Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: jraju on February 03, 2016, 01:51:53 PM
-
Please see the two results in the same computer that has been scanned at different times by avast antivirus free, Please give the solutions.
please also tell how to portforward port 80 and 21 if there are no open menu at the router page.
-
Please see the other result here. Moreover my modem is teracom modem but it shows as media tek, May be the chip may belong to media tek
-
There is no need to forward ports 80 and 21 unless you run your own web- and mailserver.
-
Hi, Thanks Eddy for the reply. I am only a user of internet. Then It is said in the details of the scan to port forward 80 to fix this problem. I did not attach that details as i would be exceeding the limit of pictures to upload
-
Hi, I am really expecting a reply for this . Moreover, if two or more days gone, my post would not be visible on the first page. Is this not a glitch in avast scan.
-
https://en.blog.nic.cz/2015/08/06/the-rom-0-vulnerability-one-year-later/
-
Hi, I checked the test in the link you suggested. It is saying that it is not vulnerable in rom 0 test.
-
Update to the latest version (2016.11.1.2253): https://forum.avast.com/index.php?topic=182468.0
-
Hi, I have uninstalled the old and scanned with the new in the said link. But there is no change in the result. while rom .-0 test reveals not vulnerable in the link provided by eddy, avast still shows as rom 0 vulnerability. How could two results be there, one positive and one negative. Will avast look in to this?
-
Might be a bug, wait for one of the devs and/or submit a ticket: https://support.avast.com/support/tickets/new
-
Hi, Aysn,
I have posted to the support. I would also like to know, what it scans to produce the vulnerability result.
It changes the modem name in consecutive tried tests. one time teracom and other time as media tek.
First of all thanks for providing this tool to know that our system might be compromised by some software crooks. I do not know anything about router page, and once i was given the alert, i learned so many things and how to handle my router, modem. I thought , that modem as a technical hardware piece like radio. But no, it is a sensitive hardware. This is after i got the alert from avast. Some more technical team in some other site, has given some clues on configuring firefox and other browsers. That is a little hard work, to understand and configure.
If cfg files could be locked, then this problem would be solved. The modem should be workable, but there must be something to cfg to lock, so that no intruding takes place. If any one wants to chage the settings, let him open with pw and again auto lock. This is the only best way to resolve rom
I want more discussion on this. I once again thank that it include a sensitive item in its scan
-
as media tek.
Regarding MediaTek, see: https://forum.avast.com/index.php?msg=1289352
Not sure (as the warning is for Android) if this is somehow related to your issue, though.
-
Hi, Asyn,
I am saying that modem is shown as media tek. How it could be two named modem?
-
Hi, Asyn, I am saying that modem is shown as media tek. How it could be two named modem?
No idea, sorry.
-
Hi, I understand. My son has android phone . Probably, that is why, it gives media tek, when he is around near. Now he has gone to office, So, my modem is shown as teracom.
Jive!2%$&+* what is happening here?. My modem is a combined adsl wifi router. When you power on modem, your wifi also connected, if you make wifi enabled in your router page. my son, never activate wifi, once avast shows this rom 0 vulnerability.
Is there any solution for this.
-
Hello,
Thank you for reporting this.
For analysis we need some logs. Please follow the guide bellow.
It would greatly help us if you could send a package for each scan result - with ROM-0 vulnerability, with the router showing one name, with the router showing second name.
First enable debug logging: GUI -> Settings -> General -> Maitenance -> Enable debug logging
Then reproduce the issue (Run Home Network Security scan).
Then create support package and submit it (guide here https://www.avast.com/en-us/faq.php?article=AVKB33) and post here a message with the ID of created package so we can find it.
Thank you,
Filip
-
Hi, Filip
I will wait until some time the android phone is available . Can i open the log file in my computer to see myself, only for academic purpose.can i see the contents in english language in known format, like any other logs, or it will be in machine language.
i thought the router chip would have been found by avast some times, but once when i found post that it belongs to android chipset, i am curious.
-
Hi, filip,the id is mckoj. do you want the full id of the zip here. i already sent thro your support tool. This is for teracom modem
-
Jraju,
Thank you for the support package.
It really seems that your router is Rom-0 vulnerable.
Try searching the manufactures website for new firmware version, that fixes the issue and then updating your router to the fixed firmware.
If not available, the only option is to replace your router. Sorry.
http://rom-0.cz/ sees your network from outside and it is possible, that it was not able to detect the vulnerability, while Avast sees your network from inside. That's why you can be getting the different results.
The logs are readable and are located here: "C:\ProgramData\AVAST Software\Avast\log"
Filip
-
Hi, Filip,
Thanks. But could you kindly say, why, when all the measures to tighten the security has been taken.
I also wish to know, which are attacking the rom 0. I mean the programs that are attacking. Who is 169.254.90.67 that once changes my access point of gateway. Are there any logs, to these effects.
Kindly make it to keep those log files secured at your servers, and say only the possible attackers from those logs.
How modem name changes? What is the reason from logs. You may be well versed in reading thro logs, but i am not.
Once, i saw, s3amazonws.com was trying to download some version. Did anything caputured on log files.
I will be happy to receive any information on these.
Will there be alternative firmware.
In short, would you elaborate on what points, my rom 0 is insecured from logs. Please just mention the points without quoting the actual logs results
-
Hi, Filip,
Can i download some equivalent firmware to my modem to work. I do not know, I may try and if modem is unsuable then, i will get one which has been publishing firmware updates unlike those, who forgot you once they sell.
I was given port 80 and 21 as vulnerable ports, in avast results. I know about port forwarding. The solution is given as port forwarding of these ports to unused device ip of my devices. How to find? I will try and if not possible replace my router.
I also wish to state, that even though i disabled the wireless option in my router,scanning with avast, shows the same vulnerability.
I will be waiting for your reply and eddy's.
-
Hi, It shows that Filip has missed this thread altogether.
I bought a new router and testing the same with the network scan , again shows some vulnerability like having weak password. If i click show, it shows user name as user and password as user. I think there is a glitch in the scan.
I have changed the admin password of my router, and avast shows that as user. Please give the reason for the same.
To my previous post, how avast determines the vulnerability, there is no answer from avast team or forum members.
Is the vulnerability is shown in network password? or admin password
-
Hi, I think , i have to go to my posts to see the status of my thread. Usually, i get replies instantly from forum members. How avast shows two type of results and about the other questions raised on the last 3 posts.
-
Hi,
While one opens avast, you see the message You are protected with green tick mark. But individual scans show vulnerability like router vulnerability, the main subject of this thread. Is that correct?
-
Hi,
While one opens avast, you see the message You are protected with green tick mark. But individual scans show vulnerability like router vulnerability, the main subject of this thread. Is that correct?
Being protected and having issues are two different things.
Your system is protected. You should however solve what ever problems you may already have.
-
Hi, Do not you think that it does not convey the correct meaning?
Your system is protected means that all the components in the system is protected. One will not run the scan at all, if his system shows as protected.
Issues are known only after attempt to scan the required scans.
-
Hi, Do not you think that it does not convey the correct meaning?
Your system is protected means that all the components in the system is protected. One will not run the scan at all, if his system shows as protected.
Issues are known only after attempt to scan the required scans.
Since the Network Scan is an addition to Avast just as the Check for outdated Software, I don't consider them as part of the protection but as additional tools.
Till you run the needed scan's those parts haven't been checked.
-
IMHO,
(http://screencast-o-matic.com/screenshots/u/Lh/1455472591306-17827.png)
This simply means that all the Avast Shields are working
-
Hi, Thank you for the information.
-
Hi, Thank you for the information.
You're welcome. These are my opinions. :)
I'm sure if Avast doesn't agree, they'll chime in. :)
-
Hi, They are not chiming on the main topic of my query. How two test could be giving different results. They asked my log files and say that it has vulnerability, but does not says, how it is vulnerable. I sent the required logs.
Whenever you are asking a genuine question, it needs a correct reply. Hope that Avast team see this topic.
They may not be aware of the recent change in the scan showing vulnerability is also a topic of discussion in some other forums as well.
It is a newly introduced scan, and will really a boom , if it is showing what are the vulnerability . I have changed the password and found the vulnerability as weak password again showing in my next scan.
I am using avast for more than 3 years.
-
No reply for the most sensitive question on avast forum.
are you listening.........avast... team...
-
Hi, I resolved my problem now.
I have gone to the windows firewall and in the advanced settings, selected inbound,the avast shown 80, and 21 , http and ftp ports and then blocked those ports. I disable the ping options.
Now the avast network scan show, both are safe. I do not know, whether it is temporary fix or not. You need to have a admin changed password and these settings to get avast green ticks.
Now, my question, Would this affect my normal internet experience?
2nd, 2 devices are said to have been connected. one may be my router, the other device?
-
Hi, As i mentioned , i repeat the question why two tests show different results by the same avast scan on network. Now, i have vulnerability to the core. Yesterday, i was fine.
Just, i updated the version and scanned. The icon has changed from vertical position to horizontal postition. But the result is not believable
Please see this
Betaal returns to his tree