Avast Email Server connection

I have several questions. If I’m not wrong, recently was update of Avast because my Zone Alarm asks me to permit Avast access on the Net, again. When was the last program update (not daily updates)?

I’m interested why I got messsage from Zone Alarm that Avast email server (or scanner) I don’t know wants to connect to some IP address (I checked that address and it is address of some other ISP in my country) when I didn’t even tried to get my emails and I use another ISP? I want to be sure that someone else didn’t do that.
I know that when I want to check my emails that is hosted on some other web hosting provider that Avast will try to connect to that address but I don’t understand why he wants to connect to IP address of some other ISP (also in my country)?

Also, I have another question. Can Avast scan files if some virus changes it? I mean that I get the message that my computer is not infected but that it is because some virus changed something in Avast in order to show that. In other words, if Avast is corrpupted will I get the message about corruption when I attempt to update it?

If I make Avast Thorough Test with scanning archive files dissable and I get the message that my computer is clean can I be 100% in that?

Thanks!

I have several questions. If I'm not wrong, recently was update of Avast because my Zone Alarm asks me to permit Avast access on the Net, again. When was the last program update (not daily updates)?

Program Update doenst have schedules [IMO and experiences]
And for virus database… i think it will download if there is an update

Also, I have another question. Can Avast scan files if some virus changes it? I mean that I get the message that my computer is not infected but that it is because some virus changed something in Avast in order to show that. In other words, if Avast is corrpupted will I get the message about corruption when I attempt to update it?

Virus can change something in your HD if the virus is inside your computer… So i guess avast will block or at least alert you there is a threat or something like that.

If I make Avast Thorough Test with scanning archive files dissable and I get the message that my computer is clean can I be 100% in that?

Thanks!

There is no 100% safe in this world [wide web]… So IMO, dont just sit and relax after installing AV or firewall or any protection you can get… your .net behavior will protect you most [dont enter any crack site for example… hmm crack site :P]

I hope this is helping you… and if not… well i’m just trying and will keep trying

after a program update your firewall may well see a change in components of avast that require internet access, namely ashMaiSv.exe the mail scanner and ashWebSv.exe the Web Shield and ask permission again because they have changed.

This firewall interrogation should happen shortly after the program update, usually when you reboot (as requested after a program update) and if not then certainly when you next try to collect or send email or browse the internet using web shields proxy.

It should be soon enough after a program update for you to remember and be confident it is a valid change and of why your firewall is asking permission again.

Thanks for answers.

Could someone answer my questions in my previous email about why Mail Scanner wanted to connect to IP address to other ISP even if I didn’t try to get new emails? Also, if the Avast is corrupted can it be updated or the Avast server won’t respond?

Sorry there is too little information to hazard a guess as to why a connection would be made to somewhere other than your ISP email server.

The avast! mail scanner doesn’t initiate these connections, it is just the proxy through which your email travels in order to be scanned. A program sends mail to one of the email ports and avast intercepts it, scans it and passes it on to the IP address given by that program.

What you are describing soundls like some malware program (spam bot) trying to send email in the background, emphasis on ‘sound like.’ Without more information that has to be an educated guess. Zone Alarm should be able to recognise that it isn’t the avast mail server that is the parent program, just the conduit.

Do your ZA logs indicate any other program activity ate the time?

Corruption could stop updates, but thay would entirely depend on what was corrupted, too many permutations, if you think there is any corruption you can try an avast repair.

Also useful as a diagnostic tool - Download HiJackThis.zip - HJT Information HiJackThis Tutorial 1 or HiJackThis Tutorial 2
For an on-line analysis - HiJackThis Log file - On-line Analysis OR HiJackThis Log file - On-line Analysis 2
Ignore any 023 reference to avast processes, this is a hiccup in the HJT 1.99.1 (especially missing file entry for avast), if you need any help with any of the analysis let us know.
OR - Post your hijackthis-Log here for a diagnosis: tomcoyote.org/hjt

Download this program, update it and run it Ewido Security Suite If using winXP. or a-Squared free if using win98/ME. These specialise in trojans which may not be detected otherwise.