Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: REDACTED on October 20, 2017, 06:17:10 PM
-
I noticed new application today: overseer.exe, is trying connect to internet. Is this a new application of Avast Free Antivirus?
-
no i don't
its location:
C:\Program Files\Common Files\avast software\overseer
it seems to have digital signature of AVAST Softwere s.r.o.
-
Hi, I was betting how long it would take for someone to notice.
It is our new application that is going to help us detect common (technical) issues with our products. In a sense, it behaves similarly to our Avast Emergency Update but is able to correct these issues independently and even catch them sooner. That's at least theory, currently we are evaluating its performance on small fraction of our users.
If somebody is interested in more details, don't hesitate to ask. ;-)
-
Hi, I was betting how long it would take for someone to notice.
It is our new application that is going to help us detect common (technical) issues with our products. In a sense, it behaves similarly to our Avast Emergency Update but is able to correct these issues independently and even catch them sooner. That's at least theory, currently we are evaluating its performance on small fraction of our users.
If somebody is interested in more details, don't hesitate to ask. ;-)
Asking .... :)
-
Asking .... :)
OK, that's really vague question but I'll try. :-)
It's a small independent application residing in its own directory, therefore it should be able to fix even most broken Avast installations. It's being run daily from task scheduler but it has really small footprint and if everything is fine, exits within seconds. It also has its own release cycle and is able to update itself automatically.
During its run, it identifies some well-known (but very hard to prevent) issues with our products and attempts to fix them, if possible. For example, it detects whether the antivirus service is running and if it is not, it triggers repair. Right now, that's about it. We'll see if it actually helps as much as many people in the office hope it will. :-)
-
Hi. I got this same alert from my firewall today. Found this thread after i saw it resided in the Avast directory.
What communication is the executable trying to establish exactly?
I blocked it, and I am considering deleting it. Because I don't know what data it is sending, and I don't like unknown executables to suddenly start chatting away without being informed and given an option.
Does blocking/deleting/removing this form task scheduler adversely affect Avast functionality, or is it completely superfluous?
FYI, it did not quit after a few seconds. It remained running. Perhaps because it could not complete its task. I killed the process.
The thing I want to know most is when will you guys finally learn to be better at communicating these changes? Do you really think it is best to have people be startled by strange executables wanting to talk to some server? You provide AV, yet this behaviour screams virus/spyware. Your little application might be benign, but this kind of roll out certainly does nothing to assuage mistrust.
-
Asking .... :)
OK, that's really vague question but I'll try. :-)
It's a small independent application residing in its own directory, therefore it should be able to fix even most broken Avast installations. It's being run daily from task scheduler but it has really small footprint and if everything is fine, exits within seconds. It also has its own release cycle and is able to update itself automatically.
During its run, it identifies some well-known (but very hard to prevent) issues with our products and attempts to fix them, if possible. For example, it detects whether the antivirus service is running and if it is not, it triggers repair. Right now, that's about it. We'll see if it actually helps as much as many people in the office hope it will. :-)
I would like to know how are you able to install additional programs on my PC without me knowing?
What stops you from installing something else or someone exploiting this option to do same or worse?
-
Hi,
I have the same question as slama1304 and the others... why have you installed such a program on my computer without my permission and even worse intend for it run, daily, utilising my computers system resources (no matter how small you say it is) and even worse, having it communicating over the internet and updating itself without my express permission? I don't even allow Avast to automatically update as I have a limited data plan and besides want to update when I choose, not anyone else!
This is the behaviour of Spyware and immoral corporate practices. Please, respectfully, explain to me how to remove this immediately or I'll have to uninstall Avast.
I have now blocked this application via my firewall and it has repeatedly attempted to access the internet. I couldn't even end the process in Task Manager! It was utilising more and more system resources as it went through a loop until after 20 minutes or so it suddenly disappeared from task manager...
If I didn't know what this was I'd now be running anti-virus and malware scans which is exactly why I have Avast installed in the first place!
Honestly guys, what are you thinking?
The benefit of this seems minimal for the user compared to the potential privacy and system risks. The lack of transparency and upfront explanation of what was being done will impact upon your reputation, I know it has for me.
Finally, just to mirror Rundvleeskroket 'does blocking/deleting/removing this from task scheduler adversely affect Avast functionality, or is it completely superfluous?'. The fact it ate up a large amount of processing power is concerning...
-
https://www.avast.com/en-eu/eula
https://www.avast.com/privacy-policy
-
Finally, just to mirror Rundvleeskroket 'does blocking/deleting/removing this from task scheduler adversely affect Avast functionality, or is it completely superfluous?'. The fact it ate up a large amount of processing power is concerning...
It popped up again today for me too. Just like last time, I blocked it in my firewall, killed the process, and deleted the folder with its executable. Avast runs just fine without this 'tool'.
After I previously deleted the scheduled task associated with it, that hasn't yet come back.
-
Hi guys, please keep in mind that I am not PR marketing specialist but mere developer (and key author of this feature). From my perspective, there is no significant difference between program update, VPS update, emergency update, MS hotpatch update etc. It's just content delivery mechanism while taking in account number, importance and severity of changes made to a computer. Same thing applies to a decision whether we update existing DLL, create a new one or create entirely new executable. In this case, there are some very good reasons to have completely independent executable. I am aware that because of this it is more visible and I am willing to shed some light why and what it does. But to say it bluntly, if we included said functionality into primary service, nobody would noticed or cared (and we do on hourly basis - it's called VPS update).
To answer some of the questions (valid for current build):
- How does it communicate:
It always attempts to connect to the Internet to download its updated definition file. It's signed plain text, so feel free to check for yourselves: [link removed]
It also reports to our server its start and any encountered error during its run with some basic information about computer. Please note that it is just minimal subset of information regularly sent by Avast itself.
- Can I block or remove it?
It is now considered integral part of Avast installation. You can disable it but it will reappear sooner or later (during program update etc.).
However, if you disable it, you may lose VPS updates under some (currently quite rare) circumstances.
In a way, it's similar to our emergency update service. If you disable it, your computer will run just fine. Until you won't be able to boot your computer next Tuesday because MS is going to release some incompatible changes to Windows and we need to update some of our drivers before then.
- It eats my CPU. What's wrong with you guys?
OK, this should not happen and goes directly on my head. If you can, send me memory dump or any details by personal message and can look into it. Nevertheless, it runs as low priority process and makes very little IOPS and it should eat virtually no memory
-
https://www.avast.com/en-eu/eula
https://www.avast.com/privacy-policy
Where is anything saying Avast can install additional software?
-
https://www.avast.com/en-eu/eula
https://www.avast.com/privacy-policy
Where is anything saying Avast can install additional software?
here i guess
3. UPGRADES AND UPDATES
Vendor, from time to time during the Subscription Term and without your separate permission or consent, may deploy updates of, or replacements for, any Solution, and as a result of the deployment you may not be able to use the applicable Solution or Device (or certain functions of the Device) until the update is fully installed or activated. Updates will be deemed a part of the Solution for all purposes under this Agreement. Updates may include both additions to, and removals of, any particular features or functionality offered by a Solution or may replace it entirely, and Vendor will determine the content, features and functionality of the updated Solution in its sole discretion. Vendor or your Device is not required to offer you the option to decline or delay updates, but in any event you may need to download and permit installation of all available updates to obtain maximum benefit from the Solution. Vendor may stop providing support for a Solution until you have accepted and installed all updates. Vendor in its sole discretion will determine when and if updates are appropriate and has no obligation to make any updates available to you. Vendor in its sole discretion may stop providing updates for any version of the Solution other than the most current version, or updates supporting use of the Solution in connection with any versions of operating systems, email programs, browser programs and other software with which the Solution is designed to operate.
-
It is not additional software - it is simply another module of Avast Antivirus, not a new or unrelated program.
As drake127 said, new executable files appear (and disappear) in Avast installation folder daily, during virus definition updates - and sometimes even at other occasions, if needed. If the file is an "EXE" (which you are probably calling a program) or a DLL (a library), it doesn't matter, it's just a technical decision whether to make a piece of code an EXE or DLL (or something else, like a driver, or even just a "data file"). Btw, the difference between an EXE and DLL file is exactly one bit somewhere in the beginning of the file.
When I look at the installation folder of Avast Free, there's about 90 DLLs and 25 executables there - yet it's not an installation of 25 programs, it's just one - Avast Antivirus.
The discussed functionality (and much more) is already present in the "main" Avast modules, and has been there for years. It has only been extracted to (or possibly duplicated in) a standalone module in attempt to make the product more robust/reliable (and subsequently to provide a better protection with less compatibility issues).
-
@ igor,
Thanks for the clarifying explanation. Is it possible that these types of changes are mentioned when the
happen. Possibly in the beta section where we would see them first?
Thanks
-
Yeah, probably the first time I read our EULA. :) It seems we have pretty good lawyers but I have no intention to hide behind them. If you come up with any constructive suggestions, I have some measure of control of the overseer's feature set. However, you need to be realistic and proportional. There is no point having Avast communicating and downloading VPS while blocking overseer.exe as there's virtually no benefit to either data traffic nor your privacy.
bob3160: It's a good idea, we'll discuss it but it will be difficult to decide what deserves to be mentioned and how to present it. In this case, it's quite difficult to reasonably describe feature that just fixes few quite technical corner cases. I expect that "improved stability" doesn't cut it. ;)
-
I agree that when some changes result e.g. in your personal firewall suddenly showing previously unseen modules connecting to network, it is somehow confusing - and should be announced in advance, at least here.
-
It is not additional software - it is simply another module of Avast Antivirus, not a new or unrelated program.
As drake127 said, new executable files appear (and disappear) in Avast installation folder daily, during virus definition updates - and sometimes even at other occasions, if needed. If the file is an "EXE" (which you are probably calling a program) or a DLL (a library), it doesn't matter, it's just a technical decision whether to make a piece of code an EXE or DLL (or something else, like a driver, or even just a "data file"). Btw, the difference between an EXE and DLL file is exactly one bit somewhere in the beginning of the file.
When I look at the installation folder of Avast Free, there's about 90 DLLs and 25 executables there - yet it's not an installation of 25 programs, it's just one - Avast Antivirus.
The discussed functionality (and much more) is already present in the "main" Avast modules, and has been there for years. It has only been extracted to (or possibly duplicated in) a standalone module in attempt to make the product more robust/reliable (and subsequently to provide a better protection with less compatibility issues).
what you are saying goes under "3. UPGRADES AND UPDATES"
what this "program" does is not covered by "3. UPGRADES AND UPDATES", because Avast have created separate folder on my computer and install "program" that is doing something I was not made aware.
... and of course this is computer program https://en.wikipedia.org/wiki/Computer_program (https://en.wikipedia.org/wiki/Computer_program) no mater how you want to call it
i'm no programer, but you could have this program run as you have it now and it there is some thing that have to be done, let me know in notification and let me decide what i want to do ... or have this program "report" to some module that already have permission to go on line and have it do what needs to be done....
-
Yeah, probably the first time I read our EULA. :) It seems we have pretty good lawyers but I have no intention to hide behind them. If you come up with any constructive suggestions, I have some measure of control of the overseer's feature set. However, you need to be realistic and proportional. There is no point having Avast communicating and downloading VPS while blocking overseer.exe as there's virtually no benefit to either data traffic nor your privacy.
bob3160: It's a good idea, we'll discuss it but it will be difficult to decide what deserves to be mentioned and how to present it. In this case, it's quite difficult to reasonably describe feature that just fixes few quite technical corner cases. I expect that "improved stability" doesn't cut it. ;)
Exactly as other users, I got i new sudden pop of my firewall for overseer trying to connect.
The trouble is we can't trust really nothing today. So don't use third party, other directories ...
The really worry think about that - it's Ubisoft dev program :o, Not like Kaspersky dev pool, or any other AV company. NO it's a business company selling program that should be under investigation by our AV...
Check where is from and what ever guys, be ethical please, it's so easy to see when some compagny are acting non in the user's goal. >:(
Saying it's a emergency update way to fix Avast, and taking in that we all get this pop up today, what is your point - we all have broken avast version ? You get hacked and will publish about it in 8 month ?
-
Saying it's a emergency update way to fix Avast, and taking in that we all get this pop up today, what is your point - we all have broken avast version ? You get hacked and will publish about it in 8 month ?
No, this is not an emergency updater - this is a "watchdog" which checks (from time to time) if the Avast Antivirus protection runs as expected. Only when it finds out that the protection is down and not working correctly, it attempts to fix it somehow.
The notification you get from your firewall is just a self-update check of this new module (as drake127 said, this module has its own update/release cycles - intentionally, because if it was too connected and dependent on the other Avast Antivirus modules, then if the Avast installation gets somehow corrupted, this watchdog would probably get corrupted too, and wouldn't be able to fix the problem).
-
- How does it communicate:
It always attempts to connect to the Internet to download its updated definition file. It's signed plain text, so feel free to check for yourselves: [link removed]
What was behind the link you removed?
-
What was behind the link you removed?
h..p://overseer.tools.avcdn.net/tools/avast/overseer/x86/overseer.exe.def
-
Finally! I've been asking you guys for an autonomous diagnostics component in avast! which would keep an eye on integrity and operation of avast!. I hope the results will be good so we get best functioning avast! on as many systems as possible.
-
I agree that when some changes result e.g. in your personal firewall suddenly showing previously unseen modules connecting to network, it is somehow confusing - and should be announced in advance, at least here.
+1
-
So how do we disable this? I have it blocked by comodo, but don't want it spamming me multiple times per day behind the scenes.
Just add it to the Component list and let us Uninstall it.
-
So how do we disable this? I have it blocked by comodo, but don't want it spamming me multiple times per day behind the scenes.
Just add it to the Component list and let us Uninstall it.
If you want Avast to do it's job, then allow it to do so.
Sounds like you would rather use Comodo. Enjoy. :)
-
So I installed Avast a while ago and I decided to uninstall it about a month ago.
I followed all the instructions as specified in the Avast website (downloaded avastclear.ex etc) and today I noticed Avast Overseer running on my PC!
The folder location "C:\Program Files\Common Files\Avast Software\Overseer" is still there even after the Uninstall and this programm is running.
I would like to know how can I permanently stop Overseer or any other Avast software from running on my PC.
Thanks in advance.
-
So I installed Avast a while ago and I decided to uninstall it about a month ago.
I followed all the instructions as specified in the Avast website (downloaded avastclear.ex etc) and today I noticed Avast Overseer running on my PC!
Classic case of the left hand not knowing what the right is doing... LoL!
If you have ripped avast out of your box, don't be shy, delete the \Avast Software\Overseer folder, delete the task within Task Scheduler and, *** if you know what you are doing ***, I would go through my Registry and search for "Overseer" leftovers.
There are 2 inscriptions in the registry but I 'think' deleting the task will erase them.
And I would also make a manual search for "avast" as with 180+ registry inscriptions (and I only install the FILE and the WEB components), they're bound to forget some.
@Pondus, your first answer in this thread, Reply #1, was really helpful. Congratulation... a link to the lamest forums on the planet. "Unbalivable!"
Your other answers, Reply #9, #13, roughly amounts to washing your hand in the face of user having technical issues with the software you're supposed to... "Evangelize". Trowing legal mumbo jumbo at us. Shame on you. For Avast sake, find something else to do.
@Drake and Igor, thank you guys for your time, thank you for taking care.
-
drake127 said
. . . It seems we have pretty good lawyers but I have no intention to hide behind them. . . .
Well said , thank you.
drake127 also said
. . . If you come up with any constructive suggestions, I have some measure of control of the overseer's feature set. . . .
A "backup watchdog" is a great idea, imho. And it should be difficult to remove. But still under the control of the owner, eh? So I have a couple of suggestions. They are not criticisms. Also they may be for the PR people, not the software developer.
1. Prior notice. Avast often creates popups. One of these might announce the proposed change, and have a link to find out about it.
2. Transparency. The user can follow the link to learn the details and make a decision to go or nogo.
3. Full disclosure. How the new software will change the 'net access, uninstall procedure, etc.
Thank you, drake127, for developing the software and encouraging suggestions.
-
I suppose it will be correct to show checkbox at uninstall wizard screen: "Keep Avast Overseer".
And I would like to see it unchecked by default.
-
Like I've said here ( https://forum.avast.com/index.php?topic=221887.0 ), overseer.exe now has resorted to installing itself with a Definition Update. So instead of being rid of it until you update the main Avast program, now you have to check for the presence every day. WTF Avast?
My firewall alerted me yesterday. Overseer.exe, new file version, brand spanking new, had just reinstalled itself and started (trying to) to phone home right after that.
Just give users an option to not have overseer installed. Please.
-
May be good if it was named "avastoverseer" instead of "overseer" which looks like scary malware label and totally unrelated to Avast.
If this is has been released to just some users as a test, then surely that test should have been done through the beta test channel first. Also overseer should be cleared out with all avast files by avastclear if ultimately rolled out to all users.
-
May be good if it was named "avastoverseer" instead of "overseer" which looks like scary malware label and totally unrelated to Avast.
If this is has been released to just some users as a test, then surely that test should have been done through the beta test channel first. Also overseer should be cleared out with all avast files by avastclear if ultimately rolled out to all users.
+1
No need for an Avast component to be operating on an OS when the software has been removed ???
-
May be good if it was named "avastoverseer" instead of "overseer" which looks like scary malware label and totally unrelated to Avast.
If this is has been released to just some users as a test, then surely that test should have been done through the beta test channel first. Also overseer should be cleared out with all avast files by avastclear if ultimately rolled out to all users.
Totally agree that the Avast removal tool should have removed this exe. It's supposed to remove everything related to Avast.
As far as the name goes, it really doesn't matter what you call it. A search reveals that it's part of Avast.
(https://screencast-o-matic.com/screenshots/u/Lh/1536959719523-73208.png)
-
My firewall alerted me yesterday. Overseer.exe, new file version, brand spanking new,
What firewall are you using? PCTools?
-
My firewall alerted me yesterday. Overseer.exe, new file version, brand spanking new,
What firewall are you using? PCTools?
Off topic. we aren't talking about firewalls. :)
-
Off topic[/b]. we aren't talking about firewalls. :)
[/quote]
I know, but I want that firewall!!!
-
Off topic. we aren't talking about firewalls. :)
I know, but I want that firewall!!!
There is nothing to stop you using that firewall, just have it allow Overseer.exe internet access or block it, your choice.
EDIT: Corrected the quote format of the previous post.
-
I use Comodo. But any decent firewall will alert you when some executable tries to connect. Although I would guess that the firewall in the paid Avast products is configured to automatically let overseer communicate with them.
-
I use Comodo. But any decent firewall will alert you when some executable tries to connect.
Although I would guess that the firewall in the paid Avast products is configured to automatically let overseer communicate with them.
I'm not speculating as you do, I don't have the Avast Firewall, even if a user does there would be nothing to stop them manually changing the settings.
-
Hi, I wanted to ask.
Why do I have ths program when I don't have avast? I don't understand how it works, since I haven't installed avast at all.
-
Hi, I wanted to ask.
Why do I have ths program when I don't have avast? I don't understand how it works, since I haven't installed avast at all.
You've had Avast installed in the past as your previous posts suggest, using the Avast clear tool doesn't remove all leftovers unfortunately and usually requires a manual search to remove those remnants.
-
Some info here
https://borncity.com/win/2018/08/26/windows-or-defender-reported-overseer-exe/
https://techdows.com/2018/05/disable-remove-avast-overseer.html
-
Hi, I wanted to ask.
Why do I have ths program when I don't have avast? I don't understand how it works, since I haven't installed avast at all.
hi
it may have come by installing ccleaner ?
as explained in the link given by Pondus
However, users affected are often pelading as ‘not guilty’ of having knowingly installed any AVAST program or file such as overseer.exe. The background is that the AVAST Free virus scanner has been installed on the system as a potentially unwanted program (PUP) with other software since that time.
-
Interesting thread.
Could someone at Avast explain how one of my PCs ended up with Overseer installed, when I've:
(a) Never used an Avast product on this computer
(b) Never authorized a bootstrapped Avast installation in conjunction with installing any other application
(c) Never provided any consent whatsoever for Avast to daily scan my computer for possible "errors" and "updates" for a product that has never before occupied one kilobyte on my system.
Asking for a GDPR friend.
-
Interesting thread.
Could someone at Avast explain how one of my PCs ended up with Overseer installed, when I've:
(a) Never used an Avast product on this computer
(b) Never authorized a bootstrapped Avast installation in conjunction with installing any other application
(c) Never provided any consent whatsoever for Avast to daily scan my computer for possible "errors" and "updates" for a product that has never before occupied one kilobyte on my system.
Asking for a GDPR friend.
http://processchecker.com/file/Overseer.exe.html
-
The Overseer.exe is being deployed during installation of Avast Antivirus only. There's no magic involved.
You might be able to check creation time of Overseer.exe directory and cross reference Avast logs in "C:\ProgramData\Avast Software\Persistent Data\Logs\Avast". It is not very reliable though.
-
I've just discovered this new "feature", and after reading all this discussion I'm not satisfied yet.
This is all a matter of trust.
Is this a test run only on few users? Good, I must be able to opt out from the testing.
(i'm already opted out in the settings from "participating in the avast community", I would have guessed that was already enough to make it clear I don't want to be a test subject, I'll restate it, I don't want to be a test subject for your software experiments, do that in your beta zones, or among the willing ones)
And I should have been notified about it before overseer had been installed, but that's already in the past. (don't shrug this off, this was a failure on your communication, and some serious excuses would be the least on your part)
Is this a new feature? Good, it must be visible in the avast settings, or among the components, and be possible to be disabled or removed permanently, without it reinstalling itself against our will.
("but it's less secure", add to the enable/disable setting a nice "not advised" red text as it's use for other sensitive options, but there must be an option to disable&remove overseer)
Any less means you're banking on the trust you've built up over the years, until it'll run out. Do yourself a favor and take this issue seriously. Plz.
-
@nazad,
You're entitled to your opinion.
-
If you completelly uninstall Avast Antivirus, why does overseer.exe remain?
-
My previous question is still up to the developers and I would add one more. I would like to ask furthermore whether the behavior of antivirus client (Avast, Avg) will be affected by disabling or deleting overseer.exe? So that file is an essential part of the program?
-
If you completelly uninstall Avast Antivirus, why does overseer.exe remain?
I can't answer your question directly however it is a good question.
I have read more information here:https://borncity.com/win/2018/08/26/windows-or-defender-reported-overseer-exe/ (https://borncity.com/win/2018/08/26/windows-or-defender-reported-overseer-exe/)
-
My previous question is still up to the developers and I would add one more. I would like to ask furthermore whether the behavior of antivirus client (Avast, Avg) will be affected by disabling or deleting overseer.exe? So that file is an essential part of the program?
See this: https://forum.avast.com/index.php?topic=210028.msg1427323#msg1427323 (https://forum.avast.com/index.php?topic=210028.msg1427323#msg1427323)
You should also read reply # 10.
-
My previous question is still up to the developers and I would add one more. I would like to ask furthermore whether the behavior of antivirus client (Avast, Avg) will be affected by disabling or deleting overseer.exe? So that file is an essential part of the program?
See this: https://forum.avast.com/index.php?topic=210028.msg1427323#msg1427323 (https://forum.avast.com/index.php?topic=210028.msg1427323#msg1427323)
You should also read reply # 10.
Although I use AVG, but it's soothing, that Avast/AVG runs just fine without this 'tool'.
-
My previous question is still up to the developers and I would add one more. I would like to ask furthermore whether the behavior of antivirus client (Avast, Avg) will be affected by disabling or deleting overseer.exe? So that file is an essential part of the program?
See this: https://forum.avast.com/index.php?topic=210028.msg1427323#msg1427323 (https://forum.avast.com/index.php?topic=210028.msg1427323#msg1427323)
You should also read reply # 10.
Although I use AVG, but it's soothing, that Avast/AVG runs just fine without this 'tool'.
It's job is to prevent and fix problems. So until you run into a problem, I'm sure you'll not miss that program. :)
-
If you completelly uninstall Avast Antivirus, why does overseer.exe remain?
I can't answer your question directly however it is a good question.
I have read more information here:https://borncity.com/win/2018/08/26/windows-or-defender-reported-overseer-exe/ (https://borncity.com/win/2018/08/26/windows-or-defender-reported-overseer-exe/)
hello,
If avast has been uninstalled, can't it be part of Ubisoft?
http://processchecker.com/developers_info/43293/Reflections,%20A%20Ubisoft%20Studio
http://processchecker.com/file/Overseer.exe.html
5 C:\Program Files (x86)\Ubisoft\Overseer\Overseer.exe Overseer Reflections, A Ubisoft Studio 1.0.0.151 234086 2EA70EE705D241D0029BE109D5A854CF
-
I have not nor will I ever install Avast upon any of my PCs. It's a personal thing. Here is a complaint I am issuing to Avast! I have never installed Avast on this PC to which I am currently writting from now. I have not downloaded any third-party software nor any bundled software that may contain the Avast program. So how did this "Overseer" program with a digital signature from Avast even get onto my PC? Today for the first time I get a notification that this program is trying to access files, folders, internet access, ect. So I have a MAJOR bone to pick with you people at Avast. I do not like your software! At All! I won't put you down in a public manner as to why. I'm going to research into just how your program got onto my PC and in no way did I give you any kind of permission to do anything within my PC, let alone even be on my PC. So what gives? Avast seems willing to sneak onto peoples computers via other third party software pretty much hiding within bundling of other software should inform everyone that Avast feels some need to use those kind of tactic to sneak it's way in, is the first obvious sign of a lack of consideration on your part. And now I can tell you're trying to be even sneakier. Tell you what Avast. I'm going to track your program down and remove it. Then, I'm going to send all results of how you got on to the FCC or whatever authorities that have the ability to prosecute you. You have invaded my PC without permission. I want you out. Don't try to give me some excuse of an answer that I can and will make you look silly for saying. MSM tried that with me and got schooled on the innerworkings and functions of PCs. You suddenly appeared on my PC today. My only installment in the last two months is a MSM update. SDo where did your programe even come from, all of a sudden?
-
And MSM update stand for what ???
-
It seem like an attempt on a joke - but it is NOT. I got this stuff installed On my PC never using CONCIOUSLY AVAST software. My suspicions about AVAST were correct and the trust to your company went below zero. For a long time I'm trying to avoid installing your products and there is always a way you find it to my system. IT IS AS BAD AS MALWARE. How come you are able to install things without my knowledge or consent?
What gives you right or permission to install it? What information are you collecting?
Is there a list of applications your company bought and at the same time gained access to my PC? (like CCleaner)
This is fairly new reinstallation of Windows 10 (after ver 1809) and now I have zero trust to this PC seeing some software company acting like that.
Thanks for the warning!
Hi, I was betting how long it would take for someone to notice.
It is our new application that is going to help us detect common (technical) issues with our products. In a sense, it behaves similarly to our Avast Emergency Update but is able to correct these issues independently and even catch them sooner. That's at least theory, currently we are evaluating its performance on small fraction of our users.
If somebody is interested in more details, don't hesitate to ask. ;-)
-
@ qwert22
Question was asked and answered. https://forum.avast.com/index.php?topic=210028.msg1427323#msg1427323
-
....I got this stuff installed On my PC .....
Hi,
what is this "stuff" you're talking about? Can you give us his name? In which path of your hard disk is it installed?
-
Can someone explain why this "independent Avast module" is still present and running regularly after Avast being uninstalled? Isn't it violation of EULA or something?
-
@ qwert22
Question was asked and answered.
Not really, Bob.
Drake writes what it does.
He doesn't explain how this tool is installed without knowledge of the users, if thier complaints are right.
-
@ qwert22
Question was asked and answered.
Not really, Bob.
Drake writes what it does.
He doesn't explain how this tool is installed without knowledge of the users, if thier complaints are right.
The question wasn't about it's installation but, why it wasn't removed when Avast was removed which is a very valid point.
-
]The question wasn't about it's installation ...
:o Of course it was for qwert22 , even it was the main question
I got this stuff installed On my PC never using CONCIOUSLY AVAST software.
....but why it wasn't removed when Avast was removed which is a very valid point.
where do you see that qwert22 explains that he uninstalled avast and want to know why after that the overseer remains ?
qwert22 asked just four questions
How come you are able to install things without my knowledge or consent?
Did drake127 (#4) answer the question ? I don't think so :-\
What gives you right or permission to install it?
Did drake127 (#4) answer the question ? I don't think so :-\
What information are you collecting?
Even if for this question, there is some kind of answer from drake127 , it wasn't a question at the first degree. ;)
Is there a list of applications your company bought and at the same time gained access to my PC?
Did drake127 (#4) answer the question ? I don't think so :-\
Seeing centaur2469,qwert22,stibi intervention, I don't think you're providing the right answers to members who are looking to find out how the component got to their computer when no avast products have been installed on their PCs (at least voluntarily). :-[
-
That's the point, Chris! Not very much people like to get unannounced & unwanted software components sliding to their computer.
And I wonder why guys like Bob which I reckon answer so elusive.
Even if I'm customer of, say photo , office or any other kind of software, I like it when they ask me wheather I want an update or not. Maybe I want it later for some reason, or I am not interested in new features.
Avast's business activities look strange in the last months.
-
That's the point, Chris! Not very much people like to get unannounced & unwanted software components sliding to their computer.
And I wonder why guys like Bob which I reckon answer so elusive.
Even if I'm customer of, say photo , office or any other kind of software, I like it when they ask me wheather I want an update or not. Maybe I want it later for some reason, or I am not interested in new features.
Avast's business activities look strange in the last months.
Change your settings if you don't want auto updates.
-
Oh Bob - there are guys who haveen't anything from Avast and report this strange overseer crap.
And what I soon will change is the Av software.
-
Oh Bob - there are guys who haveen't anything from Avast and report this strange overseer crap.
And what I soon will change is the Av software.
That's always your prerogative.
You can always follow this advice to get rid of overseer.exe:
https://askleo.com/how-do-i-get-rid-of-overseer-exe/ (https://askleo.com/how-do-i-get-rid-of-overseer-exe/)
-
Oh Bob - there are guys who haveen't anything from Avast and report this strange overseer crap.
And what I soon will change is the Av software.
That's always your prerogative.
You can always follow this advice to get rid of overseer.exe:
https://askleo.com/how-do-i-get-rid-of-overseer-exe/ (https://askleo.com/how-do-i-get-rid-of-overseer-exe/)
You should have started with this answer from the moment (raidengr #26) when users no longer understood why the program was still present after uninstalling avast.
Worse, as already said by others before (raidengr,rocksteady,schmidthouse,...) avastclear which is supposed to do the voluntary cleaning of everything concerning avast, obviously leaves things lying around after uninstallation.
When drake127 says
I am not PR marketing specialist but mere developer (and key author of this feature).
people expect a developer who has built the module specifically related to the program, to finish the job by integrating a demolition of the same module into the uninstallation of the program (this is my conception of the developer) ::)
To your discharge ,bob (but not to avast's), I know that you often recommend not only to use avastclear but also finishing the uninstallation job "by hand", it's all to your credit and it's verified here. ;)
Can anyone tell us if an avast uninstall with "Revouninstaller" in advanced mode deletes the keys and files related to "overseer"?
-
@ chris,
Just to be clear, the Avast removal tool doesn't remove every trace of Avast.
It removes everything of Avast that will interfere if you decide to install another AV or,
do a "clean" install of Avast.
I personally don't use a generic Uninstaller like Revo to remove an AV since almost all of them have their own tools.
Again, your computer, your choice. My advice is based on my experience, follow it accordingly.
-
It removes everything of Avast that will interfere if you decide to install another AV
It's your point of view but not what is written by avast in its FAQ , sorry ;)
https://support.avast.com/en-en/article/Uninstall-Antivirus-Utility/
Using the Avast Uninstall Utility is the most reliable uninstallation method as it completely removes all Avast Antivirus files from your PC while Windows runs in Safe Mode.
like said by drake and other avast guys "overseer" is part of Avast file ...so, should be deleted at least by using the tool.
Unless you give us the link where it is formally written by avast ,you invent the fact that the function of the tool is only to allow the use of another antivirus without interference :-\
-
Believe what you like chris you'll do that anyway.
-
That's exactly what I was going to say.... for you
when you answer questions that are not and when you do not answer questions that are ;D
-
Hi, Avast Overseer should be deleted by Avast Uninstall Utility.
-
Hi, Avast Overseer should be deleted by Avast Uninstall Utility.
@drake127
Please clarify: are you saying overseer is now deleted by avastclear, or only that it should be deleted by avastclear ??
-
Hey all, just registered for the purposes of giving my two cents...
I downloaded Piriform CCleaner v5.55 on 22 March 2019 at 11:06am GMT from https://piriform.com. I have a copy of the original download executable (and a record to that site). During the installation wizard I was not prompted with an EULA for Avast Antivirus Free or informed of changes other than the installation of Piriform CCleaner v5.55. This is out of character for Piriform, and I can only believe that there was a mix-up when they released that file.
A SILENT installation of Avast Antivirus Free was started and I was prompted for a restart - (I should have logs of this). After restart and the realisation that Avast Antivirus Free was installed, I subsequently uninstalled BOTH CCleaner and Avast Antivirus Free. I will NEVER use either product nor promote their installations on any computer.
I have installed, recently, a firewall product called GlassWire which notified me of new Network Activity to an IP Address located in Australia (1.1.1.1) (Awesome IP address BTW).
Please bear with me. I have agreed to nothing about AVAST software installation and my usage of it which has allowed? me to investigate what exactly is occurring with Avast Overseer:
- Each time the Scheduled Task executes, it runs overseer which then proceeds to install an updated copy of itself with SYSTEM level permissions.
- It runs periodically sending small packets of information to 1.1.1.1
- It checks but does not report to the user that there has been a problem with Avast (i.e. "Avast doesn't exist")
I am analysing the packets using Wireshark and a few open-source Linux programs to 'look inside' those packets to find out WHAT is being shared. I have disabled the Scheduled Task and will be re-enabling the History tab. But I will stop short of reverse engineering the file itself.
To close, I would like to say:
A program installed without permission can be defined as malware. A program that isn't uninstalled by it's parent installation and runs silently, daily (twice), updating itself from a remote server can be defined as a 'trojan horse' virus. It executes with SYSTEM permissions, the same as most Windows services. It (Overseer.exe) could do anything!
This has been my experience with Avast
Thank you
-
1.1.1.1 obviously has nothing to do with the installation of avast or ccleaner.
It is an IP resolver like your provider's or google's (8.8.8.8 )
https://www.cloudflare.com/learning/dns/what-is-1.1.1.1/
Check the settings of your network card (TCP/IPv4), the DNS server used by default must be the one of cloudflare (1.1.1.1)?
Apart from that detail, I agree with you quite a bit, avast's policy has become far too aggressive, but I think it's wisely managed on their part between the pros and cons. ;)
-
Thanks for clearing that up. I realised that this morning - it was 0030 here at the time of my post ::)
I will continue to monitor this thread as I am extremely concerned about the whole concept of these types of applications that are developed by reputable organisations.
After further thought, in defence (??!) of Avast, it may have been an oversight in the compiling of the installer/uninstaller of Avast AntiVirus Free. However, it highlights the topics in my aforementioned comments about malware and 'trojan horse' viruses i.e. software like Avast Overseer having similar 'functions' to these types of 'software'
I understand that my experience with Avast may not be what is experienced by other users, e.g. 'SILENT installation' in my previous post. And, may in fact be unique to users of a particular version of CCleaner.
I will update the forum, and quite possibly Avast themselves through another channel.
-
Almost a month later.
I am running Clam and it notified me in red of Overseer.
I've just deleted the malware/trojan horse that Avast installed and left on my computer without my permission in a deceptive manner since I expected the Uninstaller to delete ALL.
I'm through with Avast. This company has lost all credibility.
Also - bob3160's replies in all threads critical of Avast ("If you don't like it you are free to use another antivirus") type replies -
both hostile and defensive - are not helpful and lend themselves to feeling that Avast feels a need to cover up and stifle discussion.
Instead of pearl clutching perhaps he could take his own advice - if he can't deal with reading threads with valid criticism of Avast he's free to read something else.
Almost a month after the prior last post in this thread and nothing has been done to rectify the Uninstall situation - I just uninstalled Avast a few days ago.
-
Almost a month later.
I am running Clam and it notified me in red of Overseer.
I've just deleted the malware/trojan horse that Avast installed and left on my computer without my permission in a deceptive manner since I expected the Uninstaller to delete ALL.
I'm through with Avast. This company has lost all credibility.
Also - bob3160's replies in all threads critical of Avast ("If you don't like it you are free to use another antivirus") type replies -
both hostile and defensive - are not helpful and lend themselves to feeling that Avast feels a need to cover up and stifle discussion.
Instead of pearl clutching perhaps he could take his own advice - if he can't deal with reading threads with valid criticism of Avast he's free to read something else.
Almost a month after the prior last post in this thread and nothing has been done to rectify the Uninstall situation - I just uninstalled Avast a few days ago.
@ Bosco.
Apparently you took that advice you found not to your liking. Good luck with your choice.
-
I have used Avast free version for several years. Several months ago, I uninstalled Avast (at least I thought it was uninstalled) and installed the Comodo Internet Security product. Comodo has a higher learning curve than Avast but their product is both comprehensive and free.
Now regarding Avast; just this morning Comodo popped up and told me overseer.exe was trying to create a file. I looked it up and found out overseer is an Avast file that was left behind after uninstall. I checked and deleted some folders Avast had left on my PC, although I reckon there are still more and also I have not entered the registry yet to check there. It seems to be a common practice for software Devs to leave part of their installation behind, possibly for telemetry purposes. Avast is one of the biggest if not the biggest player today in the Anti-malware world. Obviously, they want to protect their market share and become even bigger, so these aggressive tactics should be expected. A suggestion would be to use an uninstaller program like Revo Uninstaller. There are also many others that are similar and they specialize in removing all traces of software installations, whether folders, files, or registry entries. I think Avast is a good product, but I recommend going in with your eyes open.
-
I have used Avast free version for several years. Several months ago, I uninstalled Avast (at least I thought it was uninstalled) and installed the Comodo Internet Security product. Comodo has a higher learning curve than Avast but their product is both comprehensive and free.
Now regarding Avast; just this morning Comodo popped up and told me overseer.exe was trying to create a file. I looked it up and found out overseer is an Avast file that was left behind after uninstall. I checked and deleted some folders Avast had left on my PC, although I reckon there are still more and also I have not entered the registry yet to check there. It seems to be a common practice for software Devs to leave part of their installation behind, possibly for telemetry purposes. Avast is one of the biggest if not the biggest player today in the Anti-malware world. Obviously, they want to protect their market share and become even bigger, so these aggressive tactics should be expected. A suggestion would be to use an uninstaller program like Revo Uninstaller. There are also many others that are similar and they specialize in removing all traces of software installations, whether folders, files, or registry entries. I think Avast is a good product, but I recommend going in with your eyes open.
Use the Avast removal tool. https://www.avast.com/en-us/uninstall-utility (https://www.avast.com/en-us/uninstall-utility)
-
Why is it still running when avast is uninstalled ?
Can you take care of this point please ?
-
Because it is a (imo poorly implemented) tacked on monitoring tool, and Avast doesn't clean up after itself very well.
Just delete the file and folder. Kill the process if you have to, and then delete it all. Delete the scheduled task too.
Hell, I have Avast installed but overseer is not on my system. Doesn't affect functionality one bit.
-
hi,
Can anyone tell us if overseer still stays using the uninstaller of the latest version (19.6) of the antivirus ? Where it is indicated in "What's new"
A cleaner goodbye - If you ever uninstall us (gasp!), we now do a better job of removing all our files
-
Rundvleeskroket: Thanks for the tips, i did almost everything you said, except the scheduler, i'll remove the task.
chris.. Yes i did use that last version even before i post this and id does not remove it.
-
Is overseer.exe still part of the avast free av package or not?
I have latest 19.6.2383 (build 19.6.4546.517).
I do not see it running in Task Manager, but files of that name are still listed in two places on my drive.
-
Is overseer.exe still part of the avast free av package or not?
I have latest 19.6.2383 (build 19.6.4546.517).
I do not see it running in Task Manager, but files of that name are still listed in two places on my drive.
https://forum.avast.com/index.php?topic=210028.msg1427323#msg1427323 (https://forum.avast.com/index.php?topic=210028.msg1427323#msg1427323)
-
Rundvleeskroket: Thanks for the tips, i did almost everything you said, except the scheduler, i'll remove the task.
If the executable is no longer present on the system, the task can't actually do anything. But still. An uninstall should remove everything. It is just sloppy.
-
Is overseer.exe still part of the avast free av package or not?
I have latest 19.6.2383 (build 19.6.4546.517).
I do not see it running in Task Manager, but files of that name are still listed in two places on my drive.
https://forum.avast.com/index.php?topic=210028.msg1427323#msg1427323 (https://forum.avast.com/index.php?topic=210028.msg1427323#msg1427323)
@Bob, Sorry but I do not see the answer to my question in earlier message in this thread, to which you provided a link.
Question is "is overseer.exe still part of avast free" as I think others have hinted it has gone and I have not seen it listed in task manager, but it still appears on my disk. If no longer a functional part of avast, only legacy files, then can they now be deleted?
-
It is still installed with Avast Free (and other versions I assume). It typically runs for a few seconds (some time) after startup. So to catch it running you should check task manager right after booting into Windows. If you check later it isn't running anymore.
In my case my firewall alerted me to the executable. You can check the scheduled task for its trigger settings.
-
Ah that explains it. I will leave well alone.
Thanks.
-
Is overseer.exe still part of the avast free av package or not?
I have latest 19.6.2383 (build 19.6.4546.517).
I do not see it running in Task Manager, but files of that name are still listed in two places on my drive.
https://forum.avast.com/index.php?topic=210028.msg1427323#msg1427323 (https://forum.avast.com/index.php?topic=210028.msg1427323#msg1427323)
@Bob, Sorry but I do not see the answer to my question in earlier message in this thread, to which you provided a link.
Question is "is overseer.exe still part of avast free" as I think others have hinted it has gone and I have not seen it listed in task manager, but it still appears on my disk. If no longer a functional part of avast, only legacy files, then can they now be deleted?
The link led you to an explanation of it's function and also when it runs.
-
When uninstall AV there is still overseer as leftover (with Avast and AVG) i deleted or it could still spy on on you...
-
When uninstall AV there is still overseer as leftover (with Avast and AVG) i deleted or it could still spy on on you...
Overseer doesn't actually spy on anything. It's just a module that keeps avast! in a functioning state if anything goes wrong. If it's left over after uninstallation, it literally does nothing anymore because avast! doesn't exist on the system.
-
If it checks and finds that everything is started OK, why does it need to report that? I can understand it trying to connect to a server if it had to intervene. But it always connects. Every day.
-
I had to reinstall Avast recently. Is this component still in active use or some remnant that didn't get removed?. What about the various tmp and other files in the directory?