NO answers to Errors 7000 and 7009?

I have installed Avast Homw on an XP Home and
a) it takes ages before the Internet icons show up (nearly 3 minutes); worse than before with McAfee
b) I have errors in Event Viewer/System: 7000 and 7009to do with WebScanner (I think on Startup)

Any suggestions, please?

Qim

Any help on this appreciated

Qim

How did you get rid of McAfee ?

McAfee has an uninstall tool that you could run to ensure any possible remnants are removed.
http://download.mcafee.com/products/licensed/cust_support_patches/VSCleanupTool.exe
2007 version - http://download.mcafee.com/products/licensed/cust_support_patches/MCPR.exe
Also see - How do I uninstall SecurityCenter? http://ts.mcafeehelp.com/faq3.asp?docid=71525

yes, I did unininstall McAfee and then ran their .exe file to clean up everything.

In fact, what I think is happening and I was hoping somebody could confirm and tell me how to siolve it, is that when I boot up and Avast comes on it has some difficulty hand-shaking with the router, or the other computer (Home network) or something similar and some of the ‘Providers’ fail to log on.
The Avast icon comes up early enough with 3 services running (2 are disbled) and the missing two only arrive some 5/10 seconds after I connect to the Internet, which is not very secure…

I can’t recall one of our regular forum members exact words, but I believe he says something along the lines of avast doesn’t know or care if you have a router. avast! just intercepts port 80 traffic and redirects it to its localhost proxy to be scanned before it is saved to your browser cache and displayed on your browser.

So I don’t think there is any handshaking going on, certainly not from avast, I don’t use a router and I don’t know if yours has some sort of outbound checking that could be the issue. However, that shouldn’t stop the web shield loading.

You say that after boot there is 3 services running (2 are disabled). I have to express some confusion here as something that is disabled surely can’t be running. When you hover the mouse pointer over the avast icon, there are 7 avast ‘providers’ (if you haven’t done a custom install) and 6 should be running (if you don’t have MS Outlook, not express, installed)

  • What avast processes are running in Task Manager, they begin with ash or asw, see image ?

Sorry, for the bad English!

You say: I have to express some confusion here as something that is disabled surely can’t be running.

What I meant was that I disabled two of the Avast providers (Outlook and Instant Messaging). When the Avast icon comes up it reads 7 Providers - 3 running. It is only after 5/10 seconds after the Internet icon comes up that Avast shows 5 running. One of the missing ones is, I guess, WebScanner.

Tajke the last boot: I get Errors 7000 and 7009 due to time limit exceeded for something to do with Index Service (sorry it is a foreign XP). That is at 15:22:28. At 15:22:52 I get the same Errors but this time Wen«bScanner is mentioned as the culprit. Same again 15:23:32. Finally, 15:24:03 I get Information 7035 that the WebScanner was initialized.

So, from 15:22:28 to 15:24:03 the WebScanner failed to load. Meanwhile Internet was active.

Any help appreciated.

qim

It isn’t unusual for a delay in two of the providers, the Web Shield ashWebSv.exe and Internet Mail ashMaiSv.exe (5-10 seconds isn’t unreasonable if it were after boot but not after the internet connection is established, though I have no such delay).

There is a Windows indexing service (I can’t recall if it is associated with MS Office or not) that supposedly helps searches on your system by indexing all your files. For me it is a resource hog that is of little or no value and I have that service set to manual and it hasn’t started on or after boot, see image.

The Web Shield and Internet mail scanners are started manually see image 2 for all avast services and their status.

What is your firewall ?

Thank you very much. I’m going to have a look at that. My firewall is the Windows Firewall for XP Home.

qim

Whilst the windows XP firewall is usually good at keeping your ports stealthed (hidden) it provides no outbound protection and you should consider a third party firewall.

Any malware that manages to get past your defences will have free reign to connect to the internet to either download more of the same, pass your personal data (sensitive or otherwise, user names, passwords, keylogger retrieved data, etc.) or open a backdoor to your computer, so outbound protection is essential.

  • There are many freeware firewalls such as, Comodo, PCTools Firewall Plus, Jetico, etc. - Zone Alarm free works fine with avast and has a reasonably friendly user interface, however, the free version is becoming bloated with trial ware and is also crippled as far as outbound protection goes In the Program Control, configuration area, the slider will only goes as far as Medium protection, if you want more you have to buy the Pro version.

See A Forum discussion on free firewalls http://forum.avast.com/index.php?topic=30808.0
See http://www.matousec.com/projects/firewall-challenge/results.php.

David. many, many thanks for your help on my problems.

I had a look at Services and Index Service is set to Automatic. Am I to understand that if I turned it to manual it might solve the problem of the delay in Webshield provider?

And how could that change affect the rest of the system?

Sorry for going on…

Regards

qim

Stop the service first and then set it to Manual, this allows for if it required by some program it can start it, were if you set it to Disabled that couldn’t happen.

I really have no idea if this will resolve the problem with the web shield, but with the indexing services taking a long time there could be a knock on effect. For sure I don’t feel it is what I would call an essential service.

The only impact that I can see is that your searches would possibly slower and I certainly don’t see that on my system. Click the image that I posted to expand it and you will see a description of what the service does and you should be able to see what any impact might be.