Avast 5.0.462 blocking internet connection

This one : http://www.zdnet.fr/produits/test/hp-psc-2510-photosmart-39144225.htm

Hi mika_fra

there is a workaround which has proven successful with HP printers and scanners. The actual symptoms were high CPU usage, where one of the svchosts was taking all the CPU. The issue itself, which was meant to have been fixed by Microsoft, was related to Windows Update service. The information concerning the issue can be found on the following page -

http://ask-leo.com/how_do_i_fix_this_high_cpu_usage_svchost_virus_or_whatever_it_is.html

halfway down the page under the heading Another Temporary Solution
the link you want is http://wuauclt.info/ and you choose Reset, Repair and Reinstall Scripts
which brings you to this page http://wuauclt.info/scripts.asp - which is the one you want

I think this routine of three steps proved successful with HP printers and scanners mainly because it flushes out ‘software distribution’ as part of reset, repair and reinstall of Automatic Updates service (you can read the script yourself).

I have used this workaround myself when a troublesome printer prevented me from accessing the internet, or at least, only enabled intermittent internet access like you say you have. So I have used the solution and it has worked for me. I still use the computer at times, and I haven’t had a problem with it since.

but read the page carefully,
especially the part at the bottom under the heading Common Mistake - Not Changing the File Type in Notepad

The main thing, because this is a common routine, it cannot harm yr computer. But if you proceed, ensure anyway to backup first or at least enable yr computer to be restored to the time previous to running the 3 step routine. also, you can have a look and question and answer here before making a move. But it has worked for me, and there does not appear any alternative workaround to solve yr problem.

Hey Mika_fra,

You could easily remotely access his PC using tools such as: http://teamviewer.com/index.aspx?split=A

Just download the program and start the free version, have him do the same.

Just call him up and get the number that is displayed on his teamviewer client and the password. Type it into your teamviewer program and voila, instant access.

Oh, and HP printers are a pain in the butt. ;D

my brother
sysan
i have some problem concet avst internet to interne

try open avst program
2- select firwawll
3- setting
4- police
4-select tru to internet counction shared mode and list box select allow

if countinuos problem do in same steps and select network and clice no outmatic profile

my syb if continus problem
select prprities networks and click no firwall avast

amr

Thanks so much. It is very helpful.

I am gonna try all the other solutions next week and keep you informed. Have a nice Sunday

Hello,

I tried that and it did not work. I think now is time to really give up. Thanks again for your help everybody

hi zyndstoff, or anybody else

have avast 6.00, webschield blocks internet access
win 7 32 bit+SP1
have already deinstall avast with the avast uninstall tool and install is again
problem stayed :-[

here is my log file

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 3:27:30 AM, on 4/19/2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\conhost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\Ati2evxx.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
C:\Program Files\Windows Searchqu Toolbar\Datamngr\datamngrUI.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\XDOCK\XWD.exe
C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
C:\PROGRA~1\Bandoo\Bandoo.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\svchost.exe
C:\PROGRA~1\Bandoo\BndCore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10h_ActiveX.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RevoUninPro.exe
C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RevoAppBar.exe
C:\Users\Homi\Desktop\HijackThis.exe
C:\Windows\system32\wbem\wmiprvse.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~1\WIA6EB~1\ToolBar\searchqudtx.dll
O2 - BHO: UrlHelper Class - {A40DC6C5-79D0-4ca8-A185-8FF989AF1115} - C:\PROGRA~1\WIA6EB~1\Datamngr\IEBHO.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Bandoo IE Plugin - {EB5CEE80-030A-4ED8-8E20-454E9C68380F} - C:\Program Files\Bandoo\Plugins\IE\ieplugin.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~1\WIA6EB~1\ToolBar\searchqudtx.dll
O4 - HKLM..\Run: [StartCCC] “C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe” MSRun
O4 - HKLM..\Run: [TrueImageMonitor.exe] “C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe”
O4 - HKLM..\Run: [Acronis Scheduler2 Service] “C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe”
O4 - HKLM..\Run: [DATAMNGR] C:\PROGRA~1\WIA6EB~1\Datamngr\DATAMN~1.EXE
O4 - HKLM..\Run: [avast] “C:\Program Files\AVAST Software\Avast\avastUI.exe” /nogui
O4 - HKCU..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU..\Run: [msnmsgr] “C:\Program Files\Windows Live\Messenger\msnmsgr.exe” /background
O4 - HKUS\S-1-5-19..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User ‘LOCAL SERVICE’)
O4 - HKUS\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User ‘LOCAL SERVICE’)
O4 - HKUS\S-1-5-20..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User ‘NETWORK SERVICE’)
O4 - HKUS\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User ‘NETWORK SERVICE’)
O4 - Startup: XWindows Dock.lnk = C:\XDOCK\XWD.exe
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra ‘Tools’ menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: c:\progra~1\wia6eb~1\datamngr\datamngr.dll c:\progra~1\wia6eb~1\datamngr\iebho.dll c:\progra~1\bandoo\bndhook.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Acronis Nonstop Backup service (afcdpsrv) - Acronis - C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - Unknown owner - C:\Program Files\AVAST Software\Avast\afwServ.exe (file missing)
O23 - Service: Bandoo Coordinator - Bandoo Media Inc. - C:\PROGRA~1\Bandoo\Bandoo.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe

–
End of file - 8050 bytes

Set as screenshot, reboot and try again.

Hi Mods/Admin/Avast dudes,

My Name is Rob and I’m running ‘Windows 7 Ultimate’ was ‘FireFox’ + ‘Chrome’, a day or 2 ago I downloaded something called Ilivid player, I scanned the download with Avast, plus googled the website an player name to check it was safe. My Avast is upto date, its set to Auto update virus defs and program, but still somehow I got something(malware?) called ‘Searchqu’ a ‘rootkit bundle’, think they(WhattheTech) said it comes with something called ‘bandoo’?.
Straight after the ilivid player downloaded I noticed a unwanted/unaccepted ‘free smileys’ logo had appeared on my desktop and I knew it wasn’t a good sign, then I clicked either Chrome or Firefox and my home page had changed to ‘Searchqu’ same for both browsers, straight away I new it was a virus so I got to google, google’d it and researched enough to remove it with ‘ComboFix’. Also for safety I uninstalled ‘FireFox’ and ‘Chrome’ what had both been affected, and installed IE9 and Opera(which are much faster, didn’t know:-)).
Anyway I was wondering how come my Avast ‘Free’ didn’t stop it or find it in the scan? So I came here to see what Avast said about this ‘Searchqu malware’ that I jst got, then when I searched it here, this was the only thread that came up, and it(‘Searchqu’) was highlighted in the guys(Homi’s) post above in his log file:o, so sh*t he’s been infected by it too then, its meant to be real nasty.
Yeah maybe you should email the guy if he doesn’t come back to this thread? Think he’s pretty lucky this worked out like this if he doesn’t know hes got it, lol? Crazy hu, he only posted a few days ago too.

Anyway have you guys heard of this ‘Searchqu’ virus/malware(not sure of the difference?) and would your Avast Pro stopped and sorted this ‘Searchqu’? Wondering whether to now upgrade Avast or get Malwarebytes or something? Whats our advice?

Edit, A little more info, my system 32 bit and Avast 6, also just looked at that guys log file and he’s got ‘Bandoo’ and someone told me to try to remove the program called ‘DataManager’ or DataMngr’? Could be the virus? I removed all of it though, all ‘Searchqu’ , ‘Free Smileys thing’ Ilivid player’ all of it. All seems good now :slight_smile:

Thanks, hope all goes well, take care.

Rob.