OK you mean this one.
I don’t think they’re not much different from the one I quoted before:
The GUID part (“12345678-1234-…”) changes, maybe on every run.
it is, because you precedent answer was
and my paths are precisely directories used by icarus.
this is precisely the problem, because, because of this, the firewall has to ask everytime if this new path is legitimate
1 Like
I’m fighting this problem too for the last few days. Avast pushes Icarus through this file: C:\Program Files\Avast Software\Avast\avast_av_online_setup.exe. Once you allow it to run, you’ll end up with Icarus, which comes from AVG antivirus.
It’s going to create the file C:\Windows\System32\icarus_rvrt.exe plus a bunch of files in the C:\Program Files\Common Files\Avast Software\Icarus\ and C:\ProgramData\Avast Software\Icarus.
Every virus definition and program update check creates random temp files. If you are using WFC by Binisoft to tweak your Windows firewall rules or any other firewall where you create a rule for an specific exe file, not a process, you are left with no option except that you have to allow C:\Program Files\Common Files\Avast Software\Icarus\avast-av-vps\temp(RANDOM letters and numbers)\common1\icarus.exe and C:\Program Files\Common Files\Avast Software\Icarus\avast-av-vps\temp(RANDOM letters and numbers)\icarus.exe every time Icarus is looking for an update.
Worse, it creates a bunch of temporary files every time in C:\ProgramData\Avast Software\Icarus\Logs or C:\Program Files\Common Files\Avast Software\Icarus\avast-av-vps\temp that cannot be deleted. About 5 MB per update, and it grows every time. That’s unacceptable.
Well, I’ve clean uninstalled Avast (amazingly, the uninstaller provided by Avast leaves a lot of traces, way more than REVO Uninstaller, which still leaves a few registries that had to be deleted manually) and now I’m trying to find a way to block the avast_av_online_setup.exe from being downloaded by creating numerous firewall rules and accepting only the bare minimum IP addresses for updates.
If it doesn’t work, I will try Rundvleeskroket’s idea to force stop icarus.exe, then delete all instances.
If this doesn’t work, then it’s time to part ways with Avast.
3 Likes
thanks for this input 
je n’ai pas eu ce problème
je n’ai pas eu ce problème
Je ne l’avais pas non plus avant la dernière mise à jour
J’ai remplacé Avast par un autre antivirus pour l’instant. Je le remettrai si j’entends que ce problème a été résolu.
Je ne peux pas passer mon temps à créer une nouvelle règle dans le parefeu toutes les 5 minutes.
(I hadn’t neither before the last update.
I have replaced Avast with another antivirus for now. I will installl it back if I hear that this issue has been resolved.
I can’t spend my time creating a new rule in the firewall every 5 minutes.)
I have had the same problem since October 9th, I installed avast free on a new laptop with Windows 11.
Icarus is in the folder c:\program files\common files\avast software\icarus\avast-av-vps\temp\asw-(some long GUID that keeps changing)\common1\icarus.exe
Occasionally the firewall will say that the icarus.exe file is unsigned.
I now have 200+ windows firewall rules because icarus keeps triggering a new connection many times a day.
I have uninstalled Avast and reinstalled it twice now.
Two other PCs do not have this problem, they are running the same version 24.10.9535 of Avast, but icarus is triggering from C:\windows\temp\asw-(GUID)\avast-av\icarus.exe instead, and the firewall can tell it’s the same executable each time. These avast installs have been running for years. Only the new install seems to be broken.
Looks like I spoke too soon. Now the other PCs have started running Icarus all the time too, but Avast wasn’t updated. Is Icarus just updating itself and making it worse?
So you mean that you have not the last version of avast?
version 24.10.9535 everywhere
The program doesn’t necessarily need to be updated for User Interface updates, that could be included in Virus Definitions and Engine updates and or possibly Emergency Updates (less likely) or bug fixes.
I’m still on Avast 24.9 and deliberately haven’t updated to 24.10, but now I also get these icarus.exe notifications from avast-av-vps\temp\random folder
Thanks Avast 
As I said a program update isn’t necessarily required for UI updates.
That said most people are complaining because there 3rd party firewall is questioning this outgoing connection. I haven’t had that with the Avast Firewall.
DavidR Leader:
As I said a program update isn’t necessarily required for UI updates.That said most people are complaining because there 3rd party firewall is questioning this outgoing connection. I haven’t had that with the Avast Firewall.
I would suggest that Avast firewall either has a special rule for its own services that allows all their traffic out or it is only acting as a firewall for inbound and has a rule that by default allows all traffic out.
I haven’t had that with Windows10 Firewall. So not just Avast Firewall working with it.
Avast AV shouldn’t just work with Avast firewall, but all firewalls. If MS did something like this they would have another antitrust case on their hands.
This isn’t an UI update, it is a change in how this icarus.exe operates. From a set location to an ever changing temp location.
Why is there no response from Avast about why that was changed and what they are going to do about it?
2 Likes
totally agree with you
Same constant issue for me on several devices. My firewall control app has a ever growing list of Icarus temp requests. I’ll give it a few more weeks then will need to change AV product unless there is some way to manage these intrusive requests.
FYI. I am using Windows Firewall Control which is simply a more useful UI through which windows 10 firewall passes requests.
Hello everyone, i started having same issue since latest update of avast, one that changed UI a bit and some options, every day multiple times icarus.exe makes firewall pop with question and its because for some reason its making temp folders for each and every time it wants to update or do what ever, its annoying as hell and problem is not in firewall as its legit asking as exe file keeps popping on new subfolders aka new destinations, and no my firewall like most firewalls cant use wildcard option to select whole folder as its kinda not needed, not single problem i ever run except Discord wanted to make new temp folder for each and every time its updating.
Here is screenshot of Icarus.exe requests just past day or two, notice how its each time in new subfolder, and its asking multiple times per each subfolder.
