Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: hutchwit on November 06, 2020, 08:36:09 PM

Title: Win 7 Registry Key
Post by: hutchwit on November 06, 2020, 08:36:09 PM
Windows 7 X64 SP1, Avast Free 20.8.2432

While pondering the cause of Event Viewer Warnings (ID 1530) I was inspecting the registry key
\REGISTRY\USER\S-1-5-21-1812298116-2017843948-1467749058-1000\Software
which has entries for most if not all the applications on my computer, including Avast.

I noticed that the registry also has an entry
HKEY_USERS\S-1-5-21-1812298116-2017843948-1467749058-1000\șOFTWARE
which only contains entries for Avast.

Is this a normal entry on an English language installation?

Just wondering.
Title: Re: Win 7 Registry Key
Post by: DavidR on November 06, 2020, 09:41:26 PM
Whilst I don't know if this is related, but those locations are under the control of the OS as far as I'm aware.  I don't use win7 (for a very long time) but as far as I'm aware this change should also be there.

Avast has recently changed from using avast5.ini to store various avast settings to being stored in the registry.
However the normal place these are stored is in the HKEY_LOCAL_MACHINE\SOFTWARE\AVAST Software\Avast\properties.
 and also HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Avast Software\Avast\properties location for 32bit use.

I don't use win7 (haven't done so for a very long time) but as far as I'm aware this change should also be there.

Check out this topic for more information on the change in avast 20.7:
https://forum.avast.com/index.php?topic=237546.0
Title: Re: Win 7 Registry Key
Post by: hutchwit on November 07, 2020, 06:47:59 AM
What I find odd about the registry entry may not be obvious, given the small font size. If enlarged, it becomes apparent that "șOFTWARE" is written in capital letters except for the initial "ș".

This is not a common lower-case "s".
It is a lower-case "s-comma", ș a character unique to the Romanian alphabet with a unicode value of U+0219.  Many fonts do not even have such a character.
Why would Avast, a Czech company, 500 miles or so from Romania, use this? I find it suspicious.
Title: Re: Win 7 Registry Key
Post by: DavidR on November 07, 2020, 11:48:30 AM
Sorry as an Avast User I can't answer that.