There were no entries in the Avast log file so I did a repair via Add/Remove programms and re booted, so far the pop-up has not appeared again. I do not know what caused this problem as all malware scans have come back clean and Avast seems to be working fine. Is there any other course of action that I should take? Thanks
Have you run a boot time scan to ensure that the computer is clean. Have you got any antispyware software installed eg Spybot Search and Destroy etc. Run this to ensure that you are clean?
As I stated all malware/spyware scans have shown the system as clean.
What I want to know is if any unauthorised modification of program file ashWebSv.exe has been made how can I ensure that the web shield is still fully operational and has not been compromised in anyway.
Can you try to repair your installation?
Go to Control Panel > Add/Remove programs > avast! antivirus > Remove. Then choose Repair function in the popup window (Repair).
If this does not help, can you uninstall / boot / install / boot again?
Thanks for your reply Tech. I carried out an installation repair and all appears to be fine I was considering removing/reinstalling Avast but I think I will leave it be and just keep an eye on things for now as all providers appear to be working fine.
One thing I did noticed was that my Avast file in C:\Program Files is 506MB which seems a lot, is that about right?
The biggest file I have is aswAr1.log which is 390587kb and then the next largest is 400.vps which is 29053kb. Would a reinstall be a good idea or is it best to leave well alone? Thanks for your help.
It is too big to open in notepad, wordpad might work but I doubt you would glean any useful info from that.
Check the file properties of both files and see when they were last modified, I suspect one of them may not be in use regularly. I don’t believe if they were removed it would cause an issue as avast should recreate it/them.
I don’t like deleting anything right off, so first disable the avast self defence module (Program Settings, Troubleshooting, disable self-defence) and rename them aswArOld.log and aswAr1Old.log.
Now reboot, after 8 minutes avast should run the anti-rootkit scan and create any log file required. Give it a reasonable time 10 minutes or so to check for the presence of the newly created aswAr log/s. If at least aswAR.log is there I would say it is safe to delete the renamed aswArOld.log and aswAr1Old.log files.
Now you should enable the self-defence module by reversing the previous steps.
Checked the properties of both files which showed they were last updated on the 13th October 2009. I will now follow your suggestions and will let you know later today how I get on. Thanks for your help.
BTW The aswAr1.log file was created on 12th December 2008 whilst the aswAr.log file was created on 7th May 2008. Seems strange as I thought it would have been the other way round!
If for some reason a file isn’t present or corrupt I can only assume it would create another, if aswar.log is there then perhaps that is where the 1 bit comes in. Though how it got to this size is beyond me.
Followed the advice given and found that Avast had made a new aswAr.log file (59KB) I then deleted both ‘old’ files and rebooted again. All seems fine and my Alwil program file now only totals 128MB, will keep monitoring to see if the new file (or any other) starts to increase in size.
I will do a clean install when the new version is released. Thanks once again for all the help, which was much appreciated as always.
Just checked my Avast files and a new aswAr1.log file has been made and it is already at 6043KB. It appears that anti-rootkit scan results are recorded on the aswAr.log (59KB) and earlier scans are archived on the aswAr1.log file. Is there anyway of preventing this or is it just a case of deleting the aswAr1.log file on a regular basis?
I don’t know what is recorded in aswAr1.log, so I can’t say why it might be being created or if there is a setting that will stop it from being created. I have never had this file created on my current system.
Try Program Settings, Logging and set the Log file size limit to something more bearable, I have mine set at 128 KB even double or quadruple that would be more than adequate and still take up much less scace.
I don’t know if you have the Program Settings, Report File option enabled (or even if this would have anything to do with the anti-rootkit), but that gives a different file name in the Report sub-folder. It has an option to overwrite existing report file, rather than adding to the existing one. Again I don’t feel this is anything to do with your issue.
Whilst it is relatively small try opening it with wordpad and see what is in it.