threatfire warning

Just started up computer and a warning from Threatfire "c:\programfiles\avast\ashmaisv.exe " virus Win32 downloader . It blocked it and said it has the capability to send out email messages with the built in SMTP . Is this ok?

I would say this is a false positive, one of the problems with behavioral analysis I believe… ::slight_smile:

Threatfire is alerting to the mail scanner of Avast.

For it to work again you will need to allow it through threatfire.

-Scott-

Thanks for reply , here is the report http://www.threatexpert.com/report.aspx?md5=F09461C8ECCACE33C271CC229F11E281 .

Your MD5 matches mine so at least that is indicating yours hasn’t been modified.

Threatfire has been eating my mail scanner alive. Check my posts on pctools forums.
I allowed it in TF but couldn’t get the mail scanner back and then Avast ate Threatfire. Had to uninstall & reinstall both. Working fine now. There also working on there end.

Why not tell threatfire the program is OK, surely there is a setting to do this ?

Hey silvertones I had the same thing happen to me when threatfire had a red pop up message and automatically deleted my Avast files, in which I sucessfully recovered it from quarrintine but except it deleted my ashmaisv.exe which was my avast mail. So I then try to repair Avast by going into - Control panels - Add/remove - click on change/remove and then select repair, and avast manage to recover that ashmail file back without having to uninstall and reinstall Avast again. And this was after I install Threatfire for the first time and it seemed odd.

But so after those problems happened nothing been going wrong with those 2 programs since.

Please bear with me as computers are not one of my strongest subjects !!! Further to my first post , when I highlight the Avast icon on toolbar at bottom of screen , it shows 5 providers running . I am almost sure it was 6 before Threatfire interfered , would that be correct ? As “DavidR” suggested ,I checked Threatfire and it has a facility to restore the quarantined files / programme . Would it be safe and advisable to restore them or best to leave as is ?

The last provider (should be 7 with Home version and 8 with Pro version) could be Outlook plugin
The message “The provider is waiting on the subsystem to start” will be shown there until you open MS Outlook.
The plugin will be enabled automatically after that.

Can you tell us which provider it is that is not running?

If it is the mail scanner (most likely from your first post) then Threatfire may have quarantined it.
You will have to restore the file from your first post to have it working again.
It will be safe to restore the file (ashmaisv.exe) as it is safe, and not modified.

-Scott-

It is OUTLOOK / EXCHANGE and INTERNET MAIL that "the provider is waiting on the subsystem to start " So it is safe to restore the files from Threatfire ? Thank you .

Tech has explained the outlook/exchange plugin,

What is the file that is in the Threatfire quarantine?

Is it the internet mail scanner? (ashmaisv.exe) – If yes then it is safe to restore it.

-Scott-

Hey j.m.reid, I had the same problem as you did with threatfire that quarintine the ashmail file, but when I try to restore it, threatfire actually deleted the ashmail.exe, so I I check myhijak log it said my ashmaisv.exe was missing in avast mail scanner, that it show it had 5 scanners running and it should be 6 scanner running instead if u include the mail scanner.

So what i did was I repair it as I wrote in my above post to fix the issue.

And I just want to ask also if I repair Avast and it recovers my mail file can that file be fully functional again in which i don’t have to reinstall avast.

You’ve messed avast installation, or, Threatfire did it :stuck_out_tongue:
I suggest you restore files form TF and repair your avast installation (through Control Panel).

Yes, restore the file from threatfire it is a false positive detection by it.

You don’t need the Outlook/Exchange provider running unless you have MS Outlook (not express) installed.

Hi tech, it was threatfire that deleted my avast scanners automatically and I had to recover them in threatfire quarintine list but it did delete the mail scanner file which I repair avast and it repair the avast file.

My mail scanner is back and I hope my mail scanner is working ok cos I having open my email yet.

Was avast self defense on? ???

Hi tech

Do u mean Avast self defense resident shield was on, yes it was on, but after it repair the Avast mail file it it working fine now as there are 6 scanners now instead of 5 scanners but now I had no errors between the 2 software so far.

I wish some comments from the programmers…

Have restored files quarantined by Threatfire as suggested , updated Avast and now , like " Northeast " have 6 out of 7 running once more .As “DavidR” states , the one not running is Outlook/Exchange which is not required . All back to normal , many thanks to all for help given.