Mozilla is my default downloader, because up to now it worked perfectly.
As I have written above, the error occurs exactly at the time when the WebShield is scanning the download.
[EDIT]
Now I tried downloading with Firefox 1.0.
Here the download freezes when the WebShield scans the file. Nothing is going on afterwards. I have to press “cancel” and the download is broken again.
I’m using firefox and have used both its default downloader and star downloader and no problems.
What is you firewall? is there anything in the logs to indicate some form of bloacking and/or has ashwebsv.exe been allowed access (a bit of a clutch at straws moment as you wouldn’t be able to browser if it wasn’t).
Mozilla and the Avast! WebShield are completely trusted applications. There are also no entries in the “blocked”-logs. Even when I disable or completely shutdown Outpost I have the same problems.
Very strange ???
BTW, I am sitting behind a SMC Barricade Router, but this shouldn’t be the problem ???
That is very strange, are you using the latest avast version 4.6.603?
Have you tried downloading a smaller file, does this only happen with large downloads?
So this happens AFTER the file is scanned (as seen in the WebShield’s info display)?
Very strange. It almost sounds like avast thinks that the file is actually infected and aborts the connection… :-\
BTW just for the sake of completeness, could you try downloading the file with IE?
BTW2 what is the URL, exactly?
BTW3 what if you disable HTTP scanning in the WebShield’s settings, does that make any difference?
The size of the files seems to play a role:
So bigger downloads produce the error, e.g.
http://dlc.sun.com/jdk/j2re-1_4_2_07-windows-i586-p.exe
or
http://dlc.sun.com/jdk/j2sdk-1_4_2_07-windows-i586-p.exe
or
http://download.mozilla.org/?product=firefox&os=win&lang=en-US
Sgt.Schumann , please check the avast logs - especially the Error and Warning categories. Aren’t there any related entries?
It seems to me that the scan is somehow failing and avast is aborting the connection… :-\
Last entries in warning.log:
19.02.2005 12:52:41 1108813961 SYSTEM 1524 Sign of “EICAR Test-NOT virus!!” has been found in “http://www.eicar.org/download/eicar.com” file.
19.02.2005 12:53:50 1108814030 SYSTEM 1524 Sign of “EICAR Test-NOT virus!!” has been found in “http://www.eicar.org/download/eicar.com” file.
19.02.2005 12:54:52 1108814092 SYSTEM 1524 Sign of “EICAR Test-NOT virus!!” has been found in “D:\eicar.com” file.
This was yesterday, when I checked the functionality of WebShield.
Last entries in error.log:
17.01.2005 20:20:13 1105989613 1556 AAVM - initialization error: Unhandled exception in AavmProviderStop, STANDARD.
19.02.2005 21:35:50 1108845350 1564 AAVM - initialization error: Unhandled exception in AavmProviderStop, STANDARD.
Hmm, seems not to be related to the problem, or?.
And in the other logs there is also nothing suspicious.
Yes it is reproducible, I tried it (too) often today.
In the meantime I tried it also on my girl friend’s notebook (similar configuration but XP Home instead of Prof. and same inet-connection via my router) and I got the same results.
I am wondering if not my router is the bad guy in this problem. But I haven’t configured something unusual on this machine (SMC 2804WBR … not so new but with latest firmware 11/04) … but I doubt that the router is the problem ???
I doubt it as well. Especially if disabling HTTP scanning solves the problem.
Maybe I could send you a version with some extended logging to find out where the problem is.
The problem is not so important to destroy your spare time! (I really understand this, cause I am also workin’ in IT-Business too … and I am also “waiting for the weekend”).
So, if you send me the version tomorrow … I am in office the whole day … so if you send me the version in the evening, it is really o.k.
Download http://cat.asw.cz/misc/ashwsftr.zip and extract its contents to the avast folder. Overwrite ashWsFtr.dll that’s there (it shouldn’t be locked because of 1.)
The problem is perfectly reproducible? I mean, it happens every time you try it?
