Yesterday i started to have this problem. I can’t see the webpages using IE and also Firefox. The only way to make it working is shutdown the Web Protection (ashWebSv.exe).
Please help me.
Thank you.
What does firewall say?
I’ve Sygate Personal Firewall and the browser are allowed. To be sure i’ve setted the firewall on Allow al. The same think with the windows firewall (i’ve got Windows XP SP2).
I’ve tried to get a webpage using telnet and the “GET /” command and it worked (also with the firewall, i had olnly to allow telnet), but when i use a browser i can’t get any webpage. The only way to get webpage is stop the Web Protection.
Today i’ve noticed that the MSN change by itself the avatar image.
So in provvisory modality i’ve done a virus scan and a spyware scan (with adaware) withous any result.
And now???
Give the webshield provider access in your firewall.
That should solve it.
No this isn’t the problem. It worked before!
I’m almst sure to have a worm or something like this, because rebooting with only avast active (and no other background application) i can use the browser…
Follow the instructions on THIS PAGE and see if the problem is solved.
Cyber, can you see with TCPView (www.sysinternals.com) or the Sygate logs if any other application or dll is trying to connect?
Didn’t you updated avast! to the new version - in this case you should be warned by Sygate that WebShield’s process (ashwebsv.exe) has been changed and asked to confirm it’s rights.
ehm… the ashWebSV.exe is allowed!!! I think to have a virus or something like this. Now i’m going to do e deep scan of anything…
I’ve done a lot of scansion with avast, with avg, spybot, adaware. Thre’s nothing. All the scansion were done in provvisory modality, and also i’ve done a scheduled scan before windows start. There’s nothing. I tried to uninstall the firewall and deactivate the windows firewall. No resuts. The only way to surf the webpage is start windows in provvisory modality or start in normal modality withou any program in auto execution or deactivate the web protection. 
Now i’ve seen that clicking on “personalizza” (i’m an italian user…) on the option of the web protection and deleting the “80” under “Porte HTTP reindirizzate” it restart to work.
Have you got any idea???
Ah,
there is a problem with you antivirus. I’ve scheduled a virus scan before windows start, but it did’t start strart the scan because can’t reconize my usb keyboard. Why?? I can use it wiyhout driver also in Dos because my bios support usb keyboards… I had to temporanely install a ps2 kayboard…
Perhaps you could try either or both of the following FREE
programs that “specialize” in detecting and removing
trojans, WORMS, dialers, etc :
1) "Ewido" at www.ewido.net/en
2) A-squared Free at www.emsisoft.com//en/software/free
I have Sygate Personal firewall 5.6 and if I had XP SP2, I
would Disable the Windows firewall. The only issue I have
found having that firewall & Avast on the same computer
is what "applications" in Sygate should NOT have "Act
As Server" checked; turns out most should not .
Do you see ashWebSv.exe running? Does it listen on localhost:12080? Does it accept connections on this port (can you telnet there) ? If you enable logging (edit avast4.ini, in section [WebScanner] add EnableLogging=1 and restart WebShield), what does the log show?
- ashWebSv.exe is running.
- When i try to telnet do localhost:12080 i get connected, but if i try to write anything i get disconnected istantanely.
- The log file AshWebSv.log has only these lines:
27/07/2005 12.00.07,“”,“”,“”,0,0,0,0,0,0,0,Unknown process,PID: 0, SEQ: 0
27/07/2005 12.00.08,“”,“”,“”,0,0,0,0,0,0,0,Unknown process,PID: 0, SEQ: 0
27/07/2005 12.00.09,“”,“”,“”,0,0,0,0,0,0,0,Unknown process,PID: 0, SEQ: 0
27/07/2005 12.00.10,“”,“”,“”,0,0,0,0,0,0,0,Unknown process,PID: 0, SEQ: 0
27/07/2005 12.00.11,“”,“”,“”,0,0,0,0,0,0,0,Unknown process,PID: 0, SEQ: 0
27/07/2005 15.01.50,“”,“”,“”,0,0,0,0,0,0,0,Unknown process,PID: 0, SEQ: 0
http://tsaclan.netsons.org/files/MyLog.log ← Here there is the log of sygate personal firewall… For me there is something of strange.
There’s also a strange thing. I can see that the msn messenger change my avatar icon by itself. All the antivirus and antispyware that i’ve tryed before said that there where nothing. To get connected i still need to stop the web protection or do this:
... clicking on "personalizza" (i'm an italian user...) on the option of the web protection and deleting the "80" under "Porte HTTP reindirizzate" it restart to work...
Please help me! I don’t like to format my hard disk and reinstall all :(((
I’m having the exact same problem. One day the internet just stopped working. It would still work but only through winamp 2.x’s built in minibrowser and through messanger programs. Then one day it just started to work by itself. Next a few days later, the PC crashed because of something unrelated (or maybe not…) then when it went back up, chkdsk came up (dreaded on NTFS volumes). It found a few messed up files (which I remember thinking looked a LOT like the antivirus files) then it stopped working again. I’m going to try to reinstall Avast. If it doesn’t work, I’m afraid I’m gonna have to switch over to trusty old antivir for a while, while they fix the problem. 
there are any news??
I, ivanmmj and aithent seem to have the same problem
Please help us!
This is the problem. WebShield must be able to accept connections and also accept http requests on them. Why is this, I don’t know. Please try to download
http://www2.asw.cz/~rypacek/ashwebsv.zip
and unzip it into c:\program files\alwil software\avast4\ (or equivalent in your language).
This is the debug version of the software (and will be replaced on reboot during automatic avast’s integrity check).
You will be able to overwrite ashWebSv.exe only when WebShield is terminated. When the debug version version of WebShield is started, it will start to create pretty detailed log in c:\program files\alwil software\avast4\data\log\ashwebsv.dbg.
Try to access the internet, then terminate WebShield and send me the debug log. Perhaps we will see more.
Also you can download and run TCPVIEW from sysinternals.com and post here the list of running processes and their open connection. This might also give a clue.
Ok, i’ve done the log. You can download it at http://tsaclan.netsons.org/files/AshWebSv.dbg
In this log there are some of my attmpt to surf on internet withous success.
Thenk you for your help.
Just a small comment, the dump file is truncated at the end - apparently you have not terminated WebShield before copying the dump. The rest of the file is flushed to the disk during the process shutdown.
OK. Just done.
You can use the same link of before.
OK. Just done.
You can use the same link of before.