Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: pres92 on September 11, 2005, 09:17:54 PM

Title: ashbug.exe
Post by: pres92 on September 11, 2005, 09:17:54 PM
I have been using avast! home for quite some time.  I really like the program.  However, yesterday the auto update did not connect to the server, or there was some problem with the update completing.  In any event, I turned my machine off in the evening.  When I rebooted today, instead of ashserv.exe, ashwebsv.exe and ashmaisv.exe loading, three instances of ashbug.exe loaded.  The harddrive was in constant read/write mode.  I finally went to msconfig (win98) and unclicked all avast! links so that it no longer starts up with bootup.  After rebooting, I tried to launch ashwebsv.exe but what actually loaded, was ashbug.exe again.

Went to the website and downloaded the virus cleaner.  Ran without any problems found.

So, what the heck is ashbug.exe and why has it taken over the avast! program?  What do I do about it?  Uninstall/reinstall?

Thanks for your help.

Specs:  PII laptop, 266Mhz, 256Mb RAM, Windoze98, Mozilla Firefox 1.0.6
Title: Re: ashbug.exe
Post by: Lisandro on September 11, 2005, 11:13:56 PM
So, what the heck is ashbug.exe
I want to know too  8)
Maybe a way to inform bugs and errors (or send dumps) to Alwil

Uninstall/reinstall?
I won't be bad... Do you have any other antivirus in your system? Had in the past? Which one?
Do you use a firewall?
Title: Re: ashbug.exe
Post by: Nicolas on September 11, 2005, 11:47:47 PM
This may be interesting:

http://www.norman.com/Virus/Virus_descriptions/20027/en?show=destructivity

Title: Re: ashbug.exe
Post by: pres92 on September 12, 2005, 12:11:56 AM
No firewall ... did have McAfee, but completely cleansed it from the machine before installing avast!

Thanks.

Title: Re: ashbug.exe
Post by: Spiritsongs on September 12, 2005, 08:02:01 PM
 :) Are you sure you completely cleansed your Win98 of
     McAfee !? Besides uninstalling from Add/Remove Programs,
     did you also use your computer's "Search" feature to look
     for all files and folders of McAfee & Delete whatever it
     found ? Did you also use a "registry cleaner", such as a
     FREE "evaluation copy" of "Registry First Aid" available at
     www.rosecitysoftware.com and use its "SAFE" level
     setting to remove, with backup, all its finds ?
     
Title: Re: ashbug.exe
Post by: pres92 on September 12, 2005, 09:03:57 PM
yup ... completely cleansed the computer 2 years ago -- avast! has worked fine for over a year, until this weekend. 

so, does anyone know what ashbug.exe is and why it has taken over avast!?  and, does anyone have an opinion regarding uninstalling then reinstalling avast! as a method of dealing with this problem?

thanks.
Title: Re: ashbug.exe
Post by: Nicolas on September 13, 2005, 02:39:32 AM
Quote
so, does anyone know what ashbug.exe is and why it has taken over avast!?

AshBug.exe is a legit Avast file. It may come in action if something goes wrong with the program, for instance when a virus has corrupted Avast files.

That's why I sent you the link earlier in this thread. You are probably not hit by exactly the same virus, but it could be a new variant. Even AshBug.exe itself may have been corrupted.
Title: Re: ashbug.exe
Post by: Nicolas on September 13, 2005, 04:18:15 PM
There is a new virus in the wild attacking the virusscanners:

http://securityresponse.symantec.com/avcenter/venc/data/w32.beagle.cg@mm.html

Many AV don't have as yet a signature provided.
Title: Re: ashbug.exe
Post by: igor on September 19, 2005, 10:21:40 AM
Are there any recent unpXXXXXX files in <avast4>\Data\Log folder?
Title: Re: ashbug.exe
Post by: DavidR on September 19, 2005, 03:38:11 PM
If this virus (as in the links provided) is indeed killing registry entries for a whole slew of AVs processes, it is because it has administrator privileges, e.g. you are logged on to an account with administrator privileges and either browsing or collecting email, etc. with those same privileges.

If you were using either a limited user account or restricted the rights of the program it couldn't create or delete registry entries, therefore limiting the impact.

Security Tips & Tricks - DropMyRights (http://forum.avast.com/index.php?topic=7204.msg128315#msg128315)