Hello everyone.
When I start my avast scanner, the firewall tells me that Avast is trying to connect to trabanta.com and asks me to allow or deny the connection.
I’ve looked up trabanta.com online and is not an active website, just a display page saying Apache serv was successfully installed.
The www.who.is points to a domain in Hong Kong.
IP Address: 58.65.235.1
IP Location: Hong Kong
Website Status: active
Server Type: Apache
Cache Date: 2008-06-02 03:52:15 MST
I’m worried about this and want to ask if anyone has experienced the same and what should I do?
In the meanwhile, I’m running an advanced scan (also archives) of my pc and using trend micro housecall online scanned to double check.
What is your firewall, because it is totally wrong ?
avast has no connection function, even for the update process it has to check that a connection is present and then it only connects to avast download servers.
The web shield is a localhost proxy which redirects port 80 http traffic so that it can be scanned, so it would appear that something is trying to connect to that url and it is going through the localhost. It would appear that the firewall is unable to detect what is using the proxy and just flagging avast (presumably web shield) as the application responsible for the connection.
So it looks like you may have an undetected or hidden guest on your system.
If you haven’t already got this software (freeware), download, install, update and run it, preferably in safe mode and report the findings (it should product a log file).
SUPERantispyware On-Demand only in free version. Or Spyware Terminator Resident scanner (if you use this don’t install the toolbar or crawler or the anti-virus module). Or a-Squared free. I suggest trying then in order as the order that represents the better detection and clean-up. Some elements of the programs might not work if you have an older OS like win9x or winME, this is namely the resident protection in SpywareTerminator.