Avast still slowing/stopping my net connection.

Avast Free Antivirus / Premium Security
1

Hello, I’m fairly new here, and only posted once before on the same subject, at which time others had mentioned the same problem, and there was talk about a beta solving the problem.

The beta did not solve the problem in all cases, but the next program update seemed to. Now I have noticed that the problem is reoccurring quite often, and it seems to be overcome by rebooting after each definition update. This is annoying to have to restart the system right after turning it on, which is usually when the updates occur.

If I try to manually update the program, even though I have it set to update itself, it also works, but it can hang for a long time without being able to connect, so the reboot seems to be quicker sometimes.

I’ve been using a cookie cleaner called CCleaner, and that may be part of the problem, as it not only cleans out all the cookies, it cleans the index file that is always there (Client UrlCache MMF Ver 5.2). This I do because of the spam that can get through via the ContentIE5.

This program, however, has the capability of being set to retain cookies that are wanted to remain, so if this is the problem, I think it can be corrected if someone can tell me what the exact cookie description for Avast looks like.

I am using the latest free version of Avast, and I’ve looked for any cookies with Avast in the name, and cannot find any.

2

Could you let us know what your OS and firewall are as without those we’ll just be shooting in the dark

3

avast! anti-virus doesn’t use cookies.

I would also suggest you give the firefox browser a try.

when you say that ‘Avast still slowing/stopping my net connection’ can you be more specific. If a connection was stopped what was the error/message displayed?
If things were slowed, what were you doing and were there any messages?

4

Essex, I use XP Home and Zone Alarm free.

David, no error message, I just often times get Page Cannot Be Displayed when trying to log on to Explorer, but every time I click to update the Avast program (not definitions, program), if I wait and wait until the def stamp downloads, or reboot, it always allows me to then connect right away. So maybe if it is not a cookie issue, it’s this def stamp that is perhaps wiped out by CCleaner.

I have downloaded Firefox as well, and generally don’t have this problem like I do with Explorer, but Firefox in some ways is worse on the net, so I use both.

The reason I thought CCleaner and cookies to be the problem, is that the Firefox, which does not use an index like Explorer’s Client UrlCache MMF Vers 5.1, does not hang like Explorer does, so I assumed it was the cleaning of this index file that caused it.

Many say this index file is a big part of the reason Explorer is so vulnerable to spam though, which is why I wanted to try CCleaner, it was the only method mentioned in my search of how to empty the index file that did not involve a lengthy procedure, it’s very quick and thorough.

5

Deleting cookies and temp files is one way to boost your internet speed, not cause problems. Of course you will be log off from forums and emails automatically if you clean out your temp files. Make sure you allow IE to have access to the internet. Can you give us a Hijack log? If you don’t have hijackthis heres the link to dowload it:

http://www.tomcoyote.org/hjt/

6

Operating system restart needed by avast message could be solved, in some systems, by deleting the file \setup\reboot.txt
Sorry if you already receive this answer :-[

7

Fixer, I realize deleting cookies/Temp Files speeds things up, rather than slows them down, provided you save the ones you need to avoid reregistering on certain sites you frequent and such. No I do not have Highjack, never heard of it, but before DLing it, I’d like to know exactly what it is, I don’t like to DL anything more than I need, as it often causes me to later uninstall.

Tech, I’ve traced the path you mentioned, and only found the reboot.txt via Avast4>Setup>setup(text document), and these two lines were found with an Edit>Find search…

Software\Avast4\Setup\reboot.txt,)

22:49:39 vrb/fil MoveFileEx(C:\PROGRA~1\ALWILS~1\Avast4\Setup\reboot.txt, NULL)

…are one or both of these what you’re referring to? If so, do I only delete the reboot.txt part, and on both lines, or just one?

Normally, I would not want to try such a thing, but I will merely backup the entire setup text document first, that way I should be able to go back to the default config no problem, if something goes wrong.

8

No, delete the file itself… and reboot, after that, try to update again. For any reason, the program does not delete the file and keeps asking for boot after the update… ::slight_smile:

9

CCcleaner also clears out the temp folders if U ask it too.

Im wondering, U say it’s slowing down Ur net, have U got a folder called avast in Ur windows temp folder & in C:\Documents and Settings\Your Name\Local Settings\Temp ?

I think if those folders which might be in use by webshield can slow down Ur net if they not there.

I seem to recall there were similar posts when folk had deleted those folders.

HTH

BaNzI ;D

10

First of all, let me say thanks for all the help you guys have offered. :slight_smile:

Tech, If you’re saying the program is asking for a reboot after each virus definition update, no, that is not the case, but should both these files be deleted anyway, you say file, not files?

Banzi, I see the Avast folder in Windows>Temp, but not in the other location (C:\Documents and Settings\Your Name\Local Settings\Temp).

I checked the settings on CCleaner, and found that I had left “Temporary Internet Files” and “Only delete files in Wndows temp folders older than 48 hours” checked.

I don’t why they would have the one reguarding Windows Temp folders checked by default, if some programs need to use that folder to connect to the net, do you think I should uncheck that box?

I don’t know if updating the Avast prog will restore that Wndows Temp folder, I may have to reinstall Avast maybe?

11

Hi Name User.

I think a uninstall & reinstall might help here, i would uninstall from the control panel then run the avast uninstall tool from http://files.avast.com/files/eng/aswclear.exe

When installing either untick the net shield provider or after install terminate it & see if everything is ok.

I remember reading on here somewhere that those _avast _folders are best left there for normal operation, avast also uses JETxxx.tmp files for it’s database.

HTH

BaNzI ;D

12

HijackThis examines certain key areas of the Registry and Hard Drive and lists their contents. These are areas which are used by both legitimate programmers and hijackers. Not ALL programs that HijackThis detect are bad, if you are wondering which program you should remove, ask the avast! members here or use the online scanner:

http://www.hijackthis.de/

13

OK, I’ll try reinstalling Avast.

DLed HijackThis, still waiting for an annalysis over at Tom Coyote forums.

14

Don’t wait for an analysis when you can use an on-line automated analysis (as mentioned by Fixer above), then if you have any queries about the analysis you can ask here.

For an on-line analysis - HiJackThis Log file - On-line Analysis
Ignore any 023 reference to avast processes, this is a hiccup in the HJT 1.99.1 (especially missing file entry for avast), if you need any help with any of the analysis let us know.

15

In other words, don’t worry when you see this ;):

O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)

They are minor errors that Hijackthis didn’t fix yet. Don’t worry, theres no file missing on either of them.

16

OK guys, I uninstalled Avast through Add and Remove as suggested, though there was no Avast uninstaller remaining to do anything further as stated.

I still do not see any Avast folder via C:\Documents and Settings\Your Name\Local Settings\Temp, it’s still only located in the Windows>Temp folder, but does have two jet files in there as well.

I also used the automated site you recommended for the HijackThis log David (thankd BTW, great site), and oddly enough the only red falgged warnings that said could be fixed, were the vast Web and Email scanners, which it actually said were not there as well, maybe because I’m still using the free version.

lastly, I still am getting no response as to whether both reboot.txt lines mentioned above should be deleted, I’d rather not do that until I get clarification on that.

Thanks again guys, you’re help is much appreciated, I will delete the two flagged lines on the scan log, and after hearing back about the reboot.txt, will handle that as well. That should hopefully take care of it.

One other thing I forgot, my Hotmail account (free also), has been acting weird for some time now, reading the zipped version of clean files as viruses, and now there are error messages trying to even access my mail.

The Hotmail staff sent a general forum letter back to me saying they are looking in to attachment problems, but I don’t know if that or this new accessing problem can somehow slow down, or occaisionally stop my net connection.

HijackThis log:
Logfile of HijackThis v1.99.1
Scan saved at 1:27:42 PM, on 5/28/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\RevoTask.exe
C:\Program Files\HighCriteria\TotalRecorder\TotRecSched.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\PROGRA~1\MUSICM~1\MUSICM~1\MMDiag.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mim.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Tim E. Machine\My Documents\My Downloads\Apps & Progs\HijackThis.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~1\mimboot.exe
O4 - HKLM..\Run: [MMTray] “C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe”
O4 - HKLM..\Run: [CDTrayPal] C:\Documents and Settings\Tim E. Machine\My Documents\My Downloads\Apps & Progs\CDTrayPal\cdtray.exe
O4 - HKLM..\Run: [RemoteControl] “C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe”
O4 - HKLM..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM..\Run: [RevoTaskbarApp] C:\WINDOWS\system32\RevoTask.exe
O4 - HKLM..\Run: [TotalRecorderScheduler] “C:\Program Files\HighCriteria\TotalRecorder\TotRecSched.exe”
O4 - HKLM..\Run: [ATICCC] “C:\Program Files\ATI Technologies\ATI.ACE\cli.exe” runtime
O4 - HKLM..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by18fd.bay18.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1109751722312
O16 - DPF: {9B03C5F1-F5AB-47EE-937D-A8EDA626F876} (Anonymizer Anti-Spyware Scanner) - http://download.zonelabs.com/bin/promotions/spywaredetector/WebAAS.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

ARGGGH!,…I can’t post the automated annalysis, it’s too many characters for the forum’s capacity. :-, but the above bold and underlined are the only red flagged items.

17

Well I tried to post the annalysis results, but it’s too big a file for the forum to handle.

Basically, the only marked items besides the ones you said to ignore are a few programs I use marked with a (?) for unknown.

Ironic how they say they are unknown, but they can tell you exactly what functions of that program you will lose if you delete that particular line.

The programs are:

Musicmatch Jukebox…(online music streaming service)
Total Recorder Scheduler…(scheduling function for an audio recording program I use)
CD TrayPal…(CD tray eject/close, and timer auto tray shut program)
Revo Task…(part of my sound card’s control panel for setting speaker adjustments)

So, I don’t see anything in the entire log that should be deleted. I can only say that the CD TrayPal is not working lately, so it doesn’t get used. I tried reinstalling it, but it didn’t seem to help. It used to put it’s icon in the taskbar upon startup, but it doesn’t do that anymore. I did disable it’s startup option at one time, but have since then enabled it, but it still doesn’t load the icon in the taskbar on startup anymore.

18

  1. You don’t need to post the complete analysis results only the parts you are unsure of, you can copy the bit from your HJT log (or highlight, etc, as you have done) and what the on-line analysis says to do, etc.

  2. Before doing this you should use google to get information about the Unknown items reported in the on-line analysis (if you don’t know what they are).

  3. The items you listed Musicmatch Jukebox, etc. did you purposely install them? - doing a google search should bring up any untoward reports of it being adware or spyware, etc. Using this information you can make a decision on what to do, ignore (if legitimate) or fix. But only you can really make that decision based on what you installed on your system.

So if you feel that everything is legit, no problem, the on-line analyser wont know about every program or its use.

The idea of this exercise is to get you to understand what is on your system using HJT, the on-line analyser and google those you aren’t sure about, that way if you do have this problem again, you have the tools and knowledge to resolve it, or go some way towards it.

19

Sorry, I guess I didn’t explain, those 4 programs are ones I installed and use regularly.

iI would appear I still have not discovered why I can’t always get on the net, or my connect time is very slow. I can always connect right away after getting the def stamp to load using the program update on Avast.

It seemed to start when I began using CCleaner, yet I’m told Avast does not use cookies. This has got me stumped still really. ???

20

I’m another user of both CCleaner and Avast but I haven’t experienced the problem you describe. Just as additional info but CCleaner or Crap Cleaner is not only deal with cookies but also other “craps” ranging from unnecessary registry, temporary files to tray notification cache. Since it deals with lot of things, it is possible that it affected your system. I and many others seem to be quite happy with the app, though. In fact, I began to use CCleaner when I noticed that no reviewers at Cnet complained that it had deleted important files, which is rare for this type of app. Then again, it is also true that CCleaner deals with sensitive content.

If you are using CCleaner with default setting, you must have registry backups. Click on CCLeaneryeardatehourminuite.reg file with the timestamp when you think the system became slower in CCleaner folder, which might help.