Forum posts for AvastSvc.exe

netstat shows trovi as a foreign address

My pc became infected with Trovi adware recently. It replaced my Home Page to the Trovi search engine page (which does not work). It also rendered other search engines useless in both Internet Explorer and Firefox. Clicking on a search item using any search engine results in a misdirection to some other random stuff.

Neither MalwareBytes nor Avast detected it at all. Desperately, I disabled Internet Explorer and I uninstalled Firefox. After going thru my files, deleting anything I didn't know should be there, and running my registry cleaner, I re-installed Firefox. I left IE disabled (the virus first arrived while using Google in IE). I also put trovi.com into my hosts file.

When I first started up Firefox again, search engines did not work for a minute, then began to work again after a Firefox re-start. Malwarebytes, Avast and adWCleaner still return no problems, but when I run netstat, I see some unexplainable results.

Here is the netstat return:



Active Connections

Proto Local Address Foreign Address State

TCP 127.0.0.1:49164 trovi.com:65001 ESTABLISHED
[nvstreamsvc.exe]

TCP 127.0.0.1:49187 trovi.com:65000 ESTABLISHED
[nvstreamsvc.exe]

TCP 127.0.0.1:49211 trovi.com:49212 ESTABLISHED
[firefox.exe]

TCP 127.0.0.1:49212 trovi.com:49211 ESTABLISHED
[firefox.exe]

TCP 127.0.0.1:65000 trovi.com:49187 ESTABLISHED
[nvstreamsvc.exe]

TCP 127.0.0.1:65001 trovi.com:49164 ESTABLISHED
[nvstreamsvc.exe]

TCP 192.168.2.5:49203 r-065-041-234-077.ff.avast.com:http ESTABLISHED
[AvastSvc.exe]

TCP 192.168.2.5:49356 edge-star-shv-04-atl1.facebook.com:https ESTABLISHED
[firefox.exe]

TCP 192.168.2.5:49371 pub7.jazzradio.com:http ESTABLISHED
[firefox.exe]



As you can see, 'trovi' is listed as foreign address with Firefox and my nVidia software. It's obviously not connecting to anything because the hosts file is looping it back.

I am hoping to find someone who knows about this trovi adware/virus and knows how to get rid of it. Thank you for your help.

(I am exasperated that MBAM, Avast and adWCleaner all do nothing!)

View complete forum thread with replies

Other posts related to AvastSvc.exe

See Related Forum Messages: Follow the Links Below to View Complete Thread

(AvastSVC.exe and XAMPP) / (Virtual Host on XAMPP)
Making an app/service such that trying to end/kill its process in Task Manager would result …
netstat shows trovi as a foreign address