Malware blocked the following before my laptop was infected, but not before my desktop. Anybody know what this is?
-Blocked Website Details-
Malicious Website: 1
, C:\Program Files\AVAST Software\Avast\AvastSvc.exe, Blocked, -1, -1, 0.0.0, ,
-Website Data-
Category: Trojan
Domain: wpad.network
IP Address: 172.67.153.157
Port: 80
Type: Outbound
File: C:\Program Files\AVAST Software\Avast\AvastSvc.exe
You don’t say what this other software is ?
AvastSvc.exe is the main avast process/service and this could indicate a conflict between two active security based programs, not recommended.
Malwarebytes which I’ve used for years, as I have Avast, and it has blocked this twice within a week on my laptop, which happened to be running a Premium Real time protection free trial. My desktop wasn’t, got infected with the same and someone attempted to extort money from me. I can’t block or isolate the trojan.
Personally I abandoned MBAM Pro and a lifetime licence a few years ago as it didn’t bring that much to the party with Avast Installed.
If you have the paid (resident on access) version of MBAM, even their forums recommend that you exclude the MBAM folders in Avast and really the same should be try of excluding the Avast folder in MBAM.
The fact that it may have had it for years without issue is no guarantee of what might be in the future as all security based programs are in permanent development. This looks like a classic conflict (and false positive) as that file is the main avast service and if you check it, it is digitally signed.
Avasts self defence would also be trying to prevent an outside function from deleting avast files, folders, etc. etc.