Avast Connecting to the internet, Update server running

[mahhhh]

Hi.
I have Avast home free 4.8.
I have it set only for Internet Mail scanning for my Outlook Express.
And Standard shield to detect a virus if it gets onto the computer.
I do not have Web shield or Network shield running as I have other programs to deal with this.
There is a process called ashServ.exe that wants to connect to these ip's.
174.133.30.202+(42)
Which comes up to the planet internet services in Texas.
Which is according to this page.
http://download912.avast.com/iavs4x/servers.def
An avast download server.
Please explain why ashServ wants to connect to the internet when I start the computer.
Currently, I am blocking it from doing so.
I do not want it, or need it connecting to anything.

I have auto update OFF, yet there is still a process running called aswUpdSv.exe.
I don't want this running.I want to update it when I want to.
When I try and terminate aswUpdSv.exe, it says "Access denied".
Please explain how I stop this unnecessary process from running.

Thankyou for your time.

[mahhhh]

Update.
When I try and disable the avast web scanner from loading on startup.
In MsConfig.
It gives me an access denied error and avast gives an alert about writing the reg entry to prevent the webscanner from running.
It says perhaps I should log on as administrator.
Yet I AM the administrator?

[DavidR]

Yes it will as the self-defence module wonlt let you do it, Program settings, Troubleshooting.

However, I have to say you are making a mistake (IMHO) regardless of what program it is that you say does that job ? You only have to see some of the posts in the viruses and worms forum to see that the web shield virtually own the latest fast spreading threat, hacked web sites. There are very few AVs that are up to speed on this threat.

The network shield is also there to block access to malicious sites and is very effective at this also, not to mention it is very light on resources. Looking at my Scanned count: it shows it has scanned 3269 URLs against its malicious sites database.

If you are determined to cripple avast's best form of defence stopping it get on your system in the first place, then using MSCONFIG isn't the way to go, just Terminate the Web?Network Shield Provider/s and answer Yes to the question and they won't start again, no need for msconfig.

I have to say I think it is crazy, but your system, your choice.

[Lisandro]

ashServ.exe sends ping packets to find out if the Internet connection is alive. You can turn this off by checking the "My computer is permanently connected to the Internet" box in the avast Program Settings > Update (Connections) page.

[mahhhh]

Why would ashserv need to send packets anywhere?
As I stated, I have nothing on in avast that would require internet connectivity except the mail scanner which is allowed and works fine.
Here are the four processes Avast has running.
I find it rather odd, it would need to connect to the internet.
If I have nothing on requiring it to.

ashDisp.exe what is this for?

ashMaiSv.exe internet mail scanner

ashServ.exe what is this for?

aswUpdSv.exe updates, I have them turned off, why do I need this running?


Why do I need ashServ running when I don't use the web or network scanner?
There is over 1000 blocked firewall events in the last 2 hours from this thing trying to contact the internet.

[Lisandro]

Why would ashserv need to send packets anywhere?

To update.

ashDisp.exe is the icon on system tray.
ashServ.exe is antivirus engine (the resident protection service). It's needed for avast to be running.
You need aswUpdSv.exe to update from a non-admin user.

[mahhhh]

Ok thanks so I am the admin so how can I turn it off?
And now today, it has added another process running that appears and disappears.
AshSimpl.exe
What is that for why is it required to have 4-5 process running?

[Lisandro]

Ok thanks so I am the admin so how can I turn it off?

To temporarily disable the avast self defense module:
1. Right click the 'a' blue icon on system tray.
2. Programs settings > Troubleshooting (tab)
3. Disable self defense module
4. Turn it own later (it is required to avast to be protected against anti-antivirus malware).

AshSimpl.exe is the avast antivirus simple interface (SUI).