Hello 8)
I’m a french user of avast 4.6 home edition with key entered !!!
Althought I reinstall several times this log. I usually have this message when my computer start :
“Avast! detected unauthorized modification of this file : ashDisp.exe […] run anyway : yes or no ?”
Do you know this problem ?
Is it an important file ?
Have you got a solution ?
Thanks 
Do you have any other security programs that monitor/block new startup entries ?
e.g. WinPatrol, Spybot S&D, AdAware, etc. if you have you should temporarily disable them and reinstall avast.
It is important in that it puts an icon on the system trat and is the interface to the avast resident provider settings.
Thanks for your answer…
It’s very strange because Avast seems to work like usual. icon is present and active ???
Yes I have several others protections like :
Spybot
Kerio Firewall
CCleaner
a² a-squared
I will try to disable them and reinstall avast !!!
See you…
It would be working if as you indicate you don’t allow the change to happen thus ashDisp.exe doesn’t get changed.
Spybot Plus or something like that has a resident element that monitors/blocks startup entries, check and see if this isn’t trying to change the startup entry somehow.
Kerio, ccleaner are unlikely to be the culprit, I don’t know anything about a-squared so I can’t say it isn’t a possible.
It’s called Spybot Teatimer. An Englishman should be able to remember that one! ;D 8)
Welcome to the forums, badkilla. 
Teatimer’s warning box is much different than the ones from Avast so there should be no confusion there. Can you take a screenshot of the warning next time you get it and post it here?
No I know about TeaTimer, I just don’t know what version of S & D it comes with S&D Pro/Plus/other ??? ;D it isn’t available in the free version.
hi
I don’t understand what your answer…
It means the alert have got is not issued from avast ?!?
What is “Spybot Teatimer” ?
It’s a bug from avast or a worm which is not detected by spybot !?
Have a look to my screen shot :
http://img114.imageshack.us/img114/2774/avastbis1gs.jpg
Very strange ???: Avast is installed in French but alert is in english…
Thanks everybody
It certainly looks like it does come from avast, although I have never seen this previously.
TeaTimer is a resident element of Spybot S&D if you don’t know what it is you are unlikely to be running this, it isn’t part of the free Spybot S&D.
That is strange English Text and French buttons.
I would do roughly as you suggested, uninstall avast, reboot, if you have any resident element to Spybot S&D disable it and also disable a-squared. Install avast, reboot.
If you have winXP I would suggest downloading Ewido Security Suite, I think it is better than a-squared and run it, preferably in safe mode.
Update, sorry badkilla the TeaTimer is a part of the free version of S&D also, it is in the Tools Section, Resident, ensure the TeaTimer box isn’t ticked, see image. It could be what is trying to effectively block/change the ashDisp.exe startup entry.
I found this option but it’s not ticked !!!
I can see a new message : modification of an another file.
That’s very strange !
I just hope Avast working well…
Thanks
Well we have to try and identify what is doing this, what is the other file being modified ?
Also useful as a diagnostic tool - Download HiJackThis.zip - HJT Information HiJackThis Tutorial 1 or HiJackThis Tutorial 2
For an on-line analysis - HiJackThis Log file - On-line Analysis OR HiJackThis Log file - On-line Analysis 2
Ignore any 023 reference to avast processes, this is a hiccup in the HJT 1.99.1 (especially missing file entry for avast), if you need any help with any of the analysis let us know.
Actually it is included in the free version, or at least I’ve got it. Is available, that is – I disabled it because of incompatibility with too many other things.
Yes it is CharleyO PM’d me and I corrected my error ;D
hi !
I put my windows Pro SP1 in SP2 with windows Update. Still using Firefox…
I boot my computer in safe mode (disable system restore before) and run a scan with spybot, Ccleaner, a-squade a², … nothing !!!
I made several on line scan but nothing !!!
… and I have installed a new program : SpywareBlaster :
I put the lastest version of avast 4.6.763 and now I have two more alerts :
http://img464.imageshack.us/img464/5458/freealert4rq.jpg
http://img20.imageshack.us/img20/1215/freealert23np.jpg
I’m really disappointed and I will try this famous “HiJackThis” with on-line analysis.
Rhaaaaaaaaaa
see you later
On the forums when we suggest installing SpywareBlaster (which I don’t see in this thread), we usually advise not to install it until your system is clean which is uncertain.
Have you not tried Ewido, I gave a link to that some time ago and I feel it is better than a-squared.
You may well be better off doing a clean install of avast and watch for any program interaction when you reinstall it.
First download the latest version of avast and save it to your hard disk. Download the avast! Uninstall Utility, find it here.
Uninstall avast, reboot, run the avast uninstall utility, reboot, install the latest version of avast that you downloaded, reboot.
Hello,
I was infected since 23 march by “Win.32.Sality.E” but I can see avast update for this worm is available only since 30 march.
have a look here :
http://www.avast.com/eng/vps_history.html
:-[
All my .exe are infected and need to be deleted !!!