Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Olivier-1 on July 06, 2004, 12:06:55 PM

Title: Avast infected???
Post by: Olivier-1 on July 06, 2004, 12:06:55 PM
I detected that dll installed by avast try to send icmp echo request to: web.nextra.cz and to rs04.avast.com.
I stopped avast and exit the application, but it still try to reach these IP addresses.
What happen?
I have also deselected all automatic update without any change.
I have the version 4.1.396.
Is it possible that Avast has been infected, and is used as a backdoor???
Title: Re:Avast infected???
Post by: Eddy on July 06, 2004, 01:05:59 PM
eeerrrrmmmm ever thought that Avast need to connect to a server to see if there are updates?
Title: Re:Avast infected???
Post by: Olivier-1 on July 06, 2004, 01:13:16 PM
Why not? But not when it is expected to be down (stop resident and exited), and even not when the check box to update automtically is unchecked.
I have also a pb to access google (and it seems also only google) this why I suspect something else ...
Title: Re:Avast infected???
Post by: Lisandro on July 06, 2004, 01:50:15 PM
I have the version 4.1.396.
Is it possible that Avast has been infected, and is used as a backdoor???

I don't think so...  ;)
But, it would be better if you update to 4.1.418 and run a full scan.
You can also run an on-line scanning (www.trendmicro.com)  8)
Title: Re:Avast infected???
Post by: Olivier-1 on July 06, 2004, 06:28:10 PM
So, I hava two questions:
1) Why avast is still up, when we request it to stop and exit?
2) how to avoid avast to try to connect on several outside systems when it is up?

Thanks in advance
Title: Re:Avast infected???
Post by: Staind on July 06, 2004, 07:08:21 PM
You can use Rejzor's program: http://freeweb.siol.net/razor256/downloads/avast_external_control.zip to completely shut off Avast!
Title: Re:Avast infected???
Post by: Lisandro on July 06, 2004, 07:28:23 PM
So, I hava two questions:
1) Why avast is still up, when we request it to stop and exit?

There are processes and services that cannot be stoped without affecting the system behavior (for instance, the email service, if stopped, will avoid you to receive or send any email). You can uninstall avast or, for a moment, like Staind said, use RejZoR's application (download at the 'Control' link on my signature).

2) how to avoid avast to try to connect on several outside systems when it is up?

Configure it to manual update (both program and virus database).
Or, by a hard way, deny access through your firewall.
Title: Re:Avast infected???
Post by: Vlk on July 06, 2004, 08:05:42 PM
You can stop the avast antivirus service (Control Panel -> Administrative Tools -> Services) to completely suppress its functionality, including the auto-updater.
Title: Re:Avast infected???
Post by: Olivier-1 on July 07, 2004, 02:02:36 PM
It's what I did, without effect. The attempt to connect to avast.com and all, are still continuing.
Title: Re:Avast infected???
Post by: bob3160 on July 07, 2004, 02:30:05 PM
Olivier-1
Did you re-boot after you made the changes?
Title: Re:Avast infected???
Post by: Vlk on July 07, 2004, 05:48:05 PM
Quote
It's what I did, without effect. The attempt to connect to avast.com and all, are still continuing.


You stoped the avast service in the control panel and yet received a firewall warning? Which application was accessing the internet, then, if not the avast service??? (ashServ.exe)
Title: Re:Avast infected???
Post by: Olivier-1 on July 07, 2004, 07:14:58 PM
OK, after reboot, there is no more connection attemp.
But if I start again avast say it to be resident without update (I did it manualy some minutes sooner) and then reboot, I still have avast which tries to connect.

Also what is the interest to have the choice to manualy update avast if it doesn't care :-(

Avast it a good product against the virus, but still need some improvement to be more flexible.
Example, I don't want it to scan my emails, so I need to stop it and reboot my PC before being able to get my emails grrr....
Title: Re:Avast infected???
Post by: Lisandro on July 07, 2004, 10:32:48 PM
Also what is the interest to have the choice to manualy update avast if it doesn't care :-

I posted the answer on reply #6  :-\
Configure your Connections (basic and advanced) tabs of settings.

I don't want it to scan my emails

Do you have any other antivirus in your system?
email is the most spreading way of viruses nowadays  8)
Title: Re:Avast infected???
Post by: CharleyO on July 09, 2004, 06:36:35 AM

If you have some other anti-virus program on your computer, there will be a conflict. This means avast! will not work correctly ... and quite possiblely neither will the other av program.    :(  

Stop scanning email? Why would you want to do this? As Technical said, this is the main way you will get virus infections. Not scanning email is just asking for trouble!    :o  


Title: Re:Avast infected???
Post by: Olivier-1 on July 11, 2004, 03:45:35 PM
Stop scanning email? Why would you want to do this? As Technical said, this is the main way you will get virus infections. Not scanning email is just asking for trouble!    :o  
Don't worry about that. I don't use any MicroS email as outlook, and so do not have risk to get virus from there. Furthermore I don't open any attached exe,pif, ....

On the other hand, I do not accept that my antivirus forbiden me to get my email, only because I don't want it to scan the emails  
 >:(
Title: Re:Avast infected???
Post by: bob3160 on July 11, 2004, 05:09:50 PM
Oliver-1 I'd like to introduce you to Stained! ;D
You can find him thru the search function.