Help! Avast cannot connect to the server to update!

[desseurat]

I have not been able to update Avast! for a few days now, and it's worrying me sick. In the days following the malfunction, windows defender discovered a trojan (that avast did not), and I have been getting the following error.

RunDLL

There was a problem starting C:\Windows\system32\config\systemprofile\Appdata\Local\eduvikki.dll

Access is denied

[ Ok ]

Are these things related?

I tried letting avast pass through the windows firewall, repair it, reinstall it, nothing is working, so I'm removing the network cable until I find a solution. I just bought a windows 7 studio xps 9000, and I do not want to see it brought to its knees before it's a year old.

[desseurat]

also, avast shows this message:

Last encountered error: cannot connect to a868sl.avast.com (174.36.159.206:80)
Total time: 1:01

[DavidR]

Well that file name appears to have been randomly generated as the only hits are on this forum, not something I would expect even with it in a sub-folder of system32.

You don't say what WD found (malware name and file name) and where (folder), etc. which would helped a lot ?

I suspect it may have been the same, and it hasn't removed the registry entry trying to start this file so you would get an error. I certainly think this file may have been malicious, but I don't know if it has anything to do your inability to update, which I think is more likely to be firewall blocking.

What happens if you try a manual update ?
What avast version are you using 4.8 or 5.0 ?

I will assume avast5 for these instructions:
What is your firewall ?
Does it allow avast.setup internet access ?
- If it does delete the entry for it and do a manual update, this should force the firewall to ask permission again.

[desseurat]

I am using Avast! 5.0, and Windows Firewall for my current firewall. I cannot find avast.setup to let it through the firewall

I will list all virus attacks recorded by Windows Defender

7/26/2010 3:25PM
Trojan:Win32/Hiloti.gen!D
Resources:
file:C:\Windows\sysWOW64\config\systemprofile\AppData\Local\eduvikki.dll
regkey:HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\Fyecifopawuq
runkey:HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\Fyecifopawuq

7/26/2010 12:43PM
TrojanDownloader:Win32/Renos.KF
Resources:
file: C\Windows\Tasks\{8CFDD81-7AE0-4605-AF6A-2488B179F2A3}.job
file: C:\Windows\TEMP\Czl.exe
process: pid:2784
regkey: HKCU@S-1-5-18\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\XA5RJ9EADJ
runkey: HKCU@S-1-5-18\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\XA5RJ9EADJ
taskscheduler: C\Windows\Tasks\{8CFDD81-7AE0-4605-AF6A-2488B179F2A3}.job

7/26/2010 12:43PM
TrojanDownloader:Win32/Renos.LX
Resources:
file: C\Wndows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
file: C:\Windows\TEMP\Czk.exe
process: pid:2804
taskscheduler: C\Windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job

7/26/2010 12:25PM
TrojanDownloader:Win32\Renos.MQ
Resources:
process: pid:3860

7/25/2010 9:12PM
TrojanDownloader:Win32\Renos.MQ
Resources:
process: pid:5772

7/25/2010 8:23PM
TrojanDownloader:Win32\Renos.MQ
Resources:
process: pid:4508

7/25/2010 7:46PM
TrojanDownloader:Win32\Renos.MQ
Resources:
process: pid:5596

7/25/2010 7:34PM
TrojanDownloader:Win32\Renos.MQ
Resources:
process: pid:4080

7/25/2010 6:44PM
TrojanDownloader:Win32\Renos.MQ
Resources:
process: pid:3256

7/25/2010 6:12PM
TrojanDownloader:Win32\Renos.MQ
Resources:
process: pid:4008

7/25/2010 6:12PM
Trojan:Win32/Hiloti.gen!D
Resources:
file: C:\Windows\sysWOW64\config\systemprofile\AppData\Local\d1DHRL.dll
file: C:\Windows\TEMP\ncyvoe.exe
process: pid:3284
process: pid:6036
regkey: HKCU@S-1-5-18\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\Xgogofikahasaf
runkey: HKCU@S-1-5-18\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\Xgogofikahasaf

[DavidR]

The avast.setup file is only created before the actual update and it is created in the C:\Program Files\Alwil Software\Avast5\Setup folder. I don't know if that is the same for win7, but it is in the avast5/setup folder when created, so you could manually create the path and paste it into the firewall.

Presumably you have the outbound protection of the win7 firewall enabled as I don't think it is enabled by default (I don't use win7).

Yes it looks like the eduvikki.dll file was removed but there is still a registry entry for it. So you you could either search for any registry key with eduvikki.dll in it or it may be better to try some other tools.

It may be that the registry keys below the infected file names in the WD log is where there is an entry to run the respective files, so check and see if they are still in the registry.

If you haven't already got this software (freeware), download, install, update and run it and report the findings (it should product a log file).

• 1.  MalwareBytes Anti-Malware (MBAM), On-Demand only in free version http://download.bleepingcomputer.com/malwarebytes/mbam-setup.exe, right click on the link and select Save As or Save File (As depending on your browser), save it to a location where you can find it easily later.
• 2. SUPERantispyware (SAS). On-Demand only in free version.

Don't worry about reported tracking cookies they are a minor issue and not one of security, allow SAS to deal with them though. - See http://en.wikipedia.org/wiki/HTTP_cookie.

[Pro Geek]

I had the same problem and solved it this way:

-Go to add/remove programs
-On the listing for Avast select Add/remove
-click on proxy settings
-select Direct connection (no proxy)
-click ok, then cancel, then yes

Hope this helps you solve your problem.

[DavidR]

Whilst the OPs problem is different to what you describe - you don't have to go to those lengths, as those settings available through the avastUI, Settings, Updates, Proxy Settings.

[natvlegl]

I can't get my Avast to update either and can't find how to post a new post of my own on this. I've seen this one I'm now "replying" too with the same issue, but I think my PC "symptoms" are a little different than either of the other 2 recent "can't update" but am not sure.

I have WinXP.  I have tried both manual and automatic updates for avast and neither will connect.  It trys to update for awhile and then comes back with a can't connect to server regardless.  It did this before I did an uninstall and reinstalled.  1 time (before) I got it to update from the safe but networked menu and it ran a good scan than time and found several viruses, trojans, etc.  Then I could not make it update again from boot or Avast so I did the uninstall/reinstall.  It still won't update from either boot or Avast settings.

I do believe something is going on (like virus/trojan or something) but Malware has failed to find anything either.  Boot scan with Avast (without updates) has not shown anything, but it is acting just as though there IS something...hanging up in different applications, etc.  and the fact that it will not update. Malware updates though???

I don't think I use any proxies.  Anything else I can try?  Is this updating issue within Avast??

Thanks for help.  Joyce

[Pondus]

can't find how to post a new post of my own on this.

When you are here (  http://forum.avast.com/index.php?board=2.0  )
just under " search " in top right corner, you will see " new topic "

[GARNIERJ]

Thanks to Pro Geek. Your post helped me to solve my Avast update problem.

[thebay]

i tried all of this - but nothing helped me solve the "server not available"-problem.
any more suggestions please?
thanks a lot

[essexboy]

Go to Control Panel and select Internet Options
Select the Connections TAB
Select LAN settings button
Ensure there is no tick in the Proxy Server box
Select OK and restart Internet explorer


And for Firefox there are instructions on this page and you want the setting to be no proxy

[thebay]

neither LAN settings (there wqas no tick) nor Firefox settings enabled avast5 to update. (automatic and manuel does not work)

[BODA]

Maybe this will solve your issue.

1. Settings
2. Updates
3. Proxy setting
4. Direct connect no proxy

Good luck....

BODA

[thebay]

nope