Now avast screwed up completely!! There is a new update and its not possible to update it! At least until now there were offline versions of the installers, now they are gone. How the hell is someone suppose to update avast in zero trust firewall settings? For god sake, stop creating randomized exe files in charge of updates! It seems that I can no longer use Avast at all now since I’m stuck with old version and old av database. Avast seems to make one bad idea after another.
First, I’m an Avast user and not an Avast Team member.
There is very little information to work with, so it is hard to make any suggestions.
What Operating system Win10 or Win11 ?
What Avast Program and Version are you running ?
What do you mean by zero trust firewall settings ?
Hello David,
I am using Windows 11 Pro 25H2
I am using Avast Free v26.8.11404
By zero trust firewall I mean that my firewall is set to block everything and software that I want to have internet needs to be on a white list.
Correct, but does it not have a means of setting an exception, as I mentioned in a reply to another of your posts relating to this.
is no way to allow the avast update permission in the windows firewall settings either by allowing Avast in general. Or allowing the icarus.exe full permissions to update. I know it uses a different (number) as in the screenshot, can it not allow wildcards line icarus.exe* (or the temp folder) in the alternative firewall, in same way you can set a wildcard in the Avast Exclusions.
Yes, it does, but I cannot unblock something that doesn’t exist yet and that will have a randomized file name. I need a full path, service name or running process name. Unblocking icarus alone doesn’t work even when child services are allowed for it.
1 Like
Your problem as I see it isn’t icarus.exe as such, but the Zero Trust firewall, not being able to set exceptions or add it to a whitelist (as you mentioned) in your other related topic.
If icarus.exe were to be in the same form/location every time then it would be easy for malware to preventing it from updating avast’s virus definitions.
Why Avast do this I really done know, but I suspect what I mentioned above.
As an Avast user I can’t offer any further assistance other than what was already suggested.
Your problem as I see it isn’t icarus.exe as such, but the Zero Trust firewall
So you are saying that people who use Windows firewall shouldn’t use it? That is what I use. Zero trust is a policy, not a tool. So again, Avast makes people who are concern about security to give up basic build in OS features? btw, can you name a software firewall that can use wildcards you mentioned?
not being able to set exceptions or add it to a whitelist (as you mentioned) in your other related topic.
I am able to set exception in WIndows firewall, I just can’t do it with a process that has randomized name that deletes itself after fraction of a second.
Also, David you should check build in Avast firewall - what is the first thing Avast firewall asks when you try to add a new rule? Its a exe file path - you see windows explorer open windows where you have to point to an exe file - no wildcards. Its not even possible to add a process or a service. You can’t set anything else there. So Avast firewall also can’t unblock its own updater.
I’m not talking about the Avast Firewall in your case but the issue with Zero Trust
It is possible to manually add a path in the Avast Firewall Settings
An example of the use of a manually entered path below, so everything in that sub-folder would be excluded.
D:\Exclusions#* if you had multiple sub-folders D:\Exclusions# there are backslashes in the examples given but the forum software thinks it is a formatting \ so doesn’t show it. For clarification I have attached a screenshot of some I have entered in the past.
Don’t click the folder icon but enter the path.
This however isn’t the issue but, your clarification of the use of Windows Firewall (not the Avast Firewall, which would cater for the avast updater filename/location) and Zero-Trust function for which you clarified you cant exclude anything ?
It is possible to manually add a path in the Avast Firewall Settings
No its not possible. Probably thats why you show file/folder/url exceptions instead of firewall rules…
This however isn’t the issue but, your clarification of the use of Windows Firewall (not the Avast Firewall, which would cater for the avast updater filename/location) and Zero-Trust function for which you clarified you cant exclude anything ?
It doesn’t matter which firewall you use. There isn’t a firewall I know that can allow wildcards you mentioned. I also couldn’t find one searching briefly on the internet. So I still stand by, by what I said that it is not possible to update Avast unless we expose ourselves and give up our security. And yes, problem exists even when using Avast firewall.
Also I’m sorry, but you probably also misunderstood - zero trust is not a function or feature. In this case I am also not sure if the term apply, but I thought it might. Sorry for any confusion. In general zero trust means that no device can connect to a network or a machine unless its whitelisted and confirmed hat it is this machine and not some other one. In this case what I mean by zero trust is that nothing can access internet or nothing can get access to my machine from the internet unless I whitelist it (and preferably restrict it to given port numbers).
It wasn’t about firewall rule as such but adding an exclusion (a kind of rule) which you said was impossible. And you aren’t using the Avast Firewall but one that you can’t set any exclusions.
Effectively by using the Windows Firewall and have Zero Access enabled, I don’t know how some of the other Avast Shields would be impacted. Other Shields which reach outside of your system, like the Web Guard, Ransomware Shield and Site Blocking,
I don’t see that and I use the Avast Firewall (the windows firewall having been disabled by the OS when you install another firewall) it isn’t blocking the icarus.exe or other incarnations of icarus.exe file.
Martin000. I use the Avast paid premium version so I don’t know if this applies. Have you tried the menu option Settings? If you can access it, when it opens click the Update first. If the virus updates show ‘up to date’, but the next line shows Avast itself has an update waiting click to update your Avast version. The other option to try is click the Exclusions. You can add those links/software access etc … installed on your system. The following are what I had to allow for my access outside and inside my system: http://www.history.navy.mil/, https://www.slimjet.com/ [my browser Chrome look/act alike]. http://C/, https://C/, http://LibreOffice_25.2.3_Win_x86-64.msi/* [I don’t like Microsoft document], https://www.boostmobile.com/* [my cell phone app].
You also may have to add some under the Blocked & Allowed apps section. Current mine shows: Last Pass [Password / Links to outside world], Flastpeak Slimjet (64) my browser, all LibreOffice access, Paintnet (photo software), Slimjet.exe, AshShampoo (my screen copy software).
I hope this will at least give you other options to try.
And you aren’t using the Avast Firewall
Yes, but it is installed anyway, so I have opened it and you can’t whitelist anything using wildcards. When you click on adding to whitelist it asks for an exe file. There isn’t an input field form, but it opens explorer and asks you to pick an exe file. So it has much less options then default build in Windows firewall.
but one that you can’t set any exclusions.
That is completely not true. I can set as much exclutions as I want, but I can’t set and exclution based on wildcards you mentioned. No firewall I know can do that, thats why I asked you to name those that can do that, but you never answerd that yet.
Effectively by using the Windows Firewall and have Zero Access enabled, I don’t know how some of the other Avast Shields would be impacted. Other Shields which reach outside of your system, like the Web Guard, Ransomware Shield and Site Blocking,
I don’t have problems with that. I have set rules for specific process, exe files or services with specific ports to whitelist them. I think that you may think that zero trust = “Zero Access” = no internet…. It means block everything by default and add to whitelist what is allowed to have access.
I don’t see that and I use the Avast Firewall it isn’t blocking the icarus.exe or other incarnations of icarus.exe file.
You don’t have everything blocked by default so you don’t need to whitelist it.
Hey,
Have you tried the menu option Settings? If you can access it, when it opens click the Update first. If the virus updates show ‘up to date’, but the next line shows Avast itself has an update waiting click to update your Avast version.
Yeah, I often go there. This time it says that updates are available, but when clicked to update it says its failed. Its because new randomized process was created and it was gone after a fraction of a second when it noticed it didn’t have internet access. And because it is randomized file name and deletes itself so quickly I don’t have a chance to whitelist it and give it internet access.
The other option to try is click the Exclusions. You can add those links/software access etc … installed on your system.
Thanks, but unfortunately those exclusions work only for antivirus module, they don’t work for firewall rules.
Okay, I would go to the Avast site, download the latest version to your computer. Next, uninstall Avast completely. Try using this link to complete the uninstall. How to uninstall Avast Free Antivirus | Avast Once Avast is uninstall now use the download version to install the latest version.
If you intend to use the Microsoft Firewall you shouldn’t use the Avast Firewall, as they are likely to conflict.
This is why when Avast is installed, Microsoft disables Microsoft Defender, which includes the Defender Antivirus & Defender Firewall, plus some other Defender components.
I honestly don’t know if uninstalling the Avast Firewall component would resolve the situation you have with having enabled the Zero Access in the Defender Firewall it would still block the Avast Updates.
Also I didn’t suggest applying an exception in the Avast Firewall (as you found it doesn’t have that option) but the General Exceptions.
Even so, I rather doubt it would work as the Defender Zero Trust is unlikely to allow it as there is no such exception in the windows Firewall with Zero Trust applied.
Okay, I would go to the Avast site, download the latest version to your computer
It has same problem. There isn’t offline versions anymore… I think thats another step for Avast to make users life harder unfortunately.
1 Like
If you intend to use the Microsoft Firewall you shouldn’t use the Avast Firewall
Jesus, I’m not. I tested its features to let you know that what you are saying is not possible.
Even so, I rather doubt it would work as the Defender Zero Trust is unlikely to allow it as there is no such exception in the windows Firewall with Zero Trust applied.
There isn’t any firewall that can make such whitelist. Avast really screwed up updates making them this way for everyone who values their security.
That’s a pretty big statement.
You might want to confirm that.
With that said I won’t waste any more time on this topic, yours or mine.
You might want to confirm that.
Ok, I did the job for you. You didn’t want to prove it so here is my research:
Bitdefender - No possibility of making rules with randomized path / file name - tested
Norton 360 Deluxe - No possibility of making rules with randomized path / file name - based on documentation
Avast - No possibility of making rules with randomized path / file name - tested
Panda Dome Essential - No possibility of making rules with randomized path / file name - based on support chat with a technician
Webroot Essentials - Couldn’t find any info on their site about firewall
ZoneAlarm Free Firewall - No possibility of making rules with randomized path / file name - based on support chat with a technician
TinyWall - No possibility of making rules with randomized path / file name - tested
Microsoft Defender - No possibility of making rules with randomized path / file name - tested
GlassWire - Couldn’t find any documentation about that
Some high tech bussiness solutions may have what you are talking about, but no one will spent tens of thousand of dolars just tu update Avast….
With that said I won’t waste any more time on this topic, yours or mine.
What is that google link? I don’t understand…