web shield

Avast Free Antivirus / Premium Security
1

hello eveyone ,web shield was scanning fine and i updated to home 4.6.623 and now there is nothing being listed (scanned)by web shield,im not real sure if i have to set it or somethings wrong
windows xp
avast home
int. explorer 6

2

Do you use any HTTP proxy on your PC? Some ad-blocker, popup remover or something like that?

3

i connect through earthlink dial up(no proxy),i use the pop up blocker thats in internet explorer(sp2).

4

Hello bri,

Earthlink users reported problems with their parental control software - Surf Monkey. So avast’s excludes connection from this process (SMPROXY.EXE) since avast ver. 4.5

I have just had chat with Earthlink support and they stated that Earthlink does not use Surf Monkey any more. Perhaps they now ship some other proxy-like application for the same purpose.

For further info I need to know what process accesses the internet on your PC. Normally it would be Internet Explorer (iexplore.exe), but that’s apparently not the case in your situation. Can you please download TCPView from sysinternals (http://www.sysinternals.com/files/tcpview.zip). This tool will display all active connections. It also supports saving the current status to the text file.

Please open several pages in your browser, you should see new connections to appear in tcpview along with the connecting process name. Save the log now a please post here. We’ll find out then what to do next.

Cheers
Lukas.

5

here are the results of tcp view program

6

Hmm, so you are using SMProxy.exe (Surf Monkey) and this program intercept the connection from Internet Explorer. Similar thing is done by WebShield and if not stopped somewhere they would recursively steal each other’s connections and this would result to the endless loop.

Fortunately in the latest version of webshield only verified programs (IE in this case) are redirected and in the previous version on the other hand the SMProxy.exe was ignored. This prevents the loop but the connections are not scanned. :-[

One solution to try might be to setup HTTP proxy in the Internet Explorer (in the Earthlink dialup account) to localhost, port 12080. Thus the connection would reach WebShield eventhough it is stolen by SMProxy.exe.

Try that please!

Lukas.

7
Fortunately in the latest version of webshield only verified programs (IE in this case) are redirected

I am very happy to report Lukas, that in the latest 6.6.623 (and that patched with the planetdownload etc. thing also) the new WebShield is not allowing Sygate to pass through some programs like A2free or Yahoo yupdater through that port 80, but instead they get asked from the firewall.

Never expected that Sygate proxy thing to be taken care this way from Sygate, but thx a lot guys.

8

thanks a lot lukor,did what you said in earthlink dial up (int.explorer)setup port to 12080 and web shield is now scanning.thanks again,bri