404
12/16/2010   5:16:33 PM   000009E8:   Ignored Addresses: 192.168.1.2:80 127.0.0.1:80 62.44.1.143:0 62.44.1.142:0 62.44.1.141:0 62.44.1.140:0 208.77.152.158:80 208.77.154.134:80 72.3.135.203:80 193.243.128.78:80 193.243.128.76:80 62.132.1.234:80 204.58.27.61:80 204.58.27.60:80 204.58.27.58:80 204.58.27.57:80 204.58.27.53:80 204.58.27.51:80 204.58.27.50:80 204.58.27.49:80 204.58.27.45:80 204.58.27.43:80 204.58.27.42:80 204.58.27.41:80 204.58.27.37:80 204.58.27.35:80 204.58.27.34:80 204.58.27.33:80 198.200.173.74:80 198.200.173.139:80 199.187.125.171:119 75.126.149.157:119 70.86.176.98:119 212.26.219.158:119
12/16/2010   5:16:33 PM   000009E8:   Ignored Processes: msnmsgr.exe avgemc.exe forx.exe FXMadeEasy.exe aoltpspd.exe waol.exe googledesktop.e tor.exe wcescomm.exe utorrent.exe ypager.exe V3P3AT.EXE bitcomet.exe mpftray.exe ABC.EXE CZDCPlusPlus.ex CRAXY.EXE NETMONSV.EXE SYMPROXYSVC.EXE NAVAPW32.EXE WEBPROXY.EXE EMULE.EXE TMPROXY.EXE isafe.exe SMPROXY.EXE ccLgView.exe ccSetMgr.exe ccPwdSvc.exe ccApp.exe ccProxy.exe ccPxySvc.exe ccEvtMgr.exe winroute.exe avast.setup
12/16/2010   5:16:33 PM   000009E8:   command REDIRECT 98.139.213.176:110 3148
12/16/2010   5:16:33 PM   000009E8:   PATH: \Device\HarddiskVolume1\Program Files\Windows Live\Mail\wlmail.exe
12/16/2010   5:16:33 PM   000009E8:   Host name: pop1.sbc.mail.vip.bf1.yahoo.com
12/16/2010   5:16:33 PM   000009E8:   Domain: yahoo.com
12/16/2010   5:16:33 PM   000009E8:   Account found yahoo-POP:yahoo.com(POP)-SSL(995)
12/16/2010   5:16:33 PM   000009E8:   Connected to POP server 98.139.213.176 995
12/16/2010   5:16:33 PM   000009E8:   SSL handshake start
12/16/2010   5:16:33 PM   000009E8:   SSL_connect: before/connect initialization
12/16/2010   5:16:33 PM   000009E8:   SSL_connect: SSLv2/v3 write client hello A
12/16/2010   5:16:33 PM   000009E8:   SSL_connect: SSLv3 read server hello A
12/16/2010   5:16:33 PM   000009E8:   SSL_connect: SSLv3 read server certificate A
12/16/2010   5:16:33 PM   000009E8:   SSL_connect: SSLv3 read server certificate request A
12/16/2010   5:16:33 PM   000009E8:   SSL_connect: SSLv3 read server done A
12/16/2010   5:16:33 PM   000009E8:   SSL_connect: SSLv3 write client certificate A
12/16/2010   5:16:33 PM   000009E8:   SSL_connect: SSLv3 write client key exchange A
12/16/2010   5:16:33 PM   000009E8:   SSL_connect: SSLv3 write change cipher spec A
12/16/2010   5:16:33 PM   000009E8:   SSL_connect: SSLv3 write finished A
12/16/2010   5:16:33 PM   000009E8:   SSL_connect: SSLv3 flush data
12/16/2010   5:16:33 PM   000009E8:   SSL_connect: SSLv3 read finished A
12/16/2010   5:16:33 PM   000009E8:   SSL handshake done
12/16/2010   5:16:33 PM   000009E8:   SSL successfuly established
12/16/2010   5:16:33 PM   000009E8:   received (S) 64
12/16/2010   5:16:33 PM   000009E8:   <-POP +OK hello from popgate 2.46.7 on pop114.sbc.mail.bf1.yahoo.com
12/16/2010   5:16:33 PM   000009E8:   sent (C) 64
12/16/2010   5:16:33 PM   000009E8:   received (C) 24
12/16/2010   5:16:33 PM   000009E8:   ->POP USER ...
12/16/2010   5:16:33 PM   000009E8:   sent (S) 24
12/16/2010   5:16:33 PM   000009E8:   received (S) 24
12/16/2010   5:16:33 PM   000009E8:   <-POP +OK password required.
12/16/2010   5:16:33 PM   000009E8:   sent (C) 24
12/16/2010   5:16:33 PM   000009E8:   received (C) 17
12/16/2010   5:16:33 PM   000009E8:   ->POP PASS ...
12/16/2010   5:16:33 PM   000009E8:   sent (S) 17
12/16/2010   5:16:34 PM   000009E8:   received (S) 47
12/16/2010   5:16:34 PM   000009E8:   <-POP +OK maildrop ready, 0 messages (0 octets) (0)
12/16/2010   5:16:34 PM   000009E8:   sent (C) 47
12/16/2010   5:16:34 PM   000009E8:   received (C) 6
12/16/2010   5:16:34 PM   000009E8:   ->POP STAT
12/16/2010   5:16:34 PM   000009E8:   sent (S) 6
12/16/2010   5:16:34 PM   000009E8:   received (S) 9
12/16/2010   5:16:34 PM   000009E8:   <-POP +OK 0 0
12/16/2010   5:16:34 PM   000009E8:   sent (C) 9
12/16/2010   5:16:34 PM   000009E8:   received (C) 6
12/16/2010   5:16:34 PM   000009E8:   ->POP QUIT
12/16/2010   5:16:34 PM   000009E8:   sent (S) 6
12/16/2010   5:16:34 PM   000009E8:   received (S) 25
12/16/2010   5:16:34 PM   000009E8:   <-POP +OK server signing off.
12/16/2010   5:16:34 PM   000009E8:   sent (C) 25
12/16/2010   5:16:34 PM   000009E8:   SSL3 alert read: warning: close notify
12/16/2010   5:16:34 PM   00000EA4:   POP accept connection from: 127.0.0.1
12/16/2010   5:16:34 PM   000009E8:   connection closed (S) 0
12/16/2010   5:16:34 PM   00000EA4:   POP Connection handler: 00000A00 00000178
12/16/2010   5:16:34 PM   000009E8:   SSL3 alert write: warning: close notify
12/16/2010   5:16:34 PM   000009E8:   --POP Finishing connection handler
12/16/2010   5:16:34 PM   00000A00:   Ignored PIDs: 1404 1404
12/16/2010   5:16:34 PM   00000A00:   Ignored Addresses: 192.168.1.2:80 127.0.0.1:80 62.44.1.143:0 62.44.1.142:0 62.44.1.141:0 62.44.1.140:0 208.77.152.158:80 208.77.154.134:80 72.3.135.203:80 193.243.128.78:80 193.243.128.76:80 62.132.1.234:80 204.58.27.61:80 204.58.27.60:80 204.58.27.58:80 204.58.27.57:80 204.58.27.53:80 204.58.27.51:80 204.58.27.50:80 204.58.27.49:80 204.58.27.45:80 204.58.27.43:80 204.58.27.42:80 204.58.27.41:80 204.58.27.37:80 204.58.27.35:80 204.58.27.34:80 204.58.27.33:80 198.200.173.74:80 198.200.173.139:80 199.187.125.171:119 75.126.149.157:119 70.86.176.98:119 212.26.219.158:119
12/16/2010   5:16:34 PM   00000A00:   Ignored Processes: msnmsgr.exe avgemc.exe forx.exe FXMadeEasy.exe aoltpspd.exe waol.exe googledesktop.e tor.exe wcescomm.exe utorrent.exe ypager.exe V3P3AT.EXE bitcomet.exe mpftray.exe ABC.EXE CZDCPlusPlus.ex CRAXY.EXE NETMONSV.EXE SYMPROXYSVC.EXE NAVAPW32.EXE WEBPROXY.EXE EMULE.EXE TMPROXY.EXE isafe.exe SMPROXY.EXE ccLgView.exe ccSetMgr.exe ccPwdSvc.exe ccApp.exe ccProxy.exe ccPxySvc.exe ccEvtMgr.exe winroute.exe avast.setup
12/16/2010   5:16:34 PM   00000A00:   command REDIRECT 74.125.67.109:110 3148
12/16/2010   5:16:34 PM   00000A00:   PATH: \Device\HarddiskVolume1\Program Files\Windows Live\Mail\wlmail.exe
12/16/2010   5:16:34 PM   00000A00:   Host name: gw-in-f109.1e100.net
12/16/2010   5:16:34 PM   00000A00:   Domain: gmail.com
12/16/2010   5:16:34 PM   00000A00:   Account found gmail.com:gmail.com(POP)-SSL(995)
12/16/2010   5:16:35 PM   00000A00:   Connected to POP server 74.125.67.109 995
12/16/2010   5:16:35 PM   00000A00:   SSL handshake start
12/16/2010   5:16:35 PM   00000A00:   SSL_connect: before/connect initialization
12/16/2010   5:16:35 PM   00000A00:   SSL_connect: SSLv2/v3 write client hello A
12/16/2010   5:16:35 PM   00000A00:   SSL3 alert write: fatal: illegal parameter
12/16/2010   5:16:35 PM   00000A00:   SSL_connect: error in SSLv3 read server hello B
12/16/2010   5:16:35 PM   00000A00:   SSL_connect: error in SSLv3 read server hello B
12/16/2010   5:16:35 PM   00000A00:   Cannot establish SSL with POP server 74.125.67.109:995, SSL_connect error 336142597
12/16/2010   5:16:35 PM   00000A00:   <-POP -ERR Cannot establish SSL with POP server 74.125.67.109:995, SSL_connect error 336142597
12/16/2010   5:16:35 PM   00000A00:   sent (C) 90
12/16/2010   5:16:35 PM   00000A00:   --POP Finishing connection handler
12/16/2010   5:16:35 PM   00000EA4:   POP accept connection from: 127.0.0.1
12/16/2010   5:16:35 PM   00000EA4:   POP Connection handler: 00000E9C 00001144
12/16/2010   5:16:35 PM   00000E9C:   Ignored PIDs: 1404 1404
12/16/2010   5:16:35 PM   00000E9C:   Ignored Addresses: 192.168.1.2:80 127.0.0.1:80 62.44.1.143:0 62.44.1.142:0 62.44.1.141:0 62.44.1.140:0 208.77.152.158:80 208.77.154.134:80 72.3.135.203:80 193.243.128.78:80 193.243.128.76:80 62.132.1.234:80 204.58.27.61:80 204.58.27.60:80 204.58.27.58:80 204.58.27.57:80 204.58.27.53:80 204.58.27.51:80 204.58.27.50:80 204.58.27.49:80 204.58.27.45:80 204.58.27.43:80 204.58.27.42:80 204.58.27.41:80 204.58.27.37:80 204.58.27.35:80 204.58.27.34:80 204.58.27.33:80 198.200.173.74:80 198.200.173.139:80 199.187.125.171:119 75.126.149.157:119 70.86.176.98:119 212.26.219.158:119
12/16/2010   5:16:35 PM   00000E9C:   Ignored Processes: msnmsgr.exe avgemc.exe forx.exe FXMadeEasy.exe aoltpspd.exe waol.exe googledesktop.e tor.exe wcescomm.exe utorrent.exe ypager.exe V3P3AT.EXE bitcomet.exe mpftray.exe ABC.EXE CZDCPlusPlus.ex CRAXY.EXE NETMONSV.EXE SYMPROXYSVC.EXE NAVAPW32.EXE WEBPROXY.EXE EMULE.EXE TMPROXY.EXE isafe.exe SMPROXY.EXE ccLgView.exe ccSetMgr.exe ccPwdSvc.exe ccApp.exe ccProxy.exe ccPxySvc.exe ccEvtMgr.exe winroute.exe avast.setup
12/16/2010   5:16:35 PM   00000E9C:   command REDIRECT 65.54.62.215:110 3148
12/16/2010   5:16:35 PM   00000E9C:   PATH: \Device\HarddiskVolume1\Program Files\Windows Live\Mail\wlmail.exe
12/16/2010   5:16:35 PM   00000E9C:   Host name not found
12/16/2010   5:16:35 PM   00000E9C:   Account not found
12/16/2010   5:16:35 PM   00000E9C:   Account not found
12/16/2010   5:16:35 PM   00000E9C:   Connected to POP server 65.54.62.215 995
12/16/2010   5:16:35 PM   00000E9C:   SSL handshake start
12/16/2010   5:16:35 PM   00000E9C:   SSL_connect: before/connect initialization
12/16/2010   5:16:35 PM   00000E9C:   SSL_connect: SSLv2/v3 write client hello A
12/16/2010   5:16:35 PM   00000E9C:   SSL3 alert write: fatal: illegal parameter
12/16/2010   5:16:35 PM   00000E9C:   SSL_connect: error in SSLv3 read server hello B
12/16/2010   5:16:35 PM   00000E9C:   SSL_connect: error in SSLv3 read server hello B
12/16/2010   5:16:35 PM   00000E9C:   Cannot establish SSL with POP server 65.54.62.215:995, SSL_connect error 336142597

[Pondus]

this is how to

 avast! 5.x: Some e-mails are not scanned by the Mail Shield
http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=458


if you don`t get it to work, it is not a big issue as hotmail and gmail have already scanned the mail for virus
microsoft is scanning all hotmail/live mail with Trend Micro
Gmail is using two AV scanners McAfee and Authentium

and every file you move on your computer will be scanned by avast

[wiesshund]

It is already set up correctly, it is not functioning with Windows Live Mail
the debug logs are above, you can see it is doing something wrong.

And i dont trust hotmail/gmail to be my only protection against active emails.

[Pondus]

And i dont trust hotmail/gmail to be my only protection against active emails.

It wont be, if you recive a attachment and save it to disk, avast! will scan it..... like those who access hotmail/gmail as webmail
If you try to open it directly from the mail or from where you saved it, avast! will again scan it....

[huanito]

remind me again, what's the point of mail scanning if it is OK to turn it off and rely on file scanning?  Makes no sense to me either way.

[Theo Peterbroers]

Hi, wiesshund.
Avast mail shield will encrypt the email for you, as Hotmail or Gmail require.
Open Avast user interface > real time shields > mail shield > expert settings > SSL accounts.
Add the host for your mail account. It does get a bit technical here.
Regards,
Oooeehhhh, that was an old post.

huanito: mail is a string of bits even before it sits as a file on your harddisk. Are you absolutely sure that malware cannot become active in this phase?

[huanito]

Kwartet!: Are you abolutely sure that it can? In which case, for the benefit of other folks: it is not OK to switch off avast mail scan (as Pondus suggested...)

it's all very well that avast can encrpt the connection, iff (sic) it has the cert. Clearly for certain sites and systems the certs are not available and there is no guidance here as to how to get them.

This problem remains unsolved for a number of users...how to actually add a certs for hotmail or windows live and so get avast happily co-existing.

Avast have made a really great product but this part is a right royal PITA