I’m very interested why Avast want’s to talk to someone in Germany:
[4/17/2011 7:13:53 PM]
Direction: outgoing
Local Point: 12.73.54.167, port 1227
Adapter: WAN (PPP/SLIP) Interface
Remote Point: 46.4.58.113, port https [443]
Protocol: [6] TCP
Application path: c:\Program Files\Alwil Software\Avast5\AvastUI.exe
Description: avast! Antivirus
File version: 6, 0, 999, 0
Created: 2011/3/6, 01:06:10
Modified: 2011/2/23, 15:04:20
Accessed: 2011/4/17, 18:10:55
RuleId = 201327521
Update?
looks like an update
Avast is located near Germany.
Ya Doesn’t Czech Republic border Germany, just guessing…Very close anyways…
Cheers!!! and Safe Surfing!!!
As its avastUI.exe so I am sure its not for update, for update the process is “avast.setup.exe”
To end your curiosity I tell you… avastUI connects to internet to show the advt about avast IS or Pro (not sure which one) thats it and ya the news service also…
I hope I am not wrong ;D
And ya it makes connection using HTTPS only…(afaik)
and the IP you mentioned goes to program.avast.com
avast has many servers, in various places…
avastUI makes a connection to download the ad (Free version), and the news information…
Thanks Scott. That seems to be the reason.
My mistake about avast.setup and avastUI.exe.
Ahh, explains much, my bad, I did a lookup on avast.com and assumed they used a server cluster instead of distributed locations.
46.4.58.113 is indeed one of our servers, namely one of about a dozen servers that program.avast.com resolves to.
See e.g. http://network-tools.com/default.asp?prog=dnsrec&host=program.avast.com
Thanks
Vlk