Avastui.exe outbound connections

When I open Avast(free) (after I had just put back an image) I get multiple outboundconnectionwarnings from my firewall. Avastui.exe wants an outbound connection with sites which have nothing to do with Avast. It never did that. Apart from the allowed connections I made a rule to block everything else. Why does Avastui.exe wants to connect? Is it normal?

 

what is the reported location of that file? did you check computer for malware?

 

Upload Avastui.exe to virustotal to check it.
Maybe all this outboundconnections could be because of the publicity included in the free version.

I have had a similar behavior with skype due to the publicity included.

You can also make whois to the ip's

 

I believe Avastui.exe is now the ashWebSv.exe of Avast5. I asked about it but vlk has yet to confirm. If I'm correct it's alright for Avastui.exe to connect to any site. I noticed after a while Avastui.exe mem usage increases and I think its handling of web traffic causes this. ashWebSv.exe mem usage depends on the number of active connections it handles. It might also be Avastui.exe loading the Promo Ad or getting the latest iNews.

 

I'm in a snapshot trying out another AV at the moment so I can't check my Firewall log. I've been using Avast free for some time now and if I remember correct, the GUI needs access for the advertisement it has on one of the tabs in the options panel.

 

The ad inside avast free does want to have some networking love, but other than that it's the casual stuff going through the avast! HTTP scanning proxy and you see it in firewall like it was avast! that initiated the connection. Nothing to worry about really...

 

So ashWebSv.exe was indeed replaced by Avastui.exe. No mem leak in Avastui.exe then. Thanks for confirming this RejZoR.

 

It's indeed for the ad, but the name of one of the sites made me suspicious : mx1.PRODUCTSUWANT22.com.... . Didn't sound like a site I'd like to connect to and it never happened before. I just block the exe besides for what is needed. Thx for the answers.

 

I just feel this is worth checking with VirusTotal, since there are known malware
variants?

http://www.prevx.com/filenames/2986367705472733628-X1/AVASTUI.EXE.html

http://www.superantispyware.com/malwarefiles/AVASTUI.EXE.html

 

I didn't mention it, but I first went to virustotal en then scanned my pc with mbam (only drive c) and a2emergencykit (all drives) and it was clean.