Author Topic: Something changed with today's update, double scan  (Read 9350 times)

0 Members and 1 Guest are viewing this topic.

Offline sijgs

  • Newbie
  • *
  • Posts: 18
Something changed with today's update, double scan
« on: November 25, 2004, 01:16:30 AM »
I run my own e-mail server (MDaemon) which is on ports 110/25 (POP3/SMTP) and so I have Outlook Express changed to send/receive on ports 26/111 and Avast default listening ports set to those as well.

After today's update... in Outlook Express, the SMTP server was changed from 127.0.0.1 to 127.0.0.1:25 ????? Of course, that didn't work, so I removed the :25.

Well, everything seems o.k. now EXCEPT, Avast is not only scanning my mail when it's sent from Outlook Express to MDaemon, but....

Somehow, it has it's hooks into MDaemon SENDING the E-Mail and scans it again as it is sent......

Any clues as to why this might be happening now???

I scanned the Avast4.INI file and there is no apparent reason in there for the action....and I can't fathom how it got it's hooks into outgoing mail.... yes the mail goes to the recipient o.k.

Any thoughts?

Regards,
JGS

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31309
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Something changed with today's update, double scan
« Reply #1 on: November 25, 2004, 01:18:19 AM »
The new version of Avast works transparantly on Nt based systems. Setup the mail as if Avast isn't there. Does this solves the problem?

Offline sijgs

  • Newbie
  • *
  • Posts: 18
Re:Something changed with today's update, double scan
« Reply #2 on: November 25, 2004, 01:46:22 AM »
Are you saying that it can figure out that there is an "onboard e-mail system" and I no longer have to have OE feed Avast who feeds MDaemon??????


Errrr.... how did "They" accomplish that????

JGS

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31309
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Something changed with today's update, double scan
« Reply #3 on: November 25, 2004, 01:48:20 AM »
Quote
Are you saying that it can figure out that there is an "onboard e-mail system" and I no longer have to have OE feed Avast who feeds MDaemon??????
Avast should work that way now.

Quote
Errrr.... how did "They" accomplish that????
With a lot of work ;D

Offline sijgs

  • Newbie
  • *
  • Posts: 18
Re:Something changed with today's update, double scan
« Reply #4 on: November 25, 2004, 01:52:29 AM »
cute.... o.b.k.b. I'll remove the double routing and check....

I'll post it here so everyone can read it (???? and weep?)

Tnx, Gracie, Danke Schoen, etc.

JGS

Offline sijgs

  • Newbie
  • *
  • Posts: 18
Re:Something changed with today's update, double scan
« Reply #5 on: November 25, 2004, 04:45:35 AM »
 ??? I changed OE to port 25/110 and the outgoing e-mail did not get scanned AT ALL.

Changed it back, and it scanned it twice.....


Thoughts?

Regards,
JGS

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31309
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Something changed with today's update, double scan
« Reply #6 on: November 25, 2004, 04:47:55 AM »
Can you try this:

- Create a backup of Avast4.ini
- Than change the mail section part in avast4.ini so that these settings are there:
[MailScanner]
Log=20
DefaultPopServer=
DefaultSmtpServer=
ShowTrayIcon=1
UseDefaultSmtp=0
AutoSetProtection=0
PopListen=
SmtpListen=
ImapListen=

- Setup the mail as if Avast isn't there.
- Check if the mail is working

Let us know if it helps.

Offline sijgs

  • Newbie
  • *
  • Posts: 18
Re:Something changed with today's update, double scan
« Reply #7 on: November 25, 2004, 04:56:36 AM »
as they say in Chinese, Voila' ... er or is that Korean.. (snick)

Thanks, that did the trick.... it now scans just one time... upon sending from MDaemon....

Now just HOW did you hook in there.....???? and what????

Regards,
JGS

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31309
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Something changed with today's update, double scan
« Reply #8 on: November 25, 2004, 05:14:21 AM »
I studied for magician ;D

I (and others) where helping someone with a problem with Avast, we tried all kinds of things. That ruled out a lot of things. Suddenly I thought "What if for some reason the update from 4.1 to 4.5 doesn't handle the settings in Avast4.ini correctly?" The person we where helping was willing to try it and it worked.

That's how I came up with this solution. I now hope that Alwil will look into this because it seems that on certain systems the upgrade isn't exactly going like it should.

ps: The line Log=20 is for extended logging. You can safely remove that if you don't want an extended lof file.
« Last Edit: November 25, 2004, 05:30:21 AM by Eddy »

Offline sijgs

  • Newbie
  • *
  • Posts: 18
Re:Something changed with today's update, double scan
« Reply #9 on: November 25, 2004, 06:18:45 AM »
 ;D HA! mine is log=100 (so I just left it.....)

Thanks much for the "steppin' in there..." great to know there is such a willing set of support help in the community...

Regards,
JGS

Offline sijgs

  • Newbie
  • *
  • Posts: 18
Re:Something changed with today's update, double scan
« Reply #10 on: November 25, 2004, 06:23:39 AM »
Whoa! belay that  "IT'S WONDERFUL" line I just passed...


NOW,


No incoming mail is scanned.....

HOLY MACKEREL!!!!

Whas' up now????

JGS

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31309
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Something changed with today's update, double scan
« Reply #11 on: November 25, 2004, 06:42:57 AM »
Are you using a NT based system? If not, run the mail protection wizzard.
« Last Edit: November 25, 2004, 06:50:51 AM by Eddy »

Offline sijgs

  • Newbie
  • *
  • Posts: 18
Re:Something changed with today's update, double scan
« Reply #12 on: November 25, 2004, 06:53:03 AM »
I guess I have to presume that W2K is an NT based system.... no? ..... yes, I am then....

Again Regards,
JGS

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31309
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Something changed with today's update, double scan
« Reply #13 on: November 25, 2004, 06:56:03 AM »
Yes, 2K is NT based.

Can you retry the procedure we did to see what happens?
Also check Avast's log file for an error.

And what is telling you that the mail isn't scanned?
« Last Edit: November 25, 2004, 06:56:27 AM by Eddy »

Offline sijgs

  • Newbie
  • *
  • Posts: 18
Re:Something changed with today's update, double scan
« Reply #14 on: November 25, 2004, 07:02:08 AM »
Normally (.... er before this "erpdate?")

it would show me the little title bar above the toolbar on the bottom whenever it "scanned" an e-mail coming in from MDaemon, and also insert the text that it was scanned by Avast and clean....

:-( no such bar now or item inserted in the message

I am not sure of what else you are asking .... as in "try it again...." can you elaborate or is it just too late here and I don't comprehend.....(sorry if so...)

Regards,
JGS