Web Shield log shows Web Shield scanned over 8000 web pages at startup

Avast Free Antivirus / Premium Security
1

Hi, At system startup I am seeing avastSvc.exe using a lot of CPU, which is ineviatbly slowing my machine down. This eventually falls to around 5% CPU. Looking at the Web Shield log, I discovered that there was a massive blip, where the Web Shield was looking at over 8000 web pages at startup! Can anyone explain this? I have performed a moderate scan and had no viruses or infections.

2

Attach a screenshot

3

Please provide more information.
What os, service pack(s)?
What exact version of avast?
Do you have or did you have any other security software installed? If so, which one(s)?
What else is loading at boot time?

Please attach a OTL log in your next post.
http://forum.avast.com/index.php?topic=53253.0

4

Hi again.
I’ve attached the OTL log.
OS - XP V2002 SP3
Avast! 8.0.1497 Current Version 131018
I have no other security software except for Rapport.
Nothing else significant happening at Startup

Hope this is enough.
Many thanks!

Also attached a screenshot of webpage blip

5

Could you post a small selection of the sites that were being scanned

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:Commands
[CREATERESTOREPOINT]

:OTL
IE - HKLM\..\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}: "URL" = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dnldmsd&cd=2XzuyEtN2Y1L1QzutDtDtC0A0AtDzyyDtCtDyCtCyByE0CtAtN0D0Tzu0CyCtDyBtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1Q1G1I1Q1H1B1Q&cr=117260401&ir=
IE - HKCU\..\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}: "URL" = http://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dnldmsd&cd=2XzuyEtN2Y1L1QzutDtDtC0A0AtDzyyDtCtDyCtCyByE0CtAtN0D0Tzu0CyCtDyBtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1Q1G1I1Q1H1B1Q&cr=117260401&ir=
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll (Dell Inc.)
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No CLSID value found.
O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (no name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {BA14329E-9550-4989-B3F2-9732E92D17CC} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {F0D4B239-DA4B-4DAF-81E4-DFEE4931A4AA} - No CLSID value found.
O20 - AppInit_DLLs: (C:\PROGRA~1\GOOGLE\GOOGLE~2\GOEC62~1.DLL) - File not found

:Commands
[resethosts]
[emptytemp]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

THEN

Please download Junkware Removal Tool to your desktop.

[]Right-mouse click JRT.exe and select “Run as Administrator” the tool will open and start scanning your system
[]please be patient as this can take a while to complete depending on your system’s specifications
[]On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
[]post the contents of JRT.txt into your next message.

6

Right - here’s my next homework report!

  1. I could not find any details for the webshield security report. It merely stated that over 750k of webpages + network objects had been scanned in the last 30 days! That is a ridiculously large number! There were no infections though.

  2. Attachment OTL1.log is the result of the Quick Scan.

  3. JRT.txt attached

Cheers!

7

Could you monitor for the next few days to see if this occurs again

8

Perhaps better to install the latest avast version and then see if it still happens.

9

Hi,
SYstem startup is now a lot quicker, with vastly less websites being monitored by webshield.
Many thanks for your help.

10

It was probably the startsearchdial addon that was causing the problem

Run OTL and press the cleanup button to remove it :slight_smile: