Author Topic: Avast! detected unauthorized modification...  (Read 7446 times)

0 Members and 1 Guest are viewing this topic.

badkilla

  • Guest
Avast! detected unauthorized modification...
« on: March 26, 2006, 12:33:58 AM »
Hello  8)


I'm a french user of avast 4.6 home edition with key entered !!!

Althought I reinstall several times this log. I usually have this message when my computer start :

"Avast! detected unauthorized modification of this file : ashDisp.exe [...] run anyway : yes or no ?"

Do you know this problem ?

Is it an important file ?

Have you got a solution ?

Thanks  ;)

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: Avast! detected unauthorized modification...
« Reply #1 on: March 26, 2006, 01:01:03 AM »
Do you have any other security programs that monitor/block new startup entries ?
e.g. WinPatrol, Spybot S&D, AdAware, etc. if you have you should temporarily disable them and reinstall avast.

It is important in that it puts an icon on the system trat and is the interface to the avast resident provider settings.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

badkilla

  • Guest
Re: Avast! detected unauthorized modification...
« Reply #2 on: March 26, 2006, 01:14:22 AM »
Thanks for your answer...

It's very strange because Avast seems to work like usual. icon is present and active  ???

Yes I have several others protections like :

Spybot
Kerio Firewall
CCleaner
a² a-squared

I will try to disable them and reinstall avast !!!

See you...

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: Avast! detected unauthorized modification...
« Reply #3 on: March 26, 2006, 01:44:38 AM »
It would be working if as you indicate you don't allow the change to happen thus ashDisp.exe doesn't get changed.

Spybot Plus or something like that has a resident element that monitors/blocks startup entries, check and see if this isn't trying to change the startup entry somehow.

Kerio, ccleaner are unlikely to be the culprit, I don't know anything about a-squared so I can't say it isn't a possible.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

CharleyO

  • Guest
Re: Avast! detected unauthorized modification...
« Reply #4 on: March 26, 2006, 03:22:43 AM »
***

It's called Spybot Teatimer. An Englishman should be able to remember that one!    ;)  ;D  8)

Welcome to the forums, badkilla.    :)

Teatimer's warning box is much different than the ones from Avast so there should be no confusion there. Can you take a screenshot of the warning next time you get it and post it here?


***

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: Avast! detected unauthorized modification...
« Reply #5 on: March 26, 2006, 03:17:20 PM »
No I know about TeaTimer, I just don't know what version of S & D it comes with S&D Pro/Plus/other ??? ;D it isn't available in the free version.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

badkilla

  • Guest
Re: Avast! detected unauthorized modification...
« Reply #6 on: March 26, 2006, 04:47:48 PM »
hi

I don't understand what your answer...

It means the alert have got is not issued from avast ?!?

What is "Spybot Teatimer" ?

It's a bug from avast or a worm which is not detected by spybot !?

Have a look to my screen shot :



Very strange  ???: Avast is installed in French but alert is in english...

Thanks everybody  ;)
 
« Last Edit: March 26, 2006, 04:57:44 PM by badkilla »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: Avast! detected unauthorized modification...
« Reply #7 on: March 26, 2006, 05:13:39 PM »
It certainly looks like it does come from avast, although I have never seen this previously.

TeaTimer is a resident element of Spybot S&D if you don't know what it is you are unlikely to be running this, it isn't part of the free Spybot S&D.

That is strange English Text and French buttons.

I would do roughly as you suggested, uninstall avast, reboot, if you have any resident element to Spybot S&D disable it and also disable a-squared. Install avast, reboot.

If you have winXP I would suggest downloading Ewido Security Suite, I think it is better than a-squared and run it, preferably in safe mode.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: Avast! detected unauthorized modification...
« Reply #8 on: March 26, 2006, 07:39:13 PM »
Update, sorry badkilla the TeaTimer is a part of the free version of S&D also, it is in the Tools Section, Resident, ensure the TeaTimer box isn't ticked, see image. It could be what is trying to effectively block/change the ashDisp.exe startup entry.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

badkilla

  • Guest
Re: Avast! detected unauthorized modification...
« Reply #9 on: March 26, 2006, 10:43:15 PM »
I found this option but it's not ticked !!!

I can see a new message : modification of an another file.

That's very strange !

I just hope Avast working well...

Thanks

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: Avast! detected unauthorized modification...
« Reply #10 on: March 27, 2006, 12:25:59 AM »
Well we have to try and identify what is doing this, what is the other file being modified ?

Also useful as a diagnostic tool - Download HiJackThis.zip - HJT Information HiJackThis Tutorial 1 or HiJackThis Tutorial 2
For an on-line analysis - HiJackThis Log file - On-line Analysis OR HiJackThis Log file - On-line Analysis 2
Ignore any 023 reference to avast processes, this is a hiccup in the HJT 1.99.1 (especially missing file entry for avast), if you need any help with any of the analysis let us know.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline MikeBCda

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2247
Re: Avast! detected unauthorized modification...
« Reply #11 on: March 27, 2006, 09:36:14 PM »
TeaTimer is a resident element of Spybot S&D if you don't know what it is you are unlikely to be running this, it isn't part of the free Spybot S&D.
Actually it is included in the free version, or at least I've got it.  Is available, that is -- I disabled it because of incompatibility with too many other things.
Intel Atom D2700, 2 gig RAM, Win 7 x64 SP1 & IE-11, Firefox 51.0
(default). 320 gig HD, 15Mb DSL, Win firewall, Avast 12.3.2280 free, SpywareBlaster, MBAM Prem., Crypto-Prevent

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: Avast! detected unauthorized modification...
« Reply #12 on: March 27, 2006, 10:55:22 PM »
Update, sorry badkilla the TeaTimer is a part of the free version of S&D also, it is in the Tools Section,
Yes it is CharleyO PM'd me and I corrected my error ;D
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

badkilla

  • Guest
Re: Avast! detected unauthorized modification...
« Reply #13 on: March 28, 2006, 01:59:35 PM »
hi !

I put my windows Pro SP1 in SP2 with windows Update. Still using Firefox...

I boot my computer in safe mode (disable system restore before) and run a scan with spybot, Ccleaner, a-squade a², ... nothing !!!

I made several on line scan but nothing !!!

... and I have installed a new program : SpywareBlaster  ::)

I put the lastest version of avast 4.6.763 and now I have two more alerts :





I'm really disappointed and I will try this famous "HiJackThis" with on-line analysis.

Rhaaaaaaaaaa

see you later  ;)

 
« Last Edit: March 28, 2006, 03:18:12 PM by badkilla »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: Avast! detected unauthorized modification...
« Reply #14 on: March 28, 2006, 03:49:51 PM »
On the forums when we suggest installing SpywareBlaster (which I don't see in this thread), we usually advise not to install it until your system is clean which is uncertain.

Have you not tried Ewido, I gave a link to that some time ago and I feel it is better than a-squared.

You may well be better off doing a clean install of avast and watch for any program interaction when you reinstall it.

First download the latest version of avast and save it to your hard disk. Download the avast! Uninstall Utility, find it here.
Uninstall avast, reboot, run the avast uninstall utility, reboot, install the latest version of avast that you downloaded, reboot.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security