Avira Support Forum

Using Avira Premium Security Suite, trying to access internet using Firefox 3.5.2. Get message 'Server not found' .
in Configuration, Application Rules, Firefox is set to 'Privileged, Allow'.
If I deactivate the firewall, access is ok.

This system has previously worked without problem

Please advise,
Johnhg

Hi,
Right click on the system tray umbrella and choose "Configure AntiVir". Be sure to tick "Expert mode" -> go to Firewall -> go to Application Rules -> in the "Application rules for user" section there is a drop down menu. Go through all of the options that are there, and where you will find Windows processes (e.g. svchost.exe) please put them on allow, click Apply.

Thanks, Alexandru.
Only windows applications found are SETUP.EXE (already set to 'Privileged, Allow' )
also jre-6u15-windows-j586-iftw.exe (now set to 'Privileged, Allow' )
and SVCHOST.EX_ (not SVCHOST.EXE). Setting this to 'Privileged, Allow' does not solve the problem.

Johnhg

Hi,
First of all please submit this file SVCHOST.EX_ here. Post here the file ID number. Please set the access for this file to deny until we will analyze it.

After that please go to C:\Documents and Settings\All Users\Application Data\Avira\AntiVir Desktop and look for OTCFG.bin. Upload this file to a website (e.g. rapidshare.com) and give me the link.

SVCHOST.EX_ submitted as requested.

Requested download link is:
http://rapidshare.com/files/280780773/OTCfg.bin.html
MD5: AF77296D81D244032207384C244E1361

Johnhg

Hi,
This is what I found:

Found App \Device\HarddiskVolume4\WINDOWS\system32\svchost.exe
App flags: [ ] [ ] [ ]
MD5 Change count: 0
MD5 [ 0x27 0xc6 0xd0 0x3b 0xcd 0xb8 0xcf 0xeb 0x96 0xb7 0x16 0xf3 0xd8 0xbe 0x3e 0x18 ]
App-User object: [ \Device\HarddiskVolume4\WINDOWS\system32\svchost.exe, S-1-5-19 ]
AppUser [ \Device\HarddiskVolume4\WINDOWS\system32\svchost.exe, S-1-5-19 ] Settings:
ClientContext 0x80000000
MD5ChangedCount 0
TCPConnect: Deny
Send: Deny
Recv: Deny
Listen: Deny
CodeInj: Deny
AdvancedMode: No
Privileged: Yes
App-User object: [ \Device\HarddiskVolume4\WINDOWS\system32\svchost.exe, S-1-5-18 ]
AppUser [ \Device\HarddiskVolume4\WINDOWS\system32\svchost.exe, S-1-5-18 ] Settings:
ClientContext 0x80000000
MD5ChangedCount 0
TCPConnect: Deny
Send: Deny
Recv: Deny
Listen: Deny
CodeInj: Deny
AdvancedMode: No
Privileged: Yes
App-User object: [ \Device\HarddiskVolume4\WINDOWS\system32\svchost.exe, S-1-5-20 ]
AppUser [ \Device\HarddiskVolume4\WINDOWS\system32\svchost.exe, S-1-5-20 ] Settings:
ClientContext 0x80000000
MD5ChangedCount 0
TCPConnect: Deny
Send: Deny
Recv: Deny
Listen: Deny
CodeInj: Deny
AdvancedMode: No
Privileged: Yes

You need to put svchost.exe on Allow.

OK. Tried to put scvhost.exe on Allow, thus:
In Configuration | Application rules, selected 'Add application'; found svchost.exe was not in list.
Selected 'Browse for other applications', selected svchost.exe, then 'Open'.
Application table now contains 'Generic Host Process for Win32 Services; clicked 'Add'
In Application rule list, set 'Generic Host...' to Privileged, Allow, then clicked OK.

Problem not solved - must still deactivate firewall to get internet access.

Johnhg

Hi,
Right click on the system tray umbrella and choose "Configure AntiVir". Be sure to tick "Expert mode" -> go to Firewall -> go to Application Rules -> in the "Application rules for user" section there is a drop down menu. Go through all the options that are there, and where you will find svchost.exe please put it on allow, click Apply.

Problem seems to be solved.
I had not realised that the applications list appeared under several users in the drop-down list.
In fact, svchost.exe does not appear in the list of applications, only Generic Host Process for Win332 Services, but the Application details define svchost.exe as the path for Generic Host Processes.
Having set all instances of Generic Host Processes to Allow, the internet access is OK.
I presume that this action is what you intend.

Thank you for you help

Johnhg

Hi,
You are welcome. Thank you for the feedback.