Avastui.exe AvastEmupdate.exe

6-7 dats ago i open comodo firewall and i watch avast connecting to strange ip. i serch on google and the ip are connected to ovh, leaseweb, and a ip that no comes result on google.What can i do i posted another topic in italian(my language but nothing appened).Can my avast be corrupted or hacked ???

Which IP…?

Can i post you the comodo connection??
This are
instup.exe is asspciated with leaseweb

So, which IP are we talking about…?

46.4.58.71
77.234.42.54/55/56/
77.234.43.39
23.50.151.19(found nothing on google)
173.194.112.158
77.234.45.76
95.211.196.13
173.194.112.4

some ip are from avast other form unrecognized ip.

http://whois.domaintools.com/23.50.151.19

PS: Can’t test all your IPs, feel free to do it yourself. :wink:

Another site for bookmarking :slight_smile: http://whatismyipaddress.com/ip/23.50.151.19

https://www.virustotal.com/en/ip-address/46.4.58.71/information/
77.234.42.54/55/56/ 77.234.43.39 these two are from avast

23.50.151.19 i dont’ know

https://www.virustotal.com/en/ip-address/173.194.112.158/information/ hosting infected file

77.234.45.76 avast

95.211.196.13 leaseweb

https://www.virustotal.com/en/ip-address/173.194.112.4/information/ hosting infected file

all these ip have a connection with avastui.exe instup.exe and avastemupdate.exe

You find a list of Avast servers in “servers.def”.

where i found this file???

\setup\servers.def

i can post the file??

There’s no need to post the file, everyone with avast! has it. :wink:

The file have 15’844 byte and the last column have random letter and number.is that normal??

As it gets updated daily, it’s hard to tell what’s normal.
If you wish, post it in a code box.

I can post sensitive information when post the servers.def??

what can i do is this ip normally to have or avast is corrupted?‘’

IP addresses for Avast will continually change as long as it is Avast is using them then there is no problem

But if i search on google the IP is tied to Leaseweb WHY???