Understanding avast4.ini file

[Lisandro]

Here are the settings for the last avast version. Most of them will be the default values for avast 4.6.
My intention is relate the avast! settings with avast4.ini file (open avast4.ini file in Notepad editor.
You will find this file in the folder Data in your avast! installation folder, e.g. C:\Program Files\ALWIL Software\avast4\Data).
There are few new settings available since last information posted here. These were the results I get untill now.

* Indicates that is possible to change the value from the Settings windows.

Warning: some of the information bellow should be added to the avast4.ini file as new items in the appropriate section, I mean, not all the itens exist already and can be merely modified by editing. You should add them if you want or need.

Section and Keys	Values	Notes and value description
[Languages]		avast! available for download in 30 Languages!!!
0402	Bulgarian	avast! in Bulgarian
0403	Catalan	avast! in Catalan
0404	ChineseT	avast! in Tradicional Chinese
0405	Czech	avast! in Czech
0406	Danish	avast! in Danish
0407	German	avast! in German
0408	Greek	avast! in Greek
0409	English	avast! in English (default language)
040A	Spanish	avast! in Spanish
040B	Finnish	avast! in Finnish
040C	French	avast! in French
040E	Hungarian	avast! in Hungarian
0410	Italian	avast! in Italian
0411	Japanese	avast! in Japanese
0412	Korean	avast! in Korean
0413	Dutch	avast! in Dutch
0414	Norwegian	avast! in Norwegian
0415	Polish	avast! in Polish
0416	Portuguese	avast! in Portuguese (Brazil)
0418	Romanian	avast! in Romanian
0419	Russian	avast! in Russian
041A	Croatian	avast! in Croatian
041B	Slovak	avast! in Slovak
041D	Swedish	avast! in Swedish
041F	Turkish	avast! in Turkish
0424	Slovenian	avast! in Slovenian
042F	Macedonian	avast! in Macedonian
043E	Malay	avast! in Malay
0804	ChineseS	avast! in Simplified Chinese
0816	Portugal	avast! in Portuguese (Portugal)
081A	Serbian	avast! in Serbian
Engine	1046	default: English

[Lisandro]

[Common]
ApprovedPerson	empty	Windows username (login)
ApprovedFirm	empty	Registered user company
ProductVersion	4.7	Your avast! main version
VersionLabel	May2007	Your avast! main version date release
ThreadTerminationTimeout	30000
Enterprise	empty	Windows Registered company
Database	SQTL	Since version 4.7.807 a new data storage (settings and databases) called SQLT is used by avast! New storage system has nothing to do with Microsoft MDAC/Jet whatsoever anymore (ODBC and XML).
StorageMigratedOK	1
Exclude	empty	Path(s) excluded from scanning separated by semicolon
VPSUpdate	Automatic	* Automatic, Ask or Manual
ProgramUpdate	Ask	* Automatic, Ask or Manual
NewsUpdate	Automatic	* Automatic, Ask or Manual. Control the dismiss of the iNews panel, with or without user interaction.
LoggingLevel	5	* Emergency=0/Alert=1/Critical error=2/Error=3/Warning=4/Notice=5/Info=6/Debug=7. Default Notice includes precedents Emergency, Alert, Critical, Error and Warning.
NetAlert	MAPIPROFILE:<your_MAPI_profile>&<password>	* Alerts: MAPI profile and password for sending alerts
ProxySettings	Autodetect	* Autodetect, HTTP or Socks4
ProxyAddress	empty
ProxyPort	empty
LastLogonAccount	empty
FilterMgr	0	Not supported yet! It does nothing right now. This feature will be used only in Longhorn (or Vista, or whatever the name of new version of Microsoft OS) to set the upper number limit of open connections in avast! providers.
ShowTxLogStuff	0
LogEvents	1
DefragmentDataFile	1
VirusReportURL	form.php?name%s&virus%s
MoveToFolder	empty
LogMaxSize	4096
NetAlert	empty
LastChange	empty
SMTPLog	empty
SMTPLogTo	empty
HideSimpleGui
HideEnhancedGui
HideResidentGui
HideChestGui	0	0 is the default for Home version, 2 is the default for both Professional and Trial versions
DefTasksTimeStamp
LastINewsTimestamp	empty	The value is the result of the time() function, i.e. representes the number of seconds elapsed since midnight, January 1st, 1970 until the last News time.
LateServiceStart	empty	By default there wouldn't be an ini entry, only if you elect to delay the avast services until other system services have loaded. So it is an on or off option 0 (there would only be an entry in the ini file if you change it back in the program settings, to the default of unchecked) or 1 (delay loading of avast! services until after other system services).
UserModeScanning	1	Set 1 for troubleshooting (debugging) mode. Normal user should let it empty.

[Lisandro]

[Communication]
InformationTimeout	300	default: 5 x 60
InformationPortAddress	6000
ClientsListenPortAddress	6011
ClientsListenPortAddressSSL	6002
ClientsPushPortAddress	6009
PopTimeout	600	default: 10 x 60
PopTimeoutDiff	300	default: (PopTimeout / 2)
SynchroTimeout	15
EmailChestFile_To	virus@avast.com	e-mail address where will be sent files from Chest to Alwil Software
ProblemEmail	support@avast.com	Support e-mail address
MaximumSendSize	1024	* Maximum size of file to be sent to Alwil Software in the e-mail attachment (in Kb)
SMTPServer	empty	* SMTP server address for sending alerts (and files from Chest to Alwil Software). #smtp.<your ISP provider address>
SMTPFrom	empty	* e-mail address (who sends the alerts) (and files from Chest to Alwil Software)
SMTPPort	25	* SMTP Port number for sending alerts (and files from Chest to Alwil Software)
SMTPUserName	empty	* User name for SMTP authentication, if needed to send alerts (and files from Chest to Alwil Software)
SMTPUserPassword	empty	* Password for SMTP authentication, if needed to send alerts (and files from Chest to Alwil Software)
ServerAddress	empty
LastServerAddress	empty
ChestServer	empty
SendInfected	0
InstallGUID	empty
ForbidSetup	0
SendResidentVirus	1	default in Home version
SendClientsVirus	1	default in Home version
CrashAttachmentEmail	setup-support@asw.cz

[Lisandro]

[Server]
SelectTimeout	2	Timeout to select function in miliseconds.
MinimalCacheTime	300	default: 5 x 60
StoreEvents	31	Time (days) to keep events in the server data file
ManageEngines30	0
FlushTimeout	600	default: 10 x 60
StoreSessions	7
EnginesOfflineTimeout	300	default: 5 x 60
ClientsOfflineTimeout	600	default: 10 x 60
Enterprise	empty
iAVSTask	empty
StatusCheckTimeout	180	default: 3 x 60
CheckService	10
OverwriteSettings	30
ServerId	OBJID_SERVER

[Lisandro]

[ODBC]		These settings are for avast! internal use only to communicate between its components.
CompactNeeded	0
DataSourceName	empty
User	empty
Password	empty
Driver	empty	Default empty or Microsoft Access Driver (*.mdb)
Attributes	DSN%1|DBQ%2.mdb|
CREATE_DB	\"%2.mdb\"|
COMPACT_DB	\"%2.mdb\" \"%2.mdb\" General|	MS SQL server section (Network version only)
DataSource	avast	Name of MS SQL instance
Catalog	avast	Name of database to be used from data source
UserId	as
Password	empty
DBCreated	0
ObjectsCreated	0

[Lisandro]

[Version30]
ListenPortAddress	5313	default: 5313. Port address on which the server will listen to version 3.0 clients messages.
RetrySend	1	default
RetryInterval	1	default
Engines	*
ExceptEngines	empty
ResultsTimeout	10
BroadcastTimeout	120	default: 2 x 60
MaxProcessThreads	10

[Lisandro]

[UserInterface]		Enhanced User Interface (Professional Edition)
Version	4.7	Major version information to be showed to the user.
Bitmaps	images
GradientFont	Times New Roman	Font to be used on gradients
ErrorDlgTimeout	10000
RespondTimeout	30
EnableSkins	0
RandomSkinChange	0
StartWithSkin	1	Enable ActiveSkin (an 3rd party library used by avast for skinning). To disable skins (workaround mode), set it to 0.
ShowSplash	1	Corresponds to the settings Scroll session results in the Enhanced User Interface. It really doesn't have anything to do with splash screen when avast starts. To avoid the splash screen when starting avast!, you have to create your own shortcut and start the corresponding real application (ashSimple.exe or ashEnhcd.exe), instead of the splash (ashAvast.exe).
ShowSpecialTasks	0	Show special tasks (Explorer Extension, Screen-Saver, etc.) = 1; Do not show = 0
SplashTestMemory	1	* Do not test memory at startup = 0; Test memory at startup = 1
VPSWarn	3628800	default: (6 * 7 * 24 * 60 * 60)
VPSOld	5184000	default: (2 * 30 * 24 * 60 * 60)
UpdateLink	/i_idt_112.html	Homepage for updates
AutoDelete	-1	Automatically delete sessions after (days): -1 means no auto delete
ResidentBalloonShown	1	Specifies whether the baloon tooltip, displayed only once right after you install avast!, was already displayed or not. Not display (yet) = 0)
ShellExtensionFileName	1	Displays the file name into the Context Menu of Windows Explorer. To hide the filename, use 0
VRDBBalloonShown	1
ShellExtensionIcon	1	If 0, will turn off displaying of the icon next to the avast item in the Explorer context menu; To show = 1
ScrollResults	1
BuyFormXXXX	/i_idt_173.html	Webform to buy avast!
HomePageXXXX	http://www.avast.com	Homepage of avast.
ProInfoXXXX	http://www.avast.com/i_idt_152.html	Webpage for Professional version info.
RegistrationFormXXXX	http://www.avast.com/i_kat_207.php?lang=ENG	Webform to register avast!
SkinsXXXX	http://www.avast.com/i_kat_71.html	Skins page.
SupportXXXX	support@avast.com	Support email.
UserForumXXXX	http://www.avast.com/forum	avast! users forum.
VirusMessage	empty	This entry is the actual message body that will be placed to the SMTP alert messages. The following placeholders can be used in the definition: /n breaks line %1 full path name of infected file %2 name of virus detected %3 name of the avast task that detected the infection %4 version of virus database (VPS file) %5 name of the computer where the infection was detected Example: Something wrong dude!\n\navast (VPS %4) found virus %2 in file %1 (using task %3)\n\nDo something dude!!!

[Lisandro]

[Simple]		Simple User Inferface Options
ShowHelpCheckList	0	Shows the Help Check List at startup = 0; Hide = 1
SkinUseLayeredWindows	512	* Use translucent effects = 512; Do not use = 0
TimeOfLastScan	0	The value is the result of the time() function, i.e. representes the number of seconds elapsed since midnight, January 1st, 1970 until the last full scanning.
iNews_Days	7	Repeated value on [Splash] Section
ExactFontCharsetMatch	0	The value 1 means that the font will be replaced by a system one (Arial), with the correct charset. The characters will be displayed correctly – but the skin will look rather nasty, because the letters are way too big (that's why the custom – very narrow – font is included and the default value is set to 0.
SpaceBetweenLines	2
LineSpace	2
NumberOfLines	6
ToolTipTimeout	550
FileRefreshTimer	400
SkinUseLayeredWindows	0

[Lisandro]

[Quick]		ashQuick Settings
EnableSkins	0	* Enable skins for Explorer Extension = 1; Disable = 0
InfectionExitApp	0	* Exit Explorer Extension when first infected file is found = 1; Do not exit = 0
ShowResults	0	* Show Results of Explorer Extension (scan will be ended with a scan statistics window) = 1; Do not show = 0

[Lisandro]

[InetWD]		Define which Internet connection do you have
Sleep	40000	Default: 40000 (40 seconds)
UpdatePeriod	360	Time (minutes) for update checking. Any value lower than 30 minutes is ignored (both in Home and Profesional versions), i.e., in this case the default value 2 hours (240 minutes) is used instead.
UseRAS	0	If you have a dial-up = 1; If you have a permanent connection (DSL) = 0
RASWaitSeconds	15	Number of seconds to update after a dial-up connection is made.
AssumeAlwaysConnected	0	If you have a dial-up = 0; If you have a permanent connection (DSL) = 1. In Home version default is 0. In Network Edition the default is 1.
AlwaysConnectedWaitSeconds	30	Number of seconds to wait before attempting to update. The default is 30 but it may not be enough in some DSL systems. In this case, you can try increasing this e.g. to 60 (1 minute). That should be enough.

[Lisandro]

[InetWDMirror]
PushDaemonEnabled	1
PushDaemonPop3Server	empty
PushDaemonPop3UserName	empty
PushDaemonPop3Password	empty
PushDaemonPop3Port	110
PushDaemonDeleteMessages	0
PushDaemonInterval	3

[Lisandro]

[MailScanner]		Mail Protection
DefaultSmtpServer	empty	Default SMTP server (Outbound). Replace smtp.server.com by the address of your SMTP server. The values marked as Default are used only when the login name set in the e-mail program does not contain any server address. If the login name for the POP server is, for example, John, the Mail scanner will download the e-mail from the server given by DefaultPopServer value. However, if the login name is John#pop3.server.com, it will connect to the server pop3.server.com and it will download the mail for the user John. The server address (and/or port number) can be entered as a dotted IP address (192.168.1.1) or as a DNS name (oursmtp.domain.com:25).
DefaultPopServer	empty	Default POP server (Inbound).
DefaultImapServer	empty	Default IMAP server (only if you are using IMAP server for incoming mail).
DefaultNntpServer	empty	Default NNTP server.
PopListen	127.0.0.1:110	If you have more than one POP application, configure local host:port number. Write the port number behind the : (colon) character. You can use just the port number: PopListen=:110. The default port numbers are 25 for SMTP, 110 for POP3 and 143 for IMAP. Items SmtpListen, PopListen and ImapListen specify the network interface on which the Mail scanner will accept connections. If you have more than one network card adapter in your computer, you can specify just one needed for the Mail scanner.
SmtpListen	127.0.0.1:25	If you have more than one SMTP application, configure local host:port number
ImapListen	127.0.0.1:143	See SmtpListen above.
NntpListen	127.0.0.1:119	See SmtpListen above.
UseDefaultSmtp	0	If you have more than one SMTP server = 0, in that case, the address of the SMTP server is taken from the login name set in the e-mail program (the address is separated by the character #). You can use the value 0 if your e-mail program supports SMTP authentication or need to set a different login name for SMTP than for POP; if you use just one SMTP server = 1, i.e., all e-mails will be sent using the server given by the DefaultSmtpServer value. You can use the value 1 if your e-mail program does not support SMTP authentication (logging in) or you cannot set a different login name for SMTP than for POP
AutoSetProtection	1	Protect new created e-mail account = 1; Do not protect = 0
ShowTrayIcon	0	Shows an icon during e-mail process = 1; Hide icon = 0
UseAlternateRtfSyncing	1	Another mechanism for inserting notes into the body of emails in Microsoft Outlook. RtfSyncing is concerned with Rich Text Format. In emails, the user typically save both Rich text (HTML) and plain form of message. When you modify one type of message, RTFSync is the right function to synchronize text of message to the second form. Disable = 0.
Log	1	Specifies the level of logging: disable log = 0; basic information (only initial loading info, errors and avast4.ini changes; default) = 1, all the communication data between the Mail scanner and mail servers = 20. Other values between 0 and 20 are not significant. Information is written into AswMaiSv.log file in Avast4\Data\LOG folder
PassThrough	0	Specifies the behavior of the Mail scanner in situations when the message cannot be tested: lets the messages pass through without testing = 1; does not allow any messages to pass through until the resident task is running or paused = 0; will not allow the mail program to connect to a mail Server = any other, different from 1 or 0 (you may encounter error messages from your e-mail program)
Trust	127.0.0.1	Specifies computers that are allowed to access the Mail scanner. Address can be defined by a dotted IP address or DNS name, separated by a comma. A group of IP addresses can be defined as well, in the form of ip-address/number-of-valid-bits. If the Trust item is left blank, it allows access from any address. If you set the Listen items in the form of: 127.0.0.1:Port, the Trust item has no effect, because only connections from the local address (127.0.0.1) are accepted
UseWSAAccept	empty
StartPop	empty
StartSmtp	1	The Start items make it possible to define the protocols that the Mail scanner will be able to protect. Value 1 means that the daemon for the particular protocol will be started and it will occupy the port determined by the value Listen. Using the value 0, it is possible to turn off checking the protocols you do not use. The mail scanner listens permanently because it doesn't know when the mail program begins to download mail. Using the value 0 or a firewall block you will be able to stealth the ports too.
StartPop	empty	See StartSmtp
StartImap	empty	See StartSmtp
StartNntp	empty	See StartSmtp
SmtpRedirectPort	25	avast! bounds (monitors) to the specific(s) port(s) listed here to scan Outbound messages. It does not hook on every connection and heuristic detects if this is a SMTP communication or not. For any change to become effective, restart the Internet Mail provider. Although, it supports multiple ports separated by commas and without blank spaces, for instance: SmtpRedirectPort=25,26
PopRedirectPort	110	See SmtpRedirectPort above.
ImapRedirectPort	143	See SmtpRedirectPort above.
NntpRedirectPort	143	See SmtpRedirectPort above.

[Lisandro]

[MailScanner]		Mail Protection (continued)
PatchBase64	1	There seems to be a bug in Outlook Express, in particular in its Base64 decoder. If a text is aligned (in Base64 format) using the '=' characters (as it should be) and a new piece of text is appended (e.g. when a note is inserted into the incomming message), Outlook Express ignores the alignment - so the inserted part merges" with the previous message body, corrupting it. Using the value 1 sets avast! to append email notes in a different way and could troubleshoot this.
MaxConnections	20	The default concurrent connection limit is 20 (for mail & news together). If the limit was exceeded, you would see the line Closing connection due to MaxConnections into aswMaiSv.log file. This limit exists not to save resources, but to prevent connection looping in strange configurations, so the user can increase it without worry to, for instance, 50. The value 0 disables the limit.
TranslateAddress	0	The mail scanner performs reverse lookup of the mail server IP address to be able to display DNS name. So could be a delay because the email client (program) could take a longer time to log into the mail server. It usually could take more time to negotiate a connection then to download and scan the incoming messages. To disable this feature and increase avast! scanning, set the value to 0.
AutoRedirect	1	This is the automatic mail scanning that makes the configuration process easier. In fact, when the user does nothing but installs avast!, all mail trafic will be protected. There shoud be no double scan if the user have a spam killer because localhost connections are not scanned, i.e, the ones between the email program and the spam killer, unless these connections were explicitly configured. To switch off automatic mail scan, set 0, this should restore the old behavior (version 4.1) of the Mail protection and Mail Protection Wizard. The value AutoRedirect=0 just stops the catching of all outgoing connections. It does not stop the mail scanning service and you should be able to use it normaly as in version 4.1. To check if the avast! Mail Scanner service is running click CTRL+ALT+DEL or by the command: net stop "avast! Mail Scanner"
IgnoreLocalhost	1	This way avast! won't scan the connection to localhost. So whenever your mail client (or any application that scans and edits incoming mail on the local server) connects to 127.0.0.1 it should not be intercepted by avast!. This way, only connections leaving your computer would be scanned - that is when your local SMTP server pulls the mails from remote host.
IgnoreAddress	empty	To ingore scanning of a specific POP3 server (of one email account, for instance) the user should: In Windows 2k\XP: change this option to IgnoreAddress=<your smtp server IP address>, or switch off the transparent mail scanning alltogether and setup the other accounts through Internet Mail Wizard (AutoRedirect=0 option as above). In Windows 98\Me: the user should use the Mail Protection Wizard to remove the protection and then start the Wizard again, choose manual setup and select only the accounts that should be protected.
BurstTransfer	empty	Set 1 to avoid speed degradation of outbound email scanning (troubleshooting or debugging mode). Normal user should let it empty. More info: http://forum.avast.com/index.php?topic=13678.0
SendInBlockingMode	empty	Set 1 to avoid speed degradation of outbound email scanning (troubleshooting or debugging mode). Normal user should let it empty. More info: http://forum.avast.com/index.php?topic=13678.0
IgnoreProcess	empty	Internet Mail provider uses OptOut method of scanning, what means it scans mails from all processes except those listed here and those that are ignored internally. There is no way to include a process that is excluded in the VPS (internally).
Mail Scanner comments		To use and configure more than one application to use the ports 25, 110 and 143 of your computer (for instance, a spam killer). If you have installed another program that uses these ports as well, it is necessary to change the port values for one of them. In the case of Mail scanner, you can do this by setting the items SmtpListen, PopListen and ImapListen. For example: SmtpListen=127.0.0.1:26, PopListen=127.0.0.1:111, ImapListen=127.0.0.1:144. Consequently, it is necessary to set the same port values in your mail program. If you wish the Mail scanner to cooperate with this another SMTP/POP3/IMAP - proxy/server-type program that is installed on your computer, it is necessary to properly set the items DefaultSmtpServer, DefaultPopServer and DefaultImapServer. For example, if you want to configure your system so that the Mail scanner "sits between" your mail program and a spam killer running on the same computer, configure items Listen as above and add: DefaultSmtpServer=127.0.0.1:25, DefaultPopServer=127.0.0.1:110. Known problems: If your e-mail program does not support authentication (logging in) on SMTP server, or it cannot set a different login name for SMTP than for POP (e.g. Eudora), the Mail scanner will not be able to send your e-mails through multiple SMTP servers. In that case, use the UseDe-faultSmtp=1 setting; your e-mails will be sent through a single SMTP server only, just as in avast! version 4.0.235 and earlier. If the internet connection is too slow or the message being sent is too long, it is possible that the period your mail programs waits for the response, expires. A mail program that automatically disconnects after the times elapsed is not able to send such a message. This error will not be corrected, due to the characteristics of the SMTP protocol. It is necessary to set the interval to the highest possible value. When downloading a long message from a POP3 server, messages about timeout expiration should be eliminated. But it is still recommended to set this interval to the highest possible value, too. If your mail program downloads the message text and attachments separately from IMAP server (e.g. Eudora), no additional information will be put into the header or the text of the message. The checkbox "Insert note into clean message" on the "IMAP" page of the Internet Mail configuration will not work in that case. The Mail scanner does not support SSL (TLS) connections.

[Lisandro]

[AAVM]
DefaultResTask	*DefTask0
CheckFloppies	0	* Check floppy disks in drive when logging off = 1; Do not check = 0
CheckCDRom	0	* Check CD's in drive when logging off = 1; Do not check = 0
CheckRemovables	0	* Check other removable media when logging off = 1; Do not check = 0
SuppressUpdatedInfo	1	* Suppress the small blue info window (panel) in the notification area of your desktop on updating; Show it = 0
SuppressUpdateErrorInfo	1	* Suppress update error message (not the update itself) = 1; Show it = 0
SuppressExpirationWarning	0
NeverShowInfo	0
LogDiskChanges	0
LogStart	0
GradientStepMsg	20
GradientStepInfo	50
TagOpacity	100	Semi-transparent feature of avast! On-access scanner (if Internet Mail Provider is configured to "Show detailed info on performed action". The number represents a percentage: 100 is fully visible and 0 is fully transparent. A reboot may be required for the changes to take effect.
ShowTaskbarIcon	1	Show the main program system tray icon; Hide icon (suppress) = 0
ShowVirusTag	1	Avoid the displaying virus advice (yellow/red layer that pops up when a virus is found); Show it = 1. A reboot may be required for the changes to become effective.
AnimateIcon	1	Avoid the spinning of the system tray avast! icon.
GracefulRpcShutdown	1	With Windows 9x this option could troubleshoot the shutdown problems.
EventLogAnalysed	1
ShowChestInMenu	0	Set it to 1 to show a Chest entry into the context menu of the system tray icon.

[Lisandro]

[AAVM]		AAVM section (continued)
Msg Group		This group of values to change the colors of the info messages were built by Igor and will be supported only in the next build of avast (they are not supported right now (build 4.1.396), so we have to wait for the next program update). All the colors are entered as a number. If you have the color expressed as RGB, each component in the range 0..255, the formula for the color number is color = 65536*B + 256*G + R. In other words, the color is expressed as a decimal number whose hexadecimal representation is 00BBGGRR. Note: no checking is performed on the entered values, so using them is on your own risk. I believe that the worst that can happen is that you won't see anything (e.g. when using a black text on a black background), but I warned you. Unfortunatelly, it's not possible to test the colors anyhow (so you'll have to rely on your guesses). For the changes in the ini file to take effect, a reboot is required (or at least restart of ashDisp.exe on WinNT/2k/XP). If any of the values is not present in the ini file (which is the default), the default values are used by the pro-gram.
MaxMessages	10	Number of lines of the messages.
ShowTime	4	Time (in seconds) of the duration of all the on-access scanner screen messages (email, News, Web Shield, Standard Shield, etc.)(
TagDontShowNextTime	0
		The values for the messages (e.g. the items displayed when Show detailed info on performed action) are described bellow:
MsgTitleBkgColor1	empty	Initial color of the titlebar background
MsgTitleBkgColor2	empty	Final color of the titlebar background (a gradient is formed: initial color... final color)
MsgTitleTextColor	empty	Color of the titlebar text
MsgInfoBkgColor	empty	Color of the message background (simple info message)
MsgInfoTextColor	empty	Color of the message text (simple info message)
MsgHighBkgColor	empty	Color of the message background (high priority message)
MsgHighTextColor	empty	Color of the message text (high priority message)
MsgFatalBkgColor	empty	Color of the message background (fatal error)
MsgFatalTextColor	empty	Color of the message text (fatal error)
MsgFontSize	empty	Font size for the usual messages
		The values for the Info screens (e.g. the blue square saying that Program update is available) are described bellow:
InfoEmergencyTitleBkgColor1	empty	Initial color of the background for emergency messages
InfoEmergencyTitleBkgColor2	empty	Final color of the background for emergency messages
InfoEmergencyTextColor	empty	Text color for emergency messages
InfoNormalTitleBkgColor1	empty	Initial color of the background for normal messages
InfoNormalTitleBkgColor2	empty	Final color of the background for normal messages
InfoNormalTextColor	empty	Text color for normal messages
InfoTitleColor	empty	Title text color
InfoFontSize	empty	Font size for the Info screens
InfoTitleFontSize	empty	Font size for the Info screens titles An example: to set the titlebar text color of the Show detailed info on performed action messages to green, use MsgTitleTextColor=65280. When green is 000 255 000, the formula says color = 65536*B + 256*G + R = 65536*000 + 256*255 + 000 = 65280. So, for "pure colors" it's Red = 255, Green = 65280 and Blue = 16711680. Igor's default avast settings: after some digging in avast! sourceshere are the default values of the AAVM message colors. When I checked them, I discovered some errors in the "high priority" and "fatal" messages (the colors were read from an incorrect key) - it will be fixed in the next version. Note that the default colors may change in the future (unlikely, I'd say, but possible). MsgTitleBkgColor1: RGB(0, 84, 227) MsgTitleBkgColor2: RGB(61, 149, 255) MsgTitleTextColor: RGB(255, 255, 255) MsgInfoBkgColor: GetSysColor(COLOR_INFOBK) MsgInfoTextColor: GetSysColor(COLOR_INFOTEXT) MsgHighBkgColor: RGB(0, 0, 0) MsgHighTextColor: RGB(255, 255, 255) MsgFatalBkgColor: RGB(255, 255, 0) MsgFatalTextColor: RGB(255, 0, 0) InfoEmergencyTitleBkgColor1: RGB(200, 0, 0) InfoEmergencyTitleBkgColor2: RGB(255, 0, 0) InfoEmergencyTextColor: RGB(255, 255, 140) InfoNormalTitleBkgColor1: RGB(0, 84, 227) InfoNormalTitleBkgColor2: RGB(61, 149, 255) InfoNormalTextColor: RGB(160, 255, 255) InfoTitleColor: RGB(255, 255, 255) S.Z.Craftec’s example: MsgTitleBkgColor1=10240 (dark green) MsgTitleBkgColor2=65280 (green) MsgTitleTextColor=16777215 (white) MsgInfoBkgColor=11862015 (light yellow) MsgInfoTextColor=0 (black) MsgHighBkgColor=65535 (yellow) MsgHighTextColor=0 (black) MsgFatalBkgColor=255 (red) MsgFatalTextColor=16777215 (white) InfoEmergencyTitleBkgColor1=40 (dark red) InfoEmergencyTitleBkgColor2=255 (red) InfoEmergencyTextColor=16777215 (white) InfoNormalTitleBkgColor1=10240 (dark green) InfoNormalTitleBkgColor2=65280 (green) InfoNormalTextColor=16777215 (white) InfoTitleColor=65535 (yellow) More details here.