Avast remote connection

Avast Free Antivirus / Premium Security
1

Hi
I installed a firewall and when I rebooted the computer it warned me
about Avast trying to make a connection. I clicked for details and
this is what I got. I copied it to send it to you.
What it called my attention is the Remote Name.
Could you check and tell me if this is a normal thing?
Thanks,
haydee

File Version : 4.7.936.0
File Description : avast! Web Scanner (ashWebSv.exe)
File Path : C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
Process ID : 0x714 (Heximal) 1812 (Decimal)

Connection origin : local initiated
Protocol : TCP
Local Address : 76.98.136.203
Local Port : 1113
Remote Name : playgames.comcast.net
Remote Address : 80.67.74.87
Remote Port : 80 (HTTP - World Wide Web)

Ethernet packet details:
Ethernet II (Packet Length: 76)
Destination: 00-01-5c-22-b7-42
Source: 00-01-6c-a2-bf-1e
Type: IP (0x0800)
Internet Protocol
Version: 4
Header Length: 20 bytes
Flags:
.1… = Don’t fragment: Set
…0. = More fragments: Not set
Fragment offset:0
Time to live: 128
Protocol: 0x6 (TCP - Transmission Control Protocol)
Header checksum: 0x2a88 (Correct)
Source: 76.98.136.203
Destination: 80.67.74.87
Transmission Control Protocol (TCP)
Source port: 1113
Destination port: 80
Sequence number: 2269460958
Acknowledgment number: 0
Header length: 28
Flags:
0… … = Congestion Window Reduce (CWR): Not set
.0… … = ECN-Echo: Not set
…0. … = Urgent: Not set
…0 … = Acknowledgment: Not set
… 0… = Push: Not set
… .0… = Reset: Not set
… …1. = Syn: Set
… …0 = Fin: Not set
Checksum: 0x2424 (Correct)
Data (0 Bytes)

Binary dump of the packet:
0000: 00 01 5C 22 B7 42 00 01 : 6C A2 BF 1E 08 00 45 00 | …".B…l…E.
0010: 00 30 02 D6 40 00 80 06 : 88 2A 4C 62 88 CB 50 43 | .0…@…*Lb…PC
0020: 4A 57 04 59 00 50 87 45 : 39 DE 00 00 00 00 70 02 | JW.Y.P.E9…p.
0030: 29 6F 24 24 00 00 02 04 : 05 AC 01 01 04 02 67 6C | )o$$…gl
0040: 6F 62 61 6C 2F 68 65 61 : 64 65 72 5F | obal/header_

2

The web shield monitors http port 80 traffic if you were browsing the playgames.comcast.net then there is no problem the web shield has to filter traffic through the proxy before it arives on your HDD/browser cache. avast doesn’t establish a connection, it must first be present and it isn’t connecting directly to comcast.net, you (your browser) wants to connect and the web shield redirects that request.

So something on your system is trying to connect to that Remote Name : playgames.comcast.net

3

OOH
Thanks for your timely response.
We have Comcast connection but I was not
browsing comcast games. Could it be that
Comcast games is part of the Comcast package?
haydee

4

I wouldn’t know I don’t have comcast, playgames is just a sub domain of comcast and it is possible that an image or something else from that sub-domain is loaded whilst connected to comcast.net. If you do on occasion use the playgames part of comcast, there might be some form of updating going on, however, I can’t confirm that.