I have also reinstalled Avast and updated it (automatic Avast update), but now I have this avast popup error “ashMailSv has been modified do you really want to run this program ? Yes / No”.
Besides, avast “need to restart your machine” all the time.
I also have this issue with ashWebSv but not with other services (files, IM, …)
I used to have Avast for the past 3 or 4 years, and I never had any issue with it, but now I can’t use it anymore !
I’ve been through the Windows reinstall process many times these days to try to solve this issue, and came to the conclusion it is closely linked to SP2 installation.
Are you sure this is an avast message about ashMaiSv.exe and not either your firewall or other security software ?
What other security based software do you have that might block new startup entries, e.g. Spybot S&D (TeaTimer), AdAware (AdWatch), SpySweeper, PrevX, WinPatrol, ProcessGuard, etc. ?
I trust you did reboot and the prompt keps coming ?
This could be solved, in some systems, by deleting the file C:\Program Files\Alwil Software\Avast4\Setup\reboot.txt
I did reboot indeed : same issue. I couldn’t fing the reboot.txt, and this time it doesn’t ask for reboot.
see attached screenshot o popup in original post, it looks as an avast message.
If i click “non” (=no), it come back over and over, if I click “oui” (=Yes) no more popup.
Can you answer my second question in item 1, it could have a bearing if there are other security programs that might hook into either of those programs though why is beyond me.
Was reboot.txt present in the location I gave ? did you delete it ?
What if you delete the file ashMaiSv.exe (you’ll have to stop the ashMaiSv service before that) and invoke a program update (or VPS update, or program repair… doesn’t really matter). Or, you may just rename the file to something else, even without stopping the service, and then invoke the update.
The correct version of the file should be regenerated.
If the message appears again, I’d probably suggest to send us the file… so that we can check what modifications have occurred.
no other security program than Windows’ Firewall and its security stuff (being “windows updated”)
it was not present, and after the last reboot I did before going back to work, it stopped asking for reboot.
hence currently only remain with the ashMaiSrv / ashWebSv problem.
install with a newly downloaded 4.7 version, same issue. So I thought I had this issue because of an error in Avast 4.7 package (sorry for this thought…),
uninstall 4.7 version then reboot then install an old 3.x version then I asked for update using the interface options. It has updated correctly (no error popped up) but the popup problem was still there.
I can install a 4.7 and do you test tonight if you think it could help in anyway ?
I’ll do this at first time when I’m back, where should I them them to ?
Could you provide me with the time/date/octets size and versions of all exes related to avast, I’ll compare those informations with the files I have later when I’m back from work.
The installer has various self-checks, so it wouldn’t install corrupted files (but display an error message instead). If you reinstalled avast!, then the correct file really should be there…
The ashMaiSv.exe file from avast! 4.7.844 has 245808 bytes - but I’d rather check the content (compare it to the original one), the size doesn’t say that much.
Maybe the file is actually OK and the problem is somewhere else… but I find it rather unlikely; if there was a bug in the file-verification code, many people would experience the same problem (which is not the case).
I’m afraid I’ve got a bad news for you.
The files really are modified - in particular, they are infected by a virus that avast! currently doesn’t detect, unfortunatelly. The virus will be analyzed and detection added in the next VPS update - but it means that many of your other files are probably infected as well…
though I agree with this “lesson”, I just wanted to precise that your procedure is my base one and it lead me to infection however
Besides, I keep wondering how can a virus come to My PC if I did not even start “surfing” but on editor’s websites for latest version or updates downloads. I’ll try to find this out when the new virus definition come out !
For the past 10 year on internet, it the very first time I get a virus, I’ve been using ThunderByte, InoculateIT, PC Cillin, and finally avast for the past 2 or 3 years. During this time I had very few alerts.
It had infected all my windows .exe, .cmd and all program files.
HouseCall can repair it, if you infected, don’t be afraid, just a short bad time to go through
This virus appeared may 14th, I don’t know when/where I got it from
Thank you all, now I just have to repair… and wait for the new VPS…
