avast.ini & aswmaisv.log after updates today

Hello all,

First, OS is Win XP SP2, fully updated, ZAPro (EZ firewall version), Avast Home Free version. I run Spybot (teatimer always running), Adaware regularly, SpywareGuard and SpyBlaster always engaged. Browser is latest update of Firefox (only use IE when absolutely needed), e-mail used is latest update of Thunderbird. Anything else needed?..please ask.

I have a question re: the avast.ini, mailscanner settings & the aswMaiSv.log. Today when I logged onto the internet via my desktop (DSL, but only connects when computer started…I think meaning not always connected?, dynamic IP), avast updated the virus database as well as the program. Checking “about avast” & my firewall program settings, avast now seems to be version 4.6.739.0 for some Avast things and version 4.6.731.0 for others. Checking the aswMaiSv.log to see what had changed if anything, I see the following:
12/08/05 10:28:51 000001E4: Started as service, Log = 1(0x00000001)
12/08/05 10:28:51 000001E4: Build 4.6.739
12/08/05 10:28:51 000001E4: Windows XP Workstation (Service Pack 2)
12/08/05 10:28:51 000001E4: Using WinSock 2.0
12/08/05 10:28:51 000001E4: AutoRedirect settings changed 1(0x00000001)
12/08/05 10:28:59 000001E4: IgnoreLocalhost settings changed 1(0x00000001)
12/08/05 10:28:59 000001E4: POP Start settings changed: 1
12/08/05 10:28:59 000001E4: POP Listen settings changed: 127.0.0.1 12110
12/08/05 10:29:00 000001E4: POP RedirectPort: 110
12/08/05 10:29:00 000001E4: SMTP Start settings changed: 1
12/08/05 10:29:00 000001E4: SMTP Listen settings changed: 127.0.0.1 12025
12/08/05 10:29:00 000001E4: SMTP RedirectPort: 25
12/08/05 10:29:00 000001E4: IMAP Start settings changed: 1
12/08/05 10:29:00 000001E4: IMAP Listen settings changed: 127.0.0.1 12143
12/08/05 10:29:00 000001E4: IMAP RedirectPort: 143
12/08/05 10:29:00 000001E4: NNTP Start settings changed: 1
12/08/05 10:29:00 000001E4: NNTP Listen settings changed: 127.0.0.1 12119
12/08/05 10:29:00 000001E4: NNTP RedirectPort: 119

Checking the revised .ini, the “mailscanner” portion shows the following:
[MailScanner]
PopRedirectPort=110
SmtpRedirectPort=25
ImapRedirectPort=143
NntpRedirectPort=119
IgnoreAddress=
IgnoreLocalhost=1
AutoRedirect=1
StartPop=1
StartSmtp=1
StartImap=1
StartNntp=1
ShowTrayIcon=1

One, the .ini above doesn’t seem to reflect the “Listen settings” that the aswMaiSv.log above seems to have changed. Two, why did avast change my “Listen settings”. I don’t know what they were before, but they were obviously changed. Three, why are the “Listen settings” changed to “127.0.0.1 12110”, “127.0.0.1 12025”, rather than 127.0.0.1 110, 127.0.0.1 25 (what’s with the “12” in front of the port settings?).

Then we get to my laptop (same exact stats as above, XP SP2, etc.), Knowing better now, I saved a copy of the avast.ini and aswMaiSv.log before allowing updates, so I could compare. The new aswMaiSv.log indicates changes as follows:
12/08/05 15:41:28 00000394: Started as service, Log = 1(0x00000001)
12/08/05 15:41:28 00000394: Build 4.6.739
12/08/05 15:41:28 00000394: Windows XP Workstation (Service Pack 2)
12/08/05 15:41:28 00000394: Using WinSock 2.0
12/08/05 15:41:38 00000394: AutoRedirect settings changed 1(0x00000001)
12/08/05 15:45:14 00000394: IgnoreLocalhost settings changed 1(0x00000001)
12/08/05 15:45:14 00000394: POP Start settings changed: 1
12/08/05 15:45:14 00000394: POP Listen settings changed: 127.0.0.1 110
12/08/05 15:45:36 00000394: POP RedirectPort: 110
12/08/05 15:45:36 00000394: SMTP Start settings changed: 1
12/08/05 15:45:36 00000394: SMTP Listen settings changed: 127.0.0.1 25
12/08/05 15:45:37 00000394: SMTP RedirectPort: 25,587
12/08/05 15:45:37 00000394: IMAP Start settings changed: 1
12/08/05 15:45:37 00000394: IMAP Listen settings changed: 127.0.0.1 143
12/08/05 15:45:37 00000394: IMAP RedirectPort: 143
12/08/05 15:45:37 00000394: NNTP Start settings changed: 1
12/08/05 15:45:37 00000394: NNTP Listen settings changed: 127.0.0.1 12119
12/08/05 15:45:38 00000394: NNTP RedirectPort: 119

Yet these settings seem to match exactly what my aswMaiSv.log indicated before the update. So what really changed…and why would it indicate a change if nothing has changed? Also, why does my laptop use 127.0.0.1 110, etc., as opposed to the changed settings for my desktop to 127.0.0.1 12110 (the 12 in front of the port).

My mind says my desktop and laptop should have the same “listen settings, etc”, since I use the same everything on both…OS, browser, e-mail client, etc…yet they don’t match.

This is a long post, but I’m just trying to understand why these things are different, not only between my avast.ini and my aswMaiSv.log on a given single computer, but differ on two different computers with the same setup. I’ve also tried to make sense of my post the best I can. If there is anything that doesn’t make sense to you all or I need to explain better, I WON’T be offended…please ask away.

Is there anyone brave enough to tackle my questions…as well as put it into laymens terms for me? I’m fairly computer saavy, but not an expert by any means.

Thanks much,
LTS

Welcome to the avast forum!

That is because it is doing what it says it does.

When it says redirect port 110 that means if someone tries to place a call to a server at port 110 it will be redirected.

Redirected, I think is clear, means to go somewhere else. The somewhere else is to localhost port 12110 (localhost just means “on my system”) where an avast program is waiting to intercept that call, get avast into the middle of port 110 activity (receiving POP3 email) so that avast can get to see the email stream and scan it before it gets returned to your mail client.

For port 25 (sending SMTP mail) the redirect is to localhost port 12025 where avast is also waiting to take control and scan your sent email before it gets to your server.

For port 119 (NNTP access to usenet newsgroups) the redirect is to localhost port 12119 where avast is waiting to intercept the NNTP stream before it is returned to your News client.

Port 143 is for IMAP email access - I’m sure you get the picture by now.

As to your laptop - hmmm looks like you might have been playing around with the customized settings of the Internet Mail scanner in the “Redirect” tab or it could be an issue with out of date settings on the laptop. If you want it checked then post your laptop’s avast4.ini [MailScanner] section.

Hope this helps

LTS, welcome to forums.
There are more info about avast4.ini file if you click ‘Settings’ in my signature.
Into your Thunderbird account settings, which port are set for pop3 and smtp?
Please, add the line
Log=20
into the [MailScanner] section of avast4.ini file, save it, and generate some traffic.
More info will be logged and maybe it can help to understand what is happening.
Although, I can’t see in my computer (like in your laptop) the ‘changed’ info from 110 to 12110 and the others…