Problem or just nothing?

Avast Free Antivirus / Premium Security
1

Hi,
I’m new here but i thought let’s ask the question over here,
I’m having a bit of a problem(i don’t even now if it is a problem)
but each time i restart i get this three messages:
1.Warning
Avast! has found an unauthorized modification in this file:
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
2.Warning
Avast! has found an unauthorized modification in this file:
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
3.Warning
Avast! has found an unauthorized modification in this file:
C:\Program Files\Alwil Software\Avast4\ashServ.exe
and when i look in the log viewer i see in the warnings section this warning:
8-9-2007 17:58:32 1189267112 Tim 1044 Function setifaceUpdatePackages() has failed. Return code is 0x000004C7, dwRes is 000004C7.

and when i start up avast the i get this warning:
1.Warning
Avast! has found an unauthorized modification in this file:
C:\Program Files\Alwil Software\Avast4\ashAvast.exe
2.Warning
Avast! has found an unauthorized modification in this file:
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe

i don’t know if this is a problem?

2

Have you tried reinstalling or reparing your installation of avast? This may very well fix the problem that you are having.

3

i did both but when i restarted it happened again :frowning:

4

Strange indeed. Can you please send of these files to my email address?

Thanks
Vlk

5

Hi

I have the same problem too. I’ve tried to repair and reinstall my Avast, but no change. The warnings are still popping up everytime I restart my computer.
What should I do? So annoying!

6

Do as Vlk suggests and email the files to him, so he may examine them. You might want to mention the URL of this topic in the email http://forum.avast.com/index.php?topic=30335.0 for reference.

7

i already fixed it (bit of a weird action but it sureley works!)
i reinstalled windows on my pc(first format and then windows disc installing)
i found out i had 1 of these 2 viruses:

  1. win32.virut.o
    or
  2. win32.virtob.o
    (they both infect .exe files)
    i used the online scanners from kaspersky, bitdefender, symantec, trend micro
    and it took a lot of time!@
    trend micro and symantec found nothing
    kaspersky found 1.
    bitdefender 2.
    so i concluded that all my .exe files were infected(coudn’t even use cmd prompt!)
    and formatted my pc and reinstalled windows
8

Quite a hard conclusion… but, after all, you have your computer running back again. If I’m not wrong, Bitdefender on-line can remove (clean) the infections.

9

yes that was an option but it didn’t work because the running proceses were infected to and when bitdefender cleaned the non-running .exe files, they were re-infected.
the virus appends to the end of the .exe file and adds itself. it grows about 10kb
(so it get’s corrupted)

10

I have this type of problem on my my member laptop…
He infect by this type of virus and i have already run many time of boot scan but it ended with the virus still in my the laptop…
I have also having this problem…looks the image below…
I think it is because of this virus…

11

If a virus is replicant (coming and coming again), you could follow the general cleaning procedure:

  1. Disable System Restore on Windows ME or Windows XP. System Restore cannot be disabled on Windows 9x and it’s not available in Windows 2k. After boot you can enable System Restore again after step 3.

  2. Clean your temporary files. You can use CleanUp or the Windows Advanced Care features for that.

  3. Schedule a boot time scanning with avast. Start avast! > Right click the skin > Schedule a boot-time scanning. Select for scanning archives. Boot. Other option is scanning in SafeMode (repeatedly press F8 while booting).

  4. It will be good if you download, install, update and run AVG Antispyware. Some users recommend SUPERantispyware, Spyware Terminator and/or a-squared (take care about false positives).
    If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.

  5. If you still detecting any strange behavior or even you’re sure you’re not clean, maybe it will be good to test your machine with anti-rootkit applications. I suggest AVG, Panda and/or F-Secure BlackLight.

  6. Also, if you still detecting strange behaviors or you want to be sure you’re clean, maybe making a HijackThis log to post here and, specially, scan and submit to on-line analysis the RunScanner log would help to identify the problem and the solution.

  7. After you’re clean, use the immunization of SpywareBlaster or, which is better, the Windows Advanced Care features of spyware/adware cleaning and removal.

  8. Finally, when you’re clean, check for insecure applications with Secunia Software Inspector to update insecure applications and avoid reinfection.