Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: b184953 on May 25, 2010, 04:31:52 PM
-
Hello everyone,
I would like to set my Avast Pro 5 (currently in trial mode) to not connect to the internet unless manually requested. I have already set program and definition updates to be manually. I have also set Avast setting "my computer is permanenly connected to internet" as suggested by other users of avast.
However avast still tries to connect itself to the internet - how can i disable it? The actual program trying to connect to internet is avastlic.exe (or something like that). I simply cannot put my trust in any piece of software that does some hidden internet activity behind my back without asking me.
Thank you.
-
I simply cannot put my trust in any piece of software that does some hidden internet activity behind my back without asking me.
Thank you.
It's not behind your back, it's within the piece of software you chose to install, that you say you cannot put your trust in to protect your computer from the malware writers, purveyors and vectors that you cannot put your trust in.
I'd like to be more helpful but if you're serious about this, I don't see a solution.
-
Which is your firewall?
Which avast component is trying to connect? avastUI.exe?
-
I am currently using Comodo Firewall v4. I have observed the same behavior (in virtual machines) on Windows XP Professional (both x32 * x64), Windows Vista Enterprise (both x32 & x64), and Windows 7 Enterprise (both x32 & x64).
I have also disabled the monitoring of program version, definition version, and definition auto-updates - because i suspected that those might be secretely going on the internet to check if there is a newer version.
The exact filename of the program trying to connect is: AvastUI.exe, AvastSvc.exe.
The reason why I am concerned is this - if I know that Avast never connects to the internet by itself, and then I suddenly see a firewall popup telling me that Avast is trying to connect to internet, then it will lead me to think that something is wrong, e.g. that Avast has become infected.
-
you seem to like trial versions ;D (7 enterprise etc...) avastsvc connecting, yeah, otherwise no web shield, no mails shield etc...but you can block AvastUI, in the "free" version and "pro" when AvastUI connecting is just there to display the AIS promo ad. Again, as I already stated, I wouldn't mind if that was just one connection, but that's tens and tens.
-
I would prefer to not to have to block Avast in my firewall, i.e. it would be preferable if avast did not connect by itself instead of having to block it.
Are you telling me that even when I purchase Avast Pro there will be advertisements to upgrade to the Suite version? I find that unacceptable - I have no need to have a firewall from Avast when I already have another one. Sure, keep the ads in the Free and Trial versions - but please do not bother your actual customers...
I have tested another installation - even when I install only the File System and Network Shield components (i.e. no Webshield, no Mailshield, no virtualization, etc.) I still see connections from AvastSvc.exe.
So am I to understand that AvastUI.exe connects to download Avast advertisement?
-
you misunderstood the part about avastsvc >>> if it doesn't connect, many avast components become useless. And don't worry about blocking avastUI, especially in the free version, it just doesn't matter. It's only useful in AIS that has network utilities that you don't have.
No you won't have any ad if you purchase the "pro" version (well I don't think you will...). I thought you might have them in the trial version of "pro".
-
you misunderstood the part about avastsvc >>> if it doesn't connect, many avast components become useless. And don't worry about blocking avastUI, especially in the free version, it just doesn't matter. It's only useful in AIS that has network utilities that you don't have.
That seems weird to say at least... are you telling me that if the AvastSvc.exe does not connect to the internet (hopefully meaning avast servers and not some malicious server), then some avast components become useless? That would mean that in case avast servers are down, or internet connection is broken (but ethernet access is still live), then I would lose protection? That too is unnaceptable - there is no reason for a security product to lose protection if it cannot connect to its mother servers. Nor is there any reason for the security product to connect to the mother server, except for updating itself - and it should first ask for permission whether it can connect (or it should be at least possible to set it in some ini or XML file, or even the GUI for it not to connect automatically).
As I said, my interest in not having my Antivirus connect anywhere automatically is to know whether something went suddenly wrong, such as the antivirus becoming infected or going rogue. So yes, it does matter whether AvastUI.exe connects somewhere or not.
At least there should be an option for expert users to disable this automatic connecting to the internet.
-
The exact filename of the program trying to connect is: AvastUI.exe, AvastSvc.exe.
The GUI (avastui.exe) could be blocked by your firewall. It's downloading the live content into the free or trial version (ads).
The service could be invoked by the community option.
Are you telling me that even when I purchase Avast Pro there will be advertisements to upgrade to the Suite version?
No. Only in free/trial ones.
-
then I would lose protection? That too is unnaceptable
You're wrong again. This does not happen. Protection is not related to connection.
As I said, my interest in not having my Antivirus connect anywhere automatically is to know whether something went suddenly wrong, such as the antivirus becoming infected or going rogue.
Indeed, I can't understand this policy. What's the relationship on avast updates/upgrades/connection with it become corrupted? What's rogue antivirus related to this? ???
-
OK, in that case it is fine - having ads in the Free or Trial version is not a problem, I fully support it (maybe it would be good to indicate somehow that the connection will not exist in the purchased Pro version, so that potential customers are not turned away like me). So I guess this solves the AvastUI.exe issue - in case the automatic connection exists in the purchased Pro version as well, I will ask for an immediate refund.
Now, regarding the AvastSvc.exe, I performed a new installation in a completely clean virtual machine so that I am absolutely certain. I chose not be become a part of the Avast community, I did NOT install the Webshield, Mailshield, IMshield, P2PShield. I set Engine and Virus definitions, and Program updates both to Manual. I enabled "My computer is permanently connected to the internet.". And I unchecked the following Components Monitored (i.e. the following components are not monitored): Virus definition version, Program version, Definitions auto updates. But I still get AvastSvc.exe trying to connect to the internet... (And AvastUI.exe also trying to connect, but now I know why).
Any suggestions?
Let me attempt to explain it again - why I am doing this. Imagine the following scenario - you start your computer every day and work on it, and you have it set up to alert you to any new connection to the internet (in other words, a connection that you have not set to be allowed before). You do not see any connections to the internet from Avast for a 100 days, but then suddenly Avast starts to connect to the internet. This might indicate that something is wrong - i.e. avast may have become infected by a virus, or something to that effect. Thanks to being alerted to this connection, you were then able to investigate.
Now imagine another scenario - same as before, but Avast connects to internet every day. And then one day, Avast becomes infected (please bear with me, this is a hypothetical scenario), but because it has always been connecting to the internet, you will not find this behavior suspicious and so you will not be able to prevent the spread of malware.
-
A lot of security apps connect to the internet for backup protection in the event something suspicious is found by heuristics but there is no current signature in the DB. They connect and check the latest DB on their servers that you may not have received yet. To me, this is a good thing and I think you're really making something out of nothing here. I would never block any part of a security app.
-
A lot of security apps connect to the internet for backup protection in the event something suspicious is found by heuristics but there is no current signature in the DB. They connect and check the latest DB on their servers that you may not have received yet. To me, this is a good thing and I think you're really making something out of nothing here. I would never block any part of a security app.
All I am asking for is an option to disable this autoconnecting. It does not have to be present in the GUI, it is sufficient if it is available only in the Avast.ini file - as long as it is available somewhere.
You know what they say - a smart and security aware user is the best line of defense against malware. Hence I will never blindly trust my security software - and I will never accept that security software expects the user to blindly trust it.
-
well I don't know how to stop it from auto-connecting, but in settings under the troubleshooting tab, there is an option called avast! self-defence module. If checked, any sign of malware attack will cause a popup requesting authorization.
Here is its description:
Enable avast! self-defense module - Some viruses deliberately target antivirus software and try to switch it off by deleting or modifying critical files. avast! contains self-defense features that prevent such attacks by blocking the operation. Uncheck this box to turn off the self-defense, thus enabling such files to be deleted.
-
well I don't know how to stop it from auto-connecting
It won't.
I see no reason for not installing avast completely and see no reason for not trusting avast connection.
If you don't trust avast connections you don't trust it all. You can't have such a relationship with your security program.
I know I do not know the technical answer (the connection started), but I think it will be useless. Trust avast. Just my 0.02.
-
I think the main issue here is that the OP doesn't understand why Avast is connecting at all...and we've explained it all already >>> not much more we can do to prevent him from interpreting things...hum...curiously ;D >>> that's a dead end street ;)
-
Which takes us right back to what I wrote near the beginning... http://forum.avast.com/index.php?topic=60110.msg506865#msg506865
-
Ummm...
Microsoft connects to the net all the time.....
You gonna block it? Hmmm?
Avast is suppose to have access to the net. That is
one way it keeps you SAFE. The only reason I can see
to not allow a TRIAL piece of software, (if I read your post correctly),
such as Avast an internet connection is to try and keep the trial fully functional
past whatever time limit is set.
If you do NOT trust the security software, then what good is it?
Then again, what good is the OS you are using?
You connected to this post..right?
-
The scenario the OP presents as the reason why he doesn't want Avast! to connect is extremely unlikely because of the self protection built into Avast! (and every other good security program). The chances of the files being altered by malware are very remote. What would be more likely to happen is that the malware would completely disable Avast!, including it's ability to connect to the internet. It wouldn't want any AV to be able to get updated signatures that might detect it's presence. The chances of that happening are also remote though due to the same self protection features.
-
If it is likely to modify/disable an antivirus application it could do exactly the same to your firewall or create a backdoor that bypasses it all together. There are limits on what you should do to prevent stuff happening, when what you are doing borders on the paranoia the best option is to completely disconnect your PC and or sell it.
If the worst comes to the worst, having a robust backup and recovery strategy will stand the test of time more so than locking your system down so much so that nothing runs.
-
Guess I was right :p
Avast now has advertisement even in the paid versions... Now you see why I said that I do not want software to auto-connect to the internet - the producers of the software may silently do something nasty in the background...
I truly wish the company Avast (cheers on the new name) provided an option for the antivirus to not autoconnect to the internet - so that it may regain the trust that it may be losing now... Just a simple checkbox in the options... Please?
-
Guess I was right :p
Avast now has advertisement even in the paid versions... Now you see why I said that I do not want software to auto-connect to the internet - the producers of the software may silently do something nasty in the background...
As far as I know, avast is one of the most serious, trusted and reliable security companies all over and this sound to me like extreme paranoia, so maybe your best option would be to change to another program that meets your requirements.
-
How are you determining that avast! tries to connect to the internet? Is it merely accessing Windows internal network subsystem or making an actual outbound connection attempt? If it is an attempt what is the hostname it is trying to connect to? That may shed some light on the connection.
So I guess this solves the AvastUI.exe issue - in case the automatic connection exists in the purchased Pro version as well, I will ask for an immediate refund.
I doubt you'll see the refund if you make a purchase - that's why a trial is available.
-
Guess I was right :p
No, you weren't.
Avast now has advertisement even in the paid versions... Now you see why I said that I do not want software to auto-connect to the internet - the producers of the software may silently do something nasty in the background...
1. It is NOT an advertisement.
2. If you do not trust avast as your security program, better will be moving.
3. Nasty? To be updating? To try to provide support for the users? Time for changing...
-
Now, regarding the AvastSvc.exe, I performed a new installation in a completely clean virtual machine so that I am absolutely certain. I chose not be become a part of the Avast community, I did NOT install the Webshield, Mailshield, IMshield, P2PShield. I set Engine and Virus definitions, and Program updates both to Manual. I enabled "My computer is permanently connected to the internet.". And I unchecked the following Components Monitored (i.e. the following components are not monitored): Virus definition version, Program version, Definitions auto updates. But I still get AvastSvc.exe trying to connect to the internet... (And AvastUI.exe also trying to connect, but now I know why).
As quoted, it seems that you did installed the Network Shield?
If you did, it looks reasonable to me that avastsvc.exe connect to the Internet, because it has to monitor your network.
On my VM, when I choose to not install Webshield, Mailshield, IMshield, P2PShield and Network Shield, there is no avastsvc.exe connections at all.
-
On my VM, when I choose to not install Webshield, Mailshield, IMshield, P2PShield and Network Shield, there is no avastsvc.exe connections at all.
dabeniao, I suppose you do this for testing purposes.
To protection, I see a huge degradation on avast capabilities if you stay only with the file shield.
-
dabeniao, I suppose you do this for testing purposes.
To protection, I see a huge degradation on avast capabilities if you stay only with the file shield.
You're right. Actually I do this just trying to reproduce the situation that b184953 encountered.
On my working machine, I had avast! Free fully installed and activated.