Modification of the ini file by svchost.exe ? [Solved]

Avast Free Antivirus / Premium Security
1

Hello,
Since the update of avast to 4.8, i’ve got a message at each start of the pc, and even sometime while using it normally (playing some games …) saying that a program is trying to modify the ini file of avast. I’ve always put “no”. What should I do to stop that message coming every time ?
Here is the message (in French) :

http://img181.imageshack.us/img181/1853/inipf1.jpg

Thanks

2

Which is the full name of the file (path) that is shown in the bottom of the message?
A fake svchost.exe could shown an infection in the computer.
Which is your operational system? Firewall?

3

My operational system is windows xp sp2 and my firewall is zonealarm.

What do you mean by the full name of the file ?

4

I get exactly the same message under Vista SP1 when Google Desktop Search is indexing the Avast directory.
Does anyone know a solution or a workaround? I guess disabling the self protection might help but it feels kinda risky to do that.

EDIT: Yes I verified its the actualy desktop search.
I guess it would be nice to have an “allow always” button that allows the access by the specified process.

5

Sorry, the path c:.… etc. …\svchost.exe

Legit svchost.exe shouldn’t have been triggering the avast4.ini file…

6

I don’t understand Tech, I mean the entire path is written on the screen (C:\WINDOWS\system32\svchost.exe) isn’t it ?

By the way i made a search (svchost.exe) in WINDOWS folder, and i found 2 files, one corresponding to the path : C:\WINDOWS\system32\svchost.exe
and an other one :
C:\WINDOWS\ServicePackFiles\i386\svchost.exe

What do i have to do next ?

7

Try updating to the latest VPS, it should solve the issue.

Thanks
Vlk

8

Ok Vlk i’ll do it and reboot right after to see if the problem persists.

Edit : Thanks Vlk, it works with latest vps ;), problem’s solved, ty all for your help.

9

magemax, Vlk was faster detecting the problem.
Welcome to avast forums.

10

User was reported that the problem with Google Desktop was NOT solved with latest VRDB update. Warning about GoogleDesktop.exe trying to change INI file of avast
This warning appears in the period of inactivity only(~30 sec), addition of GoogleDesktop.exe in the exclusion and new elements indexing disabling in the GoogleDesktop change nothing.
VPS version:080402-0
XP Prof SP2

It’s a pity but user himself can not speak English so I’m retranslating his messages only.

11

You mean VPS instead of VRDB, I suppose.
I’m not receiving any GoogleDesktop warning… I think it’s working…

12

VPS, surely :). Sorry.