Author Topic: 5 minutes to scan 4 mails........ :-(  (Read 20663 times)

0 Members and 1 Guest are viewing this topic.

eric37200

  • Guest
Re:5 minutes to scan 4 mails........ :-(
« Reply #15 on: November 26, 2004, 01:45:29 PM »
hi vlk
as soon as possible i reply....(night was short... 8) )
i try avast beta version since yesterday and i haven't got this message...but always problems...
...but to answer your question, this is the other message : "AAVM - scanning error: OpenEventsAndMapping: OpenEvent failed!, 00000002.  "

and a extract of the contents of the file  <avast>\data\log\aswMaiSv.log...
...i havent got error logs files...
--POP Mail is clean
11/26/04 02:48:30 00000EE8:   --POP Timeout during ProcessFile
11/26/04 02:48:31 00000FF0:   --POP Timeout during ProcessFile
11/26/04 02:48:40 00000EE8:   --POP Timeout during ProcessFile
11/26/04 02:48:41 00000FF0:   --POP Timeout during ProcessFile
11/26/04 02:48:50 00000EE8:   --POP Timeout during ProcessFile
11/26/04 02:48:51 00000FF0:   --POP Timeout during ProcessFile
11/26/04 02:49:00 00000EE8:   --POP Timeout during ProcessFile
11/26/04 02:49:01 00000FF0:   --POP Timeout during ProcessFile
11/26/04 02:49:10 00000EE8:   --POP Timeout during ProcessFile
11/26/04 02:49:11 00000FF0:   --POP Timeout during ProcessFile
11/26/04 02:49:20 00000EE8:   --POP Timeout during ProcessFile
11/26/04 02:49:21 00000FF0:   --POP Timeout during ProcessFile
11/26/04 02:49:30 00000EE8:   --POP Timeout during ProcessFile
11/26/04 02:49:31 00000FF0:   --POP Timeout during ProcessFile
11/26/04 02:49:40 00000EE8:   --POP Timeout during ProcessFile
11/26/04 02:49:41 00000FF0:   --POP Timeout during ProcessFile
11/26/04 02:49:50 00000EE8:   --POP Timeout during ProcessFile
11/26/04 02:51:20 00000E9C:   TimeoutThread error -1(0xFFFFFFFF)
11/26/04 02:51:20 00000E9C:   --POP Mail is infected
11/26/04 02:51:20 00000E9C:   SendTimeout2 error 10053(0x00002745)
11/26/04 02:51:20 00000E9C:   RecvTimeout error 10053(0x00002745)
11/26/04 02:51:21 00000494:   --SMTP Mail is clean
11/26/04 02:51:21 00000494:   RecvTimeout error 10053(0x00002745)
11/26/04 02:51:28 00000964:   --POP Heuristic module found something and user wants to delete message
11/26/04 02:51:28 00000964:   SendTimeout error 10053(0x00002745)
11/26/04 02:51:28 00000964:   --POP [Heuristic] : Cannot send modified message!
11/26/04 02:51:28 00000964:   TimeoutThread error -1(0xFFFFFFFF)

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67241
Re:5 minutes to scan 4 mails........ :-(
« Reply #16 on: November 26, 2004, 07:09:00 PM »
Are you using the last build 4.5.536?
It solves the timeout problems.
The best things in life are free.

eric37200

  • Guest
Re:5 minutes to scan 4 mails........ :-(
« Reply #17 on: November 26, 2004, 07:15:44 PM »
actually i try last beta version updated...  
...with same results....
 :-\
« Last Edit: November 27, 2004, 02:12:10 PM by eric37200 »

farfouille

  • Guest
Re:5 minutes to scan 4 mails........ :-(
« Reply #18 on: November 27, 2004, 02:41:34 PM »
Hello,

I've the same problem as eric with avast beta 4.5.536 ; it takes more than 3 minutes to pop an eicar infected simple mail while a clean simple one is very quick.

Configuration :
laptop win xp sp2 french.
outlook express 6, get mail with pop protocol
ISP connection through dial-up (connect at 33kb/s)
avast home beta 4.5.536 french / silent mode  / mail scanner at normal sensibility /
setup to send an SMTP alert when a virus is found

Test :
Get eicar infected mail and clean mail from :
http://www.aleph-tec.com/eicar/index.php

Result :
Long delay to get mail and the following error in avast error.log :

27/11/2004 14:09:36 1101560976 SYSTEM 1752 AAVM - scanning error: OpenEventsAndMapping: OpenEvent failed!, 00000002.
27/11/2004 14:09:36 1101560976 SYSTEM 1752 AAVM - scanning error: ClientRqDispatchThread: OpenEventsAndMapping failed - client probably died, 00000003.

Remark :
When I switch the ISP connection from dial-up to ADSL, the mail are retrieved quickly but still the infected mails are longer than clean ones to get. No avast error with ADSL.

Hope you can find a solution

Farfouille





eric37200

  • Guest
Re:5 minutes to scan 4 mails........ :-(
« Reply #19 on: November 27, 2004, 02:49:45 PM »
yep !
same problem....im not alone.... :P
just one difference : i used adsl everytime...
...actually to retrived quickly my mails i should stop avast mail protection... ::)

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67241
Re:5 minutes to scan 4 mails........ :-(
« Reply #20 on: November 27, 2004, 03:22:30 PM »
Farfouille and Eric, if you both uninstall your firewall, will the message be scanned faster?
Did you set your 'proxy' settings of avast (Updates (Basic) > Details > Proxy) to not a proxy at all?
The best things in life are free.

farfouille

  • Guest
Re:5 minutes to scan 4 mails........ :-(
« Reply #21 on: November 27, 2004, 04:12:49 PM »
Hi Technical

Thank for your help.

My proxy setting are the default : automatic detection (IE settings)

Firewall : I use SP2 fw so I can't desinstall it. I've tried to disable it and the result is the same (infected files very very slow to retrieve).

Farfouille

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67241
Re:5 minutes to scan 4 mails........ :-(
« Reply #22 on: November 27, 2004, 05:22:02 PM »
My proxy setting are the default : automatic detection (IE settings)

This could be a problem. Set not a proxy at all.

Firewall : I use SP2 fw so I can't desinstall it. I've tried to disable it and the result is the same (infected files very very slow to retrieve).

No need for uninstall as the internal firewall blocks only inbound attacks and not outbound connections.
The best things in life are free.

eric37200

  • Guest
Re:5 minutes to scan 4 mails........ :-(
« Reply #23 on: November 27, 2004, 05:32:21 PM »
Farfouille and Eric, if you both uninstall your firewall, will the message be scanned faster?
Did you set your 'proxy' settings of avast (Updates (Basic) > Details > Proxy) to not a proxy at all?
yep...i try...but no viruses at this time to say if its good or no...
...but i test proxy settings : thats ok
....and all of this happened only with da new version of avast...strange...
i used avast since at least 1 year without problems...so good antivirus !

farfouille

  • Guest
Re:5 minutes to scan 4 mails........ :-(
« Reply #24 on: November 27, 2004, 05:55:14 PM »
To Technical :

I've changed the proxy setting of avast! to use direct connection but it is not better.
Btw I don't understand how the setting for updates can change something to the mail scanner.  Imo they are 2 different parts of avast...

To Eric :
You can use this site to send you eicar pseudo infected mail (harmless) and test your settings :
http://www.aleph-tec.com/eicar/index.php

Farfouille

eric37200

  • Guest
Re:5 minutes to scan 4 mails........ :-(
« Reply #25 on: November 27, 2004, 06:19:30 PM »
yep thanks farfouille...just when i test with eicar, i received real viruses... :)
....and i stop avast.....avast scan scan & scan....between this time i cant received mails....3 minutes later i stopped avast....desinstalled avast beta version....and reinstalled avast ....for the last time.... :-[

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67241
Re:5 minutes to scan 4 mails........ :-(
« Reply #26 on: November 27, 2004, 08:34:39 PM »
Btw I don't understand how the setting for updates can change something to the mail scanner.  Imo they are 2 different parts of avast...

There are two questions in the same thread: updade and mail scanner. I tried to answer the first one. Proxy filters do interfere with updates  8)
The best things in life are free.

farfouille

  • Guest
Re:5 minutes to scan 4 mails........ :-(
« Reply #27 on: November 27, 2004, 09:13:04 PM »
Technical,

There is only one question : behaviour of the mail scanner with infected mail which is really an issue because I think Eric is near to give up and, sure, many people will,  if this is not adressed with next releases...

I do understand that proxy setting can affect updates, but once again it is not the question. Neither Eric nor me have problem with updates. No offense there, you answer to so many questions and your devotion to help users is priceless.

Farfouille
 


eric37200

  • Guest
Re:5 minutes to scan 4 mails........ :-(
« Reply #28 on: November 27, 2004, 09:32:56 PM »
back again.... :)
i've just re-installed last version of avast...
....everything is ok at this time...
sensitivity = high ....as usual for me...
....wait & see..................... 8)

farfouille

  • Guest
Re:5 minutes to scan 4 mails........ :-(
« Reply #29 on: November 27, 2004, 10:23:47 PM »
Eric

When you say everything is normal, do you mean that you received infected mail (eicar or else) and that the mail scanner didn't take much time to handle it ?

Farfouille