AVAST 5: Cannot Update Virus Definitions (AGAIN!)

@Infowars: I confirm, my webshield graph shows no pages scanned at all!! Even if I open 30 pages at the same time in FF no actions seems to be taking place in the webshield!

Ok, lets dig into comodo firewall then…
Is “avast.setup” allowed in comodo? (allow all outgoing tcp traffic to port 80)
For “AvastSvc.exe” allow at least all outgoing tcp to destination ports 465, 25, 80, 995, 110 and allow ip out (any ip/any ip) for icmp.
asyn

although Alwil’s files are signed and recognised by comodo, I had already on my own whitelisted all of the files residing in avast 5 folder. Anyway I manually added all of the above as extra rules (regardless that they were already practically included in the more general rule comodo was following). Plan D ???

First of all thank you for your help and your valuable time in these problems.

I do see “avast.setup” allowed in comodo. . . states (allow all outgoing tcp traffic to port 80)

I don’t see any allowance of the “AvastSvc.exe” any port anywhere. I checked the whole of last week. It does state. . . ICMP Destination. . . Code 0

How do I a screen shot to you, or Avast support on my Comodo settings?

As you know the shots are to big to upload as an attachment to post!

I not savvy enough to place them into a post directly!

I was thinking that it was Comodo as it did it all of a sudden, poof, on both 5.0.462 and than same exact action, blocking Fix Now etc. again on installs of 5.0.701

Guess I’ll also register to Comodo forum, but rather have Comodo and Avast work things out amoung themselves.
They the developers not me!
I"m just the endangered species. ::slight_smile:

@Infowars: photobucket.com
Reg for free, upload and send the link here

Did you do this in the firewall settings or are you talking about the HIPS (D+) ??
Could you temporarily disable comodo for a quick test?
Also do you run some other kind of local proxy? Means can you connect to the net without any special proxy settings? Look up your internet settings in ie, if any proxy is set there. (also Lan) How do you connect to the net? (dialup/cable/(W)Lan/DSL) Do you use a router?
asyn

Did you do this in the firewall settings

I did this (adding the ports you mention) in the Firewal Security Policy

or are you talking about the HIPS (D+) ??

Is this supposed to be Defense+ cause there it is (My Own Safe Files) where I had previously added the Avast folder when I was trying to troubleshoot the update problem

Could you temporarily disable comodo for a quick test?

I had already done that before I posted at the forum :wink: Doesn’t help. And if this was to be the problem I don’t think avast5 could be able to update via the c/p → add/remove option

Also do you run some other kind of local proxy? Means can you connect to the net without any special proxy settings? Look up your internet settings in ie, if any proxy is set there. (also Lan) How do you connect to the net? (dialup/cable/(W)Lan/DSL) Do you use a router?

No my ISP doesn’t have a proxy and I don’t use proxies at all, anyway. No proxy in net settings in IE, no nothing in the Lan tab. I connect with a 24mbps (21 mbps practically) ADSL2+ line through a NETGEAR DGN2000 router…

The “Trusted software vendors” part of COMODO seems to be working fine, never got a popup when installing/running avast5…

Right, that’s what i thought right away. This was just to confirm it.
Does the update work if you disable the avast self defence module? Please try that.
asyn

OK thanks but I just tried to sign up and it wanted more info than I give out to the govment.

Besides I put the captcha 9 times corectly and got . … There was an error with your submission * Please confirm the captcha code shown in the box. 9 times.

So I totally gave up on that kind suggestion.

Thanks…

Nope, I’ve tried that also…
Btw if the self defence mod is active, I think I get the usual alert when I update through c/p->add/remove progs… But from the ui there’s no change with the mod enabled or not…

Another try:
Start a manual update. Let it run for about 15-20 minutes.
Surf the web while waiting or do something different.
Post the last 400 lines of the avast setup.log again and also the latest HJT log. Thanks.
asyn

Nothing special… here are the logs. Avast hasn’t writen anything new (entries are many hours ago, maybe yesterday)… surfed and did P2P for almost 45 mins while it was trying to update!

I was having this problem with updates. Clicking on “Direct Connection (no proxy)” in Settings/Updates/Proxy Settings fixed it for me.

Thanks!

You really were… lucky :wink:

In your HJT log, i see spybot is still there, thought you got rid of it…?
Please drop spybot and try again.
asyn

Hello, happy bug killers :wink:

Well I’m arriving in the middle of the battle, as i’m looking for an answer to my soucy : no updates… As I saw this topic, I post here to join you.
My story, in a few words. I wanted to replace my personnal Avira AV, and decided for Avast. Downloaded last sunday, installed, ok, but no update (can’t reach update server after a while). So monday, I tried at work (i’m a network admin, I easily access a test machine) on a old computer, with same error message…

Configuration :

  • Personnal computer : MoBo Gigabyte, XP SP3, Ashampoo firewall, all windows updates installed and ok. replacing Avira AV.
  • job computer (network admin, just a computer for kick tests), Mobo asus P4p800, 1Go, XP SP2, Spybot installed, no other AV

Removed firewall, rebooted, removed spybot, c/p - uninstall - update (success except for virus signatures). safe mode remove, anything checked. No updates… I think I tried any idea read in this topic with no success

Any other ideas ?

Thx in advance,
Thierry

On which machine did you try to install?
Did you get any error message?
Did you completely remove avira (or other av) before?
asyn

I first tried to install at home, good computer, rather new, fully updated. Removed correctly avira, rebooted then installed avast
Then, the day after, tried at work, test computer but in use.

Not a single error message.

No update (translated from french, “updating 1/3” or 1./2… then “Can’t reach server”

Can update via c/p, add-remove (programs updated but no virus signature)

Sure there’s something wrong, but can’t find what exactly. Checked via FAQ (i’ve seen encrypted files bug, not applying for me), looked at registry, msconfig, removed firewall without success. No soucy with proxy (no proxy, configured directly, don’t look for IE settings)

Thanks for your help

@Thierry50: Even more weird… I can update defs via cp->add/remove, the program version is the final one anyways (as downloaded from the site)… you sure you finally get the message that the server cannot be reached? I don’t get any error here, it just hangs at 1/2 or 1/3 without doing nothing at all!
@Asyn: I reinstalled Spybot again, this was not causing the problem, since it persisted when it was removed 2 days ago