Outlook Express problem

Avast Free Antivirus / Premium Security
1

User reported the following problem when using avast! for scanning his mail:

Account: ‘…@bk.ru’, Server: ‘pop.bk.ru’, Protocol: POP3, Server Response: ‘-ERR concurrent connections limit in avast exceeded(pass:0, processes:services.exe[20])’, Port: 110, Secure (SSL): No, Server Error: 0x800CCC90, Error Number: 0x800CCC90

After start mail scan is working but at some moment concurrent connections limit error arising. Below is part of aswMaiSv log

03/29/08 10:21:11 00000568: Started as service, Log = 1
03/29/08 10:21:11 00000568: Build 4.7.1098
03/29/08 10:21:11 00000568: Windows XP Рабочая станция (Service Pack 2)
03/29/08 10:21:13 00000568: AutoRedirect settings changed 1
03/29/08 10:21:13 00000568: IgnoreLocalhost settings changed 1
03/29/08 10:21:13 00000568: POP Start settings changed: 1
03/29/08 10:21:13 00000568: POP Listen settings changed: 127.0.0.1 12110
03/29/08 10:21:13 00000568: POP RedirectPort: 110
03/29/08 10:21:13 00000568: SMTP Start settings changed: 1
03/29/08 10:21:13 00000568: SMTP Listen settings changed: 127.0.0.1 12025
03/29/08 10:21:13 00000568: SMTP RedirectPort: 25
03/29/08 10:21:13 00000568: IMAP Start settings changed: 1
03/29/08 10:21:13 00000568: IMAP Listen settings changed: 127.0.0.1 12143
03/29/08 10:21:13 00000568: IMAP RedirectPort: 143
03/29/08 10:21:13 00000568: NNTP Start settings changed: 1
03/29/08 10:21:13 00000568: NNTP Listen settings changed: 127.0.0.1 12119
03/29/08 10:21:13 00000568: NNTP RedirectPort: 119
03/29/08 10:25:22 00000E8C: --POP Mail is clean
03/29/08 10:25:23 00000E8C: --POP Mail is clean
03/29/08 10:25:25 00000F54: --POP Mail is clean
03/29/08 10:25:25 00000F54: --POP Mail is clean
03/29/08 10:25:25 00000F54: --POP Mail is clean
03/29/08 10:25:27 00000F54: --POP Mail is clean
03/29/08 10:25:28 00000F54: --POP Mail is clean
03/29/08 10:25:28 00000F54: --POP Mail is clean
03/29/08 10:35:04 000002C8: SMTP Closing connection due to MaxConnections
03/29/08 10:35:04 000002C8: Processes: services.exe[20]
03/29/08 10:35:05 000002C8: SMTP Closing connection due to MaxConnections
03/29/08 10:35:05 000002C8: Processes: services.exe[20]
03/29/08 10:35:05 000002C8: SMTP Closing connection due to MaxConnections
03/29/08 10:35:05 000002C8: Processes: services.exe[20]
03/29/08 10:35:05 000002C8: SMTP Closing connection due to MaxConnections
03/29/08 10:35:05 000002C8: Processes: services.exe[20]
03/29/08 10:35:05 000002C8: SMTP Closing connection due to MaxConnections
03/29/08 10:35:05 000002C8: Processes: services.exe[20]
03/29/08 10:35:05 000002C8: SMTP Closing connection due to MaxConnections
03/29/08 10:35:05 000002C8: Processes: services.exe[20]
03/29/08 10:35:06 000002C8: SMTP Closing connection due to MaxConnections
03/29/08 10:35:06 000002C8: Processes: services.exe[20]
03/29/08 10:35:06 000002C8: SMTP Closing connection due to MaxConnections
03/29/08 10:35:06 000002C8: Processes: services.exe[20]
03/29/08 10:35:06 000002C8: SMTP Closing connection due to MaxConnections
03/29/08 10:35:06 000002C8: Processes: services.exe[20]
03/29/08 10:35:06 000002C8: SMTP Closing connection due to MaxConnections
03/29/08 10:35:06 000002C8: Processes: services.exe[20]
03/29/08 10:35:06 000002C8: SMTP Closing connection due to MaxConnections
03/29/08 10:35:06 000002C8: Processes: services.exe[20]
03/29/08 10:35:07 000008D8: --SMTP Mail is clean
03/29/08 10:35:07 00000D14: --SMTP Mail is clean
03/29/08 10:35:07 000002C8: SMTP Closing connection due to MaxConnections

and so on…
What should be done to solve this problem?

2

The most usual instance of this is a conflicting software redirect of the port 110 connection.

This can occur by a failure to completely remove an earlier anti-virus product (especially Norton) or with an ISP provided “connection accelerator” program.

3

Which spam program is he using?
You can change the maximum connections into avast4.ini file (click ‘Settings’ in my signature for more info), but I’ll bet in another program that is making the email scanner to loop.

4

I personally wouldn’t increase the max connections as I believe, 1) that it will eat them up as well, 2) that you are masking rather than treating the problem.

I don’t see why services.exe would be connecting on the smtp port 25, even given Alan’s suggestion of another security application, etc. I would have expected to see the file name of the security application, etc.

So I believe there may be something on the system which is misusing services.exe, to me that is suspicious.

If they haven’t already got this software (freeware), download, install, update and run it, preferably in safe mode.

  1. If using winXP or Vista SUPERantispyware On-Demand only in free version. Or Spyware Terminator Resident scanner (if you use this don’t install the toolbar or crawler or the anti-virus module). Or a-Squared free On-Demand only with free version(if using win98/ME).
5

Thank you. I translated your recomendations. So we will search something living in the system :slight_smile:

6

Your welcome, whilst it isn’t certain that there is something on the system I think it wise to check. However don’t discount what Alan said, check for other applications.