Author Topic: annoying sf.bin  (Read 20480 times)

0 Members and 1 Guest are viewing this topic.

otuatail

  • Guest
annoying sf.bin
« on: September 24, 2011, 02:06:05 PM »
I have zone alarm firewall. atleast 3 times a day it askes me if sf.bin should be allowed. Each time with a diffrent IP address. How many have they got? this is annoying. let me have all 50 thousand of them and I will alow them all in one go.

Annoyed

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67235
Re: annoying sf.bin
« Reply #1 on: September 24, 2011, 02:09:15 PM »
Update and server cycling require that. Can you make an exclusion (or full access/server access) on ZA settings?
The best things in life are free.

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11818
    • AVAST Software
Re: annoying sf.bin
« Reply #2 on: September 24, 2011, 04:10:00 PM »
IP address? I don't think sf.bin should really connect anywhere... What exactly is ZoneAlarm asking?

otuatail

  • Guest
Re: annoying sf.bin
« Reply #3 on: September 24, 2011, 04:22:59 PM »
Thanks Tech
I should drop my firewall to allow all virus and malware so that Avast sf.bin can get through! I don't thinks so.

igor
sf.bin should really connect anywhere...
The last two attempts for sf.bin are
23rd 17:50  224.0.0.253
24th 12:50 239.255.255.250

ZA states that Avast sf.bin wants to access the internet.


Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67235
Re: annoying sf.bin
« Reply #4 on: September 24, 2011, 08:37:47 PM »
Thanks Tech
I should drop my firewall to allow all virus and malware so that Avast sf.bin can get through! I don't thinks so.
Who said that?
Why do you think that allowing sf.bin server access will "drop" your protection?
Worse: do you really think that I will suggest such a thing in a security forum?
The best things in life are free.

ady4um

  • Guest
Re: annoying sf.bin
« Reply #5 on: September 24, 2011, 09:10:37 PM »
sf.bin should not try to connect, AFAIK. But, it is updated "frequently" by Avast. The update should come from the avast.setup process, which is the one connecting and performing the engine and database updates.

Avast will keep trying to update sf.bin. You should delete all the firewall rules related to Avast (avastsvc.exe, avastui.exe, avast.setup...). Then set your firewall in "learning mode", reboot and then let the firewall to rebuild the rules related to Avast.

If any of the processes / services of Avast are not automatically allowed by the firewall, then add them manually, and reboot once again.

Please report back.

Nesivos

  • Guest
Re: annoying sf.bin
« Reply #6 on: September 24, 2011, 09:46:25 PM »
If your problem is not solved when you read this you could look here for more information about solving your problem.

http://forum.avast.com/index.php?topic=57776.0

DBone

  • Guest
Re: annoying sf.bin
« Reply #7 on: September 24, 2011, 11:53:57 PM »
"I want a firewall with outbound protection/notification".........Careful what you wish for, you may get it! ;)

otuatail

  • Guest
Re: annoying sf.bin
« Reply #8 on: September 25, 2011, 10:37:08 AM »
Avast strikes again
sf.bin wants to connect to the internat: Zone alarm

239.255.255.250 25th 21:30

Offline Asyn

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 76118
  • Urlaub/Vacation
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: annoying sf.bin
« Reply #9 on: September 25, 2011, 10:50:18 AM »
Avast strikes again
sf.bin wants to connect to the internat: Zone alarm

239.255.255.250 25th 21:30

Read here: http://en.wikipedia.org/wiki/Simple_Service_Discovery_Protocol
W8.1 [x64] - Avast PremSec 22.7.7366.BC [UI.713] - Firefox ESR 91.11 [NS/uBO/PB] - Thunderbird 91.11
Avast-Tools: Secure Browser 103.0 - Cleanup 22.2 - SecureLine 5.18 - DriverUpdater 22.2 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

ady4um

  • Guest
Re: annoying sf.bin
« Reply #10 on: September 25, 2011, 11:18:04 AM »
Avast strikes again
sf.bin wants to connect to the internat: Zone alarm

239.255.255.250 25th 21:30
So, I understand that you don't want to exclude Avast folder (or at least its executables) from your ZA, nor rebuild the firewall rules to allow connection to avastsvc.exe, avastui.exe, avast.setup...

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11818
    • AVAST Software
Re: annoying sf.bin
« Reply #11 on: September 25, 2011, 11:33:01 AM »
sf.bin is the emulator part of avast! - so as I said, it shouldn't connect anywhere (meaning it's not required for its functionality).
So either the emulated executable itself is connecting somewhere (not sure if that can happen, I'm not that familiar with the emulator internals), or another process on your machine is injecting some module into the emulator that tries to connect out.

In any case, I'm afraid it's up to you to configure your firewall accordingly (you can safely block sf.bin - but you'd need to use a wildcarded filename, because it will be in a different folder every time).

otuatail

  • Guest
Re: annoying sf.bin
« Reply #12 on: September 27, 2011, 02:01:22 AM »
ATTACK AGAIN

Now the IP address is
224.0.0.253

Why does Avast not have a contact us where you can talk direct to them. I have now clicked allow in Zone alarm but no doubt Avast will invent a new IP address/ computer server.


Offline Asyn

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 76118
  • Urlaub/Vacation
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: annoying sf.bin
« Reply #13 on: September 27, 2011, 07:51:24 AM »
W8.1 [x64] - Avast PremSec 22.7.7366.BC [UI.713] - Firefox ESR 91.11 [NS/uBO/PB] - Thunderbird 91.11
Avast-Tools: Secure Browser 103.0 - Cleanup 22.2 - SecureLine 5.18 - DriverUpdater 22.2 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

otuatail

  • Guest
Re: annoying sf.bin
« Reply #14 on: September 28, 2011, 06:00:57 PM »
Avast need a contact us. I have been told that sf.bin should not be doing this. What has avast got to say? Can't contact them ZA has captured it again

sf.bin. trying to access the internet. 239.255.255.250 28th 16:50
This is not a ZA problem it is an AVAST problem. I can't configure ZA to turn a blind eye to AVAST. ZA is working perfectly well on my computer.