Author Topic: Avast infected???  (Read 9612 times)

0 Members and 1 Guest are viewing this topic.

Olivier-1

  • Guest
Avast infected???
« on: July 06, 2004, 12:06:55 PM »
I detected that dll installed by avast try to send icmp echo request to: web.nextra.cz and to rs04.avast.com.
I stopped avast and exit the application, but it still try to reach these IP addresses.
What happen?
I have also deselected all automatic update without any change.
I have the version 4.1.396.
Is it possible that Avast has been infected, and is used as a backdoor???

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Avast infected???
« Reply #1 on: July 06, 2004, 01:05:59 PM »
eeerrrrmmmm ever thought that Avast need to connect to a server to see if there are updates?

Olivier-1

  • Guest
Re:Avast infected???
« Reply #2 on: July 06, 2004, 01:13:16 PM »
Why not? But not when it is expected to be down (stop resident and exited), and even not when the check box to update automtically is unchecked.
I have also a pb to access google (and it seems also only google) this why I suspect something else ...

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re:Avast infected???
« Reply #3 on: July 06, 2004, 01:50:15 PM »
I have the version 4.1.396.
Is it possible that Avast has been infected, and is used as a backdoor???

I don't think so...  ;)
But, it would be better if you update to 4.1.418 and run a full scan.
You can also run an on-line scanning (www.trendmicro.com)  8)
The best things in life are free.

Olivier-1

  • Guest
Re:Avast infected???
« Reply #4 on: July 06, 2004, 06:28:10 PM »
So, I hava two questions:
1) Why avast is still up, when we request it to stop and exit?
2) how to avoid avast to try to connect on several outside systems when it is up?

Thanks in advance

Staind

  • Guest
Re:Avast infected???
« Reply #5 on: July 06, 2004, 07:08:21 PM »
You can use Rejzor's program: http://freeweb.siol.net/razor256/downloads/avast_external_control.zip to completely shut off Avast!

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re:Avast infected???
« Reply #6 on: July 06, 2004, 07:28:23 PM »
So, I hava two questions:
1) Why avast is still up, when we request it to stop and exit?

There are processes and services that cannot be stoped without affecting the system behavior (for instance, the email service, if stopped, will avoid you to receive or send any email). You can uninstall avast or, for a moment, like Staind said, use RejZoR's application (download at the 'Control' link on my signature).

2) how to avoid avast to try to connect on several outside systems when it is up?

Configure it to manual update (both program and virus database).
Or, by a hard way, deny access through your firewall.
The best things in life are free.

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:Avast infected???
« Reply #7 on: July 06, 2004, 08:05:42 PM »
You can stop the avast antivirus service (Control Panel -> Administrative Tools -> Services) to completely suppress its functionality, including the auto-updater.
If at first you don't succeed, then skydiving's not for you.

Olivier-1

  • Guest
Re:Avast infected???
« Reply #8 on: July 07, 2004, 02:02:36 PM »
It's what I did, without effect. The attempt to connect to avast.com and all, are still continuing.

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48568
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re:Avast infected???
« Reply #9 on: July 07, 2004, 02:30:05 PM »
Olivier-1
Did you re-boot after you made the changes?
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:Avast infected???
« Reply #10 on: July 07, 2004, 05:48:05 PM »
Quote
It's what I did, without effect. The attempt to connect to avast.com and all, are still continuing.


You stoped the avast service in the control panel and yet received a firewall warning? Which application was accessing the internet, then, if not the avast service??? (ashServ.exe)
If at first you don't succeed, then skydiving's not for you.

Olivier-1

  • Guest
Re:Avast infected???
« Reply #11 on: July 07, 2004, 07:14:58 PM »
OK, after reboot, there is no more connection attemp.
But if I start again avast say it to be resident without update (I did it manualy some minutes sooner) and then reboot, I still have avast which tries to connect.

Also what is the interest to have the choice to manualy update avast if it doesn't care :-(

Avast it a good product against the virus, but still need some improvement to be more flexible.
Example, I don't want it to scan my emails, so I need to stop it and reboot my PC before being able to get my emails grrr....

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re:Avast infected???
« Reply #12 on: July 07, 2004, 10:32:48 PM »
Also what is the interest to have the choice to manualy update avast if it doesn't care :-

I posted the answer on reply #6  :-\
Configure your Connections (basic and advanced) tabs of settings.

I don't want it to scan my emails

Do you have any other antivirus in your system?
email is the most spreading way of viruses nowadays  8)
« Last Edit: July 07, 2004, 10:40:13 PM by Technical »
The best things in life are free.

CharleyO

  • Guest
Re:Avast infected???
« Reply #13 on: July 09, 2004, 06:36:35 AM »

If you have some other anti-virus program on your computer, there will be a conflict. This means avast! will not work correctly ... and quite possiblely neither will the other av program.    :(  

Stop scanning email? Why would you want to do this? As Technical said, this is the main way you will get virus infections. Not scanning email is just asking for trouble!    :o  



Olivier-1

  • Guest
Re:Avast infected???
« Reply #14 on: July 11, 2004, 03:45:35 PM »
Stop scanning email? Why would you want to do this? As Technical said, this is the main way you will get virus infections. Not scanning email is just asking for trouble!    :o  
Don't worry about that. I don't use any MicroS email as outlook, and so do not have risk to get virus from there. Furthermore I don't open any attached exe,pif, ....

On the other hand, I do not accept that my antivirus forbiden me to get my email, only because I don't want it to scan the emails  
 >:(