Author Topic: Avast Secure Browser making suspicious connections  (Read 751 times)

0 Members and 1 Guest are viewing this topic.

Offline winxpuser

  • Newbie
  • *
  • Posts: 1
Avast Secure Browser making suspicious connections
« on: January 11, 2022, 10:21:01 AM »
I have been using Avast Secure Browser and Avast Ultimate for a few months now, and recently noticed that the browser makes some quit suspicious connections during start-up.

This seems to happen everytime and just for a very short moment, I managed to capture the data through TCPView (https://docs.microsoft.com/en-us/sysinternals/downloads/tcpview)

AvastBrowser.exe   15148   TCP   50125   mail.bestgfe.ch   8989   SYN_SENT                              
AvastBrowser.exe   15148   TCP   50126   unassigned.psychz.net   8989   SYN_SENT                              
AvastBrowser.exe   15148   TCP   50138   7042-26762.bacloud.info   8989   SYN_SENT                              
AvastBrowser.exe   15148   TCP   50147   cs2874.mojohost.com   8989   SYN_SENT   

I have not additional extensions installed and am using all default settings without any sync. These websites have also never been visited by me before. The top link seems to be a shady pron site?

Curious if to see if there has been some kind of security breach on my side, or this is related to any of the default extensions?      

Diagnostic info:                     
 
Quote
executable_path=C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe
profile_path=C:\Users\[redacted]\AppData\Local\AVAST Software\Browser\User Data\Default
os_version=Windows 10 v21H1 (x64)
av_engines=Avast Antivirus, AMSI - Avast IAntimalwareProvider implementation
active_av_engine=Avast Antivirus
av_version=21.11.2500
urlscanner_version=1.9.0.367
mimic_version=v0.1.17-46c12c3
host_prefix=
browser_version=96.1.13589.111 (Official Build (64-bit))
cgid=365
cid=3515
uid=db897bcb6d4f42768f9fa098905330bc

Channel: stable
OS language: en-us
Browser language: en-US
Search Engine URL: https://www.google.com/search?client={google:client}&q={searchTerms}&{google:originalQueryForSuggestion}{google:assistedQueryStats}ie={inputEncoding}
Omaha version: 1.8.1189.1

Enabled extensions:
ahfgeienlihckogmohjhadlkjgocpleb : Web Store : 0.2
beghmmhchncjignfbfnemngnlnjdmbcb : Avast Anti-Fingerprinting : 2.5.181
dmfdacibleoapmpfdgonigdfinmekhgp : Avast SecureLine VPN : 1.5.1.839
ekmkelgimdicdgkflkakgmjcghgpdnji : Messaging : 1.11.0.341
kmediagceboldddnnajkcochbkfkedel : Avast Anti-Tracking : 1.23.0.675
kmendfapggjehodndflmmgagdbamhnfd : CryptoTokenExtension : 0.9.74
lhnnoklckomcfdlknmjaenoodlpfdclc : Avast Bank Mode : 1.3.0.52
mecokbmnofclapimmlnfegiohceoaocc : Avast Performance Manager : 1.2.220
mhjfbmdgcfjbbpaeojofohoefgiehjai : Chrome PDF Viewer : 1
nkeimhogjdpnpccoofpliimaahmaaome : Google Hangouts : 1.3.16
nmebbcjdbhgggcgohlnlgadkmjiedfbc : Avast Hack Check : 1.2.341
ooeobdingfeedklanlfcjhffgennflke : Avast Adblock : 2.7.164

Disabled extensions:
« Last Edit: January 11, 2022, 10:24:24 AM by winxpuser »

Offline Asyn

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 75587
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Avast Secure Browser making suspicious connections
« Reply #1 on: January 11, 2022, 11:43:10 AM »
W8.1 [x64] - Avast PremSec 22.5.7263.B [UI.706] - Firefox ESR 91.9.1 [NS/uBO/PB] - Thunderbird 91.9.1
Avast-Tools: Secure Browser 101.0 - Cleanup 22.2 - SecureLine 5.18 - Driver Updater 22.2 - CCleaner 6.0
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0