Author Topic: Why is AvastUI.exe unkillable and why is it freezing everything it touches?  (Read 1891 times)

0 Members and 1 Guest are viewing this topic.

Offline New_Style_xd

  • Sr. Member
  • ****
  • Posts: 397
Okay my friend, when you get results from Avast support, come here on the forum and comment on everything that happened to you with support.
OS: Windows 10 PRO / Intel(R) Core(TM) i7-6500U CPU 2.60 GHz.
Real Time: Avast Premium Security: 24.2.6104 (compilação 24.2.8904.819) IU: 1.0.799
Moble: Avast Security: 24.3.0-1004091
VPN: Avast SecureLine VPN: 5.29.9498
On Demand: Malwarebytes: 4.6.9.314

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37629
  • Not a avast user
Quote from: DavidR
Not sure why it is that you feel the need to scan it  ?
What is the name of this program ?

If you downloaded this file, it should have been scanned by the Web Shield and also by the File System Shield if you ran it.

You could also try to upload the file or submit a link to VirusTotal of its online location - https://www.virustotal.com
Quote from: Sin Shadow Fox
I always scan files from websites i don't know well. Call it force of habit. The name of the file is isumsoft-pdf-password-refixer


When you download from the Web, first the Web Shield scans the site and contents.  Secondly when the file is saved to the hard disk the File System Shield should also scan it.  If Avast considered it malicious/infected, I would have expected it to have Alerted at that time.

Also as you see from the VT results this .zip file isn't detected - https://www.virustotal.com/gui/url/93d99d0790b6f5a520487c94cc7fd6b6203e1505939a9411c0468e03dd7cca72 - by any of the scanners

I downloaded the .zip file and uploaded that and only one scanner thought it Adware, which in itself isn't malware.
https://www.virustotal.com/gui/file/05a4cf53ced9e928700cfbdf7e8a45dd590007f5756d7e5a6371bf90a66f09f0
The VT URL scan was 1 year old, the VT file scan you provided was 2 months old (i have refreshed) Always use the Reanalyze button for a fresh result.

The scan result is the same, and since no other AV vendor has added detection in that time that indicate a FP from VBA32, also consider that the detection from VBA32 could be for the zip container and not the file inside

The file you uploaded is a zip file, meaning all the info found at the "details" button is for the zip container and not the file inside
so you can not see the correct hash, file type, when it was made, first uploaded, who made it...................

So for correct file details upload the file inside the zip

« Last Edit: January 27, 2024, 10:52:52 AM by Pondus »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37629
  • Not a avast user
Quote from: DavidR
Not sure why it is that you feel the need to scan it  ?
What is the name of this program ?

If you downloaded this file, it should have been scanned by the Web Shield and also by the File System Shield if you ran it.

You could also try to upload the file or submit a link to VirusTotal of its online location - https://www.virustotal.com
Quote from: Sin Shadow Fox
I always scan files from websites i don't know well. Call it force of habit. The name of the file is isumsoft-pdf-password-refixer


When you download from the Web, first the Web Shield scans the site and contents.  Secondly when the file is saved to the hard disk the File System Shield should also scan it.  If Avast considered it malicious/infected, I would have expected it to have Alerted at that time.

Also as you see from the VT results this .zip file isn't detected - https://www.virustotal.com/gui/url/93d99d0790b6f5a520487c94cc7fd6b6203e1505939a9411c0468e03dd7cca72 - by any of the scanners

I downloaded the .zip file and uploaded that and only one scanner thought it Adware, which in itself isn't malware.
https://www.virustotal.com/gui/file/05a4cf53ced9e928700cfbdf7e8a45dd590007f5756d7e5a6371bf90a66f09f0
What about the ones at the bottom that couldn't be scanned?
Some of the engines at VT does not target all file types ... there may be engines that dont unpack and scan inside zip, there may be engines that only target files for mobile phones..........

Malwarebytes have program for android, Mac, Windows but the engine at VT only target windows files

Bitdefender have 3 engines at VT Bitdefender / Bitdefender Theta / Bitdefender Falx

Bitdefender Falx
This engine is specialized in Android and reinforces the participation of Bitdefender that already had two engines in our service, their multi-platform scanner (BitDefender) and a 100% machine learning engine (BitDefenderTheta). In the words of the company:




« Last Edit: January 27, 2024, 10:54:13 AM by Pondus »

Offline Sin Shadow Fox

  • Jr. Member
  • **
  • Posts: 41
  • blarg
Okay my friend, when you get results from Avast support, come here on the forum and comment on everything that happened to you with support.
So i contacted Avast support and unfortunately they did not have a way to kill the process so i had to restart my computer (much to my chagrin) so everything is working now. They also explained to me that all those things in Virustotal were not files but places scanning the same file so now your "majority" comment makes sense to me (i was confused before). Thank you for your help and advice.
No Man Left Behind!

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48679
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
"Files that can't be scanned" - The explanation comes from 2014 but is still viable today.
https://blog.avast.com/2014/02/28/how-do-i-handle-files-that-avast-cant-scan/
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v24H2 64bit, 32 Gig Ram, 1TB SSD, Avast Free 24.4.6112, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet