Since update to 4.8.1169, ashWebSv.exe is using 95% CPU

Hello everybody,

First, excuse my English, I’m french (and like much of french, I’m bad in foreign languages …).

Since i update avast home version to version 4.8.1169, the task ashWebSv.exe take over 95% of my CPU, and freeze my connection to internet.
I use Firefox 2.0.013, and nothing else running (no emule, no bittorrent …)
I got another computer, and same problem on in just firefox running.
I am obliged to killed the service web shield via the avast console, and i reload it.
10 Min after, same problem again.

Any one have an idea ?

Thanks

EDIT : i use ashampoo firewall free version.

This problem appears since the update, never before.

Please, check the folder \data\log
Are there any files called unpXXXX there (where XXXX is a random number)?
If so, send them to vlk (at) avast.com
They may contain more information about the problem (maybe a link to this thread).

Which is your Windows and firewall?

I got a lot of files unpXXXXXX.tmp.mdpm in the folder \data\log.
Many have 0 ko, only 3 have data.
I 'll send them by mail.

I use Ashampoo firewall free version 1.20
I’m on Windows XP home SP2.

Does disabling it help?
Did you install avast 4.8 after Ashampoo or you’ve updated avast from 4.7 version?

I have Avast and Ashampoo since 2 years, without problem.
I updated Avast 4.8 from 4.7 version.
And there was no update for the firewall.

I didnt’ try to disable the firewall.
Next time, i 'll try.

EDIT : freeze again when access www.lci.fr
I disable the firewall, no effect.

Well the link you gave redirects to http :// tf1.lci.fr/ and with firefox and the web shield enabled no problem with high CPU or freeze. My only problem is that page loads slow for me on dial-up as it is very media intensive, other than that no problem.

I assume that you are able to visit other pages and you don’t get a high CPU or does it happen with other pages ?

Try Terminating the Web Shield does it work then ?

I gave the exemple because i searched to freeze, and it’s happened on this page, but i got the problem with other pages.
The process ashWebSv.exe took 90% in this page (forum.avast.com/) 20 minutes ago …

I got an Athlon 2200+, with 1Go de RAM.
My other computer is a portable, HP Pavillion, and same problem.

I terminated the process from the console (see image) and so, all work fine, for a while …(10 mn or more …)

http://img177.imageshack.us/img177/7516/consoleavastbv0.th.jpg

The forum is probably not a good test case as I have been experiencing a number of horrendously slow page loads, as by all accounts it is on a server that also deals with VPS updated.

What other security software do you have that might monitor web activity ?

It is strange to see it on two systems, do you have the same security software on both ?

Try a forum search for ‘Ashampoo web shield’ without the ’ quotes ’ and order the results by most recent topics first, there are only 5 hits but 2 for 2008.
Try http://forum.avast.com/index.php?topic=25594.0, this topic reports since changing ashampoo for a different firewall no problems, though I don’t rate ZA in its present free version.

Or this one, http://forum.avast.com/index.php?topic=25594.0.

I’m having issues with PCTools firewall and avast 4.8.
I’ve reverted back to Windows Vista firewall with advanced control.
Maybe some problem with Ashampoo… but it’s hard to troubleshoot only with the current data. I hope the programmers could simulate your problem in their lab.

Help Awlil! Any input? Do you suggest those of us with unresolved issues go back to 4.7?

Try http://forum.avast.com/index.php?topic=25594.0, this topic reports since changing ashampoo for a different firewall no problems, though I don't rate ZA in its present free version.

Actually, it seems to be the same problem …
But I have already tried ZA in free version, it’s impossible to open port in udp, only tcp.

I will continue to search on internet …

Thank you for your help

Your welcome, sorry it wasn’t more productive.

Hello,

Just to say I got the same problem that clavben describe !

I am French too (is it a particularity of french system ?)

Win XP SP2 too,
Ashampoo firewall too
same avast version too

Problem arrive after 10 minutes and ashwebsv use 53 % of cpu and ashampoo 46 % !
If I quit ashampoo, ashwebsv use more CPU
if I quit ashwebsv, things come back normal

if I relaunch ashwebsv it seems to be ok… for next 10 minutes at least…

It seems there is no need of internet traffic for generate the problem… only an active connection…

hope this help…

I believe that the avast team are giving close attention to this problem … they are a highly talented and professional team. Please give them a short time to address this issue.

Hi guys,

I am already trying to reproduce this problem. Ashampoo firewall is implemented as LSP in the spi.dll, it runs inside WebShield process. It can eat CPU in whatever process it chooses, and have a webshield dump where this exactly happens.

Can you please post the exact filesize and timestamp of this file on your system ?

Image path: C:\Program Files\Ashampoo\Ashampoo FireWall\spi.dll

Thanks.

Edit: also please can you post any details of your ashampoo fw configuration? Eg. is the “Learn Mode” activated? What “rules” do you have for InternetExplorer / Firefox and WebShield.

All I can reproduce is somewhat heavy CPU usage from Firewall.exe, when opening several tabs in Firefox at once.

Edit2: when I shutdown it goes back to normal.

Hi,

can you please try with ashampoo firewall LSP ignored in WebShield.

This means:

  1. edit avast4.ini with notepad

notepad “c:\program files\alwil software\avast4\data\avast4.ini”

  1. find the section [WebScanner]

  2. add the line

IgnoreLsp=spi.dll

  1. save, restart WebShield provider

Thanks,
Lukas.

Other info about this WebShield setting:
http://forum.avast.com/index.php?topic=1647.msg15960#msg15960

Hi Lukor,
In response to your first post :
here is the spi.dll info :
http://img356.imageshack.us/img356/6730/infospidllma7.th.jpg

and here is my ashampoo config :

http://img356.imageshack.us/img356/1637/ashampoo1yg2.th.jpg


http://img356.imageshack.us/img356/1913/ashampoo2fz0.th.jpg


http://img403.imageshack.us/img403/3175/ashampoo3fd4.th.jpg


http://img403.imageshack.us/img403/8297/ashampoo4yr9.th.jpg

Sorry this is French screen…

I have not yet modify the avast4.ini as you suggest, since today … I have no more problem…

I am always in 4.8.1169 version, no modify in ashampoo firewall but since this morning my connection is active and even if have not use internet very much, It seems the problem is … no more here !

It’s very strange since it was present for some days… Have you modify something ?

If the problem come back I will inform you and test the .ini solution …

Thanks

May I speak too quickly the problem is back again !

I will test the .ini correction after lunch