automatic update

[naren17]

avast says virus database updated when not connected to net. today i started the system and i have to login to connect to net but avast said it updated the virus database though i was not connected to net. any info??

regards
naren

[DavidR]

Well it can't possibly update without a connection being present, if it has been updated then it would show the new virus definitions in the about avast or avastUI, Maintenance, Update section ?

[naren17]

ya it showed updates 1 min ago and was updated. strange but true.

[DavidR]

So a connection was present, I don't know how you connect or why 'you' "have to login to connect to net," but avast operates at a different level to the User as it covers all users and not just the user that is logging on.

[Hermite15]

avast says virus database updated when not connected to net

cool I always knew they would make it

[Rick F]

I posted about this a couple of months ago.  Igor responded that you don't have to be logged in for Avast 5 to update as it is a service that can be loaded before you're actually logged in.  BUT, you do have to have an internet connection to update. I know my internet is connected before I actually log in.

Here's a link where I posted:
avast updates before logging on?

Igor wrote... avast! service is running under LOCALSYSTEM account - and as other automatically started services, it runs before the user logs on. So yes, it doesn't need anybody to be logged on to perform an update.

[naren17]

So a connection was present, I don't know how you connect or why 'you' "have to login to connect to net," but avast operates at a different level to the User as it covers all users and not just the user that is logging on.

my internet connection is pppoe connection. so i have an icon on the desktop of my isp. i have to double click it, enter the username and password and click on connect to connect to the net. but avast said it updated the database when i was not logged in i.e not connected to net.

regards
naren

[DavidR]

Yes, I understand what you are saying, that for you on that windows user account have to log on to connect, but somehow avast using the LOCALSERVICE account doesn't have to do that.

So that would appear to be a loophole in the pppoe security is any account can gain access without having to log-on, as this could also happen for malware using privilege escalation (if such a beast were to get on to your system undetected). Unfortunately I have no idea how you would go about tightening the pppoe security of your router/modem.

[naren17]

but if i try to update avast manually when i am not connected to net avast give me connection error. so how can avast update automatically and not manually when i am not connected to net if there is any pppoe loophole and avast using the local service account.

[DavidR]

Yes, but you aren't operating at the same permissions level. I haven't got the slightest idea how your routers pppoe works (I don't have broadband or a router), but the simple fact is there in front of you avast can update before you logon and the pppoe doesn't get in the way.

For me that is a loophole, unfortunately I have no idea how to close it as if avast on a higher permissions level can get through it so too could malware with escalated privileges.

[naren17]

i dont have any router and i am directly connected to net with no modem too (the isps net wire is directly connected to my machine). only one single admin user here, no other account. well i am not an experienced user. i posted this things here coz i find it strange. anyway thanks for the explanation and all the info. i think i shouldn't worry about this thing and it is not a prob for me, right??

[DavidR]

I don't know how that works, how an ISP connects directly into your system it beyond me as to me there has to be some interface.

I don't know this system so I have even less knowledge of how it works than you, all I do know based on what has been said in this topic is there is a loophole in that pppoe system if avast can get through without having to logon (and you can't), so too could malware.

If you don't have any router (and I really find this hard to understand) then it is possible that the ISP has direct access to your computer as there is no router to block outside access and the same could be true of malware access from outside.

[SafeSurf]

naren17, based on what you are telling us in that you do not have a router and that your ISP is wired into your PC without your modem, I strongly suggest that you have a strong firewall in place on your PC for your protection.

I've never heard of such a set up either, but a firewall will at least protect you.