PDA

View Full Version : AVG won't update on 2 pc's


Fruss Tray Ted
06-17-2005, 11:57 AM
Hi guys/gals.

I have had problems as of late trying to update AVG 7.0.323 I have it installed on 2 pc's, one 98SE and the other XP pro sp2. It doesn't matter if I let AVG update on it's own or if I run it manually, when I ok through my firewall and select 'download from internet' the download progress screen states 'closing connection' and I need to close that screen by End Tasking because it seems to freeze for a bit. Anyone else seeing this problem?

The 2 pc's are on the same router but I have not enabled file sharing. Everytime they boot, Sygate alerts me that they are trying to access each other and I may have let it happen once or thrice :o though I've never set it up properly per se. I was able to update yesterday (Thursday) after repeated tries only. The AVG icon went from black and white to color to indicate success. I manually tried this morning and there is supposedly a 5kb file to download again and the update failed once again and the icon returned to B&W.

In the 98 pc, Trend's Housecall comes back clean and Trojanscan online scan also. There is a Yahoo entry in HJT log that I have no idea where it came from. Maybe my son who just moved back in lately has caused the entry from sites he frequents. I will begin working on just the 98SE pc for now so no confusion between the two occurs. I appreciate any help with the HJT log below:
_________________________

Entries in bold are ones I am not used to seeing on this pc. And yes, it is the complete log. the only things disabled in msconfig are MS'es auto services, exif launcher for my digital camera and Adaptec's INCD and EZCD Creator 5.5

Logfile of HijackThis v1.99.1
Scan saved at 12:03:01 PM, on 6/17/05
Platform: Windows 98 SE (Win9x 4.10.2222B)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\PROGRAM FILES\SYGATE\SPF\SMC.EXE
C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGCC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGEMC.EXE
C:\PROGRAM FILES\GRISOFT\AVG FREE\AVGAMSVR.EXE
C:\PROGRAM FILES\SPYWAREGUARD\SGMAIN.EXE
C:\PROGRAM FILES\SPYWAREGUARD\SGBHP.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
O:\MY DOCUMENTS\COMP CRAP\PROGRAMS\HIJACK THIS\1.99.2\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/ycomp_wave/defaults/sp/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:mozilla
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: SpywareGuardDLBLOCK.CBrowserHelper - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\PROGRAM FILES\SPYWAREGUARD\DLPROTECT.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\SYGATE\SPF\SMC.EXE -startgui
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGCC.EXE /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGEMC.EXE
O4 - HKLM\..\Run: [AVG7_AMSVR] C:\PROGRA~1\GRISOFT\AVGFRE~1\AVGAMSVR.EXE
O4 - HKLM\..\RunServices: [SmcService] C:\PROGRAM FILES\SYGATE\SPF\SMC.EXE
O4 - HKLM\..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O15 - Trusted Zone: http://*.windowsupdate.com
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsecurity.com/trojanscan/axscan.cab

Fruss Tray Ted
06-17-2005, 12:06 PM
I immediatelyu tried again after posting this thread and AVG downloaded 88% of the update (of which I reported the wrong size in above post :o) and stalled for about 10 seconds. Then it completed and installed. :confused: :confused:

Maybe this is just a server problem though I was thinking it was within my pc because of the 'closing connection' screen without updating.

On that Yahoo entry, can I just go to regedit to remove it or is there more to it? The DDHELP I see is just a Windows thing but as I mentioned, it has never been on this pc before.

pop pop
06-17-2005, 12:24 PM
FTT,

The AVG Free server gets overloaded. There was a time several months ago where people were going nuts cause they couldn't update for days and weeks. I was one. What I did was mod my hosts file to redirect to the AVG Pro/pay server for updates :D

I'm at work so I can't get you the IP address. It's here somewhere if you want to search and try that. Otherwise, I'll post it later.

Of course, that may not be your problem, but it sounds like it is.

Steve
06-17-2005, 01:25 PM
I've been having the same problem updating today. I tried a few minutes ago and got the update just fine. I think it is as pop pop says, just an overloaded server.

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/cus...//www.yahoo.com

is just a tracking cookie. I always fix that entry.

C:\WINDOWS\SYSTEM\DDHELP.EXE

is a M$ file. It is normal to see it in HJT scans. LINK (http://www.liutilities.com/products/wintaskspro/processlibrary/ddhelp/)

david eaton
06-17-2005, 02:18 PM
I had that yesterday, but today the download was back to normal. Looks like a server side issue.

Fruss Tray Ted
06-17-2005, 03:56 PM
Thanks all.

I got both pc's to update f-i-n-a-l-l-y..

I looked at my cookies and did not find the yahoo one if it was one. I went into regedit and deleted it (set to zero). It's gone.

Pop pop,
I have never modified the Hosts files and would need a step by step, hold my hand, tutorial to do it if I did, but I'm all set for the moment so if this becomes a regular problem I know who to ask. Just don't be goin' anywhere far far away where I can't find you... ;)

pop pop
06-17-2005, 06:59 PM
1) For Win XP, The "hosts" file is located in C:Windows/System32/Drivers/Etc. For Windoze 98/ME it's in C:Windows.

2) Here's a "standard" Windoze unmodified hosts file (note: the "#" is a comment marker and text in that line is not executed):

# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost


3) Find your hosts file and save a backup, either to a different location or name, e.g. "hosts.old".

4) To modify the hosts file, open it using a text editor like Notepad. To redirect to the AVG "Pay" server vice the "Free" server, add this line to your hosts file somewhere below the localhost entry:

193.86.103.19 guru.grisoft.com

Now save the changed hosts file (as "hosts"). Do not save with a ".txt" extension.

The next attempt to connect to the update server will be redirected.

ErnieK
06-18-2005, 04:00 AM
AVG had problems for the past couple of days with their updates. I was going doo-lally trying to find out what was wrong until I spoke to anothe rcouple of folks on the phone who were havong the same problems. All OK htis morning though. Updated needed three (3) times to be fully updated. I am now running full scan on old computer to check it out.

pop pop
06-18-2005, 06:21 AM
For everyone who has this trouble while the update server is overloaded, and who don't want to manually change the hosts file (why not?), you can get the update file from a place like MajorGeeks.com or directly from Grisoft. Download and save, then temporarily change your AVG update seetings to update from file rather than net.