Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: InvisibleMan on May 22, 2022, 05:08:35 AM
-
I've been using Avast Free Antivirus 21.8.2487 (build 21.8.6586.705)
Windows 7 SP1
I had all my updates disabled, and manually updated only virus definitions for the past several months.
But I just suddenly noticed a shortcut file to Avast on my desktop (which weren't there since I moved it right after installing Avast long time ago).
Suspecting something weird, I checked the Avast status, and saw that now it requires restarting as if it updated the program, which shouldn't be possible since I had all updates disabled for months!
What happened?
Is it an official silent update of some sort, or is it a virus? Does anyone know?
Update:
I just noticed in the Task Scheduler a task named: "Avast Overseer" that says it completed not so long ago....
Update 2:
Just found this in Autorun in my windows registry, possibly added by Avast:
C:\Program Files\Avast Software\Avast\setup\auup697.exe
Please, tell me, who knows, what will auup697.exe do if I keep it in my autorun and restart my computer?
What exactly will it install / change in my Avast? Please, help.
I had my updates turned off for a reason: I don't want Avast making decisions on my behalf, what I should have updated or not.
So, addional question: can I just disable this Overseer task created by Avast, so that it won't do that in the future again?
-
Dev-Info: The only way to stay as safe as possible is to use the latest versions of the program. If you stay on an older version, you are at risk that some features stop working (because of changes in 3rd party software, i.e. out of our control), the antivirus may not be effective against latest threats (of course the antivirus core responds to the latest development in the world of malware in each version - so older version may not be able to "see" some things), and you may be vulnerable to some security bugs in the antivirus itself (which again we fix once we learn them - and the fix is released as new versions).
-
I appreciate your concern, but that wasn't my question at all, so you reply isn't helpful at all.
My question was about what was this silent update about, and was it an official thing or is it a virus pretending to be a silent update?
As for what you said...
I'm sorry, but in the past I had way too many bad experiences with various problems and things breaking down after yet another Avast automatic update (just like I also had problems with some other programs updating, like OS Windows).
My strategy for the past years was this: make sure that I find a stable version of Avast (or any other program) and stick to it.
Having new virus definitions updating only works quite well. I never get any indications of an infection (and I do use various way to check it out every month).
And talking about problems: I never could use Avast with zero issues unless I limit myself to using only TWO shields: File and Web shields. Everything else, including antirootkit and (forgot its name) some other hidden shield (those two I always have disabled now). That's the only way I can get it to work without breaking down how my computer and other programs work.
-
Hi, read here why you shouldn't run 21.8: https://forum.avast.com/index.php?topic=319438.0
-
Hi, read here why you shouldn't run 21.8: https://forum.avast.com/index.php?topic=319438.0
Next thing you'll be telling me I shouldn't run Windows 7? ::)
It's not the first time people scare me with vulnerabilities in old products I prefer to use.
I believe I have enough experience to add extra protection to my computer.
(Not having to fix anything in my Windows 7 over the past decade, and having everything working smoothly says I'm quite capable of handling it.)
And you don't think that the basic Avast protection is all I'm using, do you?
Avast is running only as a precaution.
I don't visit malicious sites, and don't run suspicious files.
I have a meticulously set-up Firewall protection.
I complitely blocked internet access to ALL possibile system files on my PC.
Anyway...
I'd appreciate if you stopped forcing me to do something I don't need.
If you can't answer the questions I actually asked, please, don't respond here anymore.
Thank you.
-
Well, it's your system, so do as you like. :P
-
Well, it's your system, so do as you like. :P
I'm sad though that you chose not to read my message (https://forum.avast.com/index.php?topic=319628.msg1687516#msg1687516) fully before responding .
You see, that link you provided is about the vulnerability in The Anti Rootkit driver.
But in my message (https://forum.avast.com/index.php?topic=319628.msg1687516#msg1687516) I specifically said that I ALWAYS keep the anti-rootkit protection disabled, becuase over the past years I always experienced problems with some of my software whenever that protection was enabled.
In other words, having or not having that vulnerability in Avast 21.8 won't change anything in my case.
-
"I don't visit malicious sites, and don't run suspicious files."
How do you know? Today's safe site can be tomorrows affected site.
That's why you need protection.
-
"I don't visit malicious sites, and don't run suspicious files."
How do you know? Today's safe site can be tomorrows affected site.
That's why you need protection.
Experience.
Understanding what I'm doing online or on my PC, and what's actually going on.
Manual adjustment of which processes on my PC are even allowed to accept or initiate internet connections.
Etc.
It's been 15 years or so since my last computer infection (which is a result of a lot more serious approach to my PC protection, but without slowing it down with superflous software).
What I don't like is when some program, like Avast in this case, hides something in task scheduler to install some unknown things without my knowledge.
They at least should have indicated it in the Avast's settings (and I don't mean its hidden advanced settings), since every person should have 100% control and ability to make a choice when it comes to what they want to have running on their computer. ;)
That's why you need protection.
What I need is a balance between protection and stability of my Windows and all the software I'm using on it.
Whenever I tried going for the most recent software (vs. the most stable, tested with time) I often ended up having issues as a result. Avast is no exception.
So for many years already I aim to use the tested and stable versions instead of most recent ones.
I think I have enough proof by time and experience to go for compromises, even if in theory it can make my PC more vulnerable.
I'm still sure that it's unlikely I'll run into any problems with viruses.
Same thing goes for OS as well.
I bet many people would say I should switch to Windows 10 (or especially 11).
But Windows 7 covers all my current needs.
And most importantly: I don't like Windows 10 at all (yes, I'm forced to use it, but not on my main PC).
I'd like to make my own decisions.
-
As already stated by another member, Your computer, your choice.
-
As already stated by another member, Your computer, your choice.
I know.
What I don't get is why is it so that all I got after starting this topic were off-topic attempts to convince me to update my antivirus.
When I asked two simple questions in my very first post:
1. Is it an official silent update of some sort, or is it a virus?
2. What will auup697.exe do if I keep it in my autorun and restart my computer? What exactly will it install / change in my Avast?
???
Oh well. It's not important anymore. I had to restart my computer for a different reason. Created a restore point before doing so just in case.
I'm leaving this topic now. Thank you for all your helpful answers! :)
-
Question: Why does Avast update itself when automatic updates are explicitly disabled?
Answer: You shouldn't keep running older versions of Avast.
Well great. That didn't answer the actual question, now did it? In fact, discussing the merits and dangers of running older versions is pulling the thread off topic. Which last time I checked was frowned upon.
To the topic starter: I've had this happen too in the past. Updates of the program disabled. Updates of the virus definitions on automatic. And yet, at some point Avast installed a program update without my consent and without asking. I still don't know why or how, because if I were to ask here I'd get this exact response, and not an actual answer to my question.
Apparently you're not supposed to question the inner workings or motives of Avast and the team behind it. Shut up and accept what we give you, Avast Free peasant. Something like that.
I'm all in favor of keeping software up to date, when it's relevant. But I'm also in favor of being in actual control of my own machine. Disabled means disabled. No ifs ands or buts. Words have meaning in language. Don't play games.
Scare tactics also don't help.
As far as overseer.exe goes: Avast functions fine without it. You can delete it if makes you feel better. You don't need it, or the scheduled task that goes with it. Disable self-defense, delete the folder/files and task, re-enable self-defense. Done. I'm sure someone will advise you against it, as it might make Avast less robust in theory, but in practice it really doesn't seem to matter much.
-
@Rundvleeskroket
Thank you for the actually useful and supportive reply!
Apparently you're not supposed to question the inner workings or motives of Avast and the team behind it. Shut up and accept what we give you, Avast Free peasant. Something like that.
Seems like that...
Also, I've seen enough complaints from Avast Premium users around here to realize that even they aren't always treated fairly.
But I'm also in favor of being in actual control of my own machine. Disabled means disabled. No ifs ands or buts.
Indeed.
Unfortunatelly big companies often try to put all their userbase into the same category: newbies who don't know anything about computers and who need all the decisions to be made for them by a very helpful "big brother"...
Hey I even keep seeing recently how people's exceptions in Avast are being either ignored or removed for no reason.
Yeah... And they wonder why I don't want to update my Avast for the time being?
In fact, almost every update of Avast I risked to make in the past resulted in me having to endure some newly introduced issues or bugs, updating regularly, until I end up getting a stable and properly working version, which I try to keep using for as long as possible.
(And some bugs I reported seem to be unresolved for many months, judging by other people's reports. So why should I update so often?)
And finally, let's face it: nobody is gonna optimize newer versions of Avast for Windows 7 I'm using. So, the newer version I get, the more chances it will work worse and with more conflicts or unexpected issues or bugs. So again, why would I want to update?
If something isn't broken: don't fix it! :)
-
It seems there is the Avast way of running the program, and the 'wrong' way. What gets tested is the default everything. Deviate and you're left in the lurch. I don't get the feeling many edge cases are ever considered. Or even what I would consider very normal use cases, that aren't the Avast recommended "install every component, use only our bloated ecosystem of tools and programs, and keep everything on full auto because we know better than you" way. Which might be fine for a select few people, but doesn't work at all for power users.
Every problem I've had so far with Avast amounts to seemingly poor testing, settings getting ignored, or simply case after case of "menu says X, program actually does Y". That and straight up lies by Avast representatives about what Avast will or won't do. Such as enabling certain telemetry options after a fresh install. Avast says it doesn't do that. I demonstrably show it does. I call them out, I get told to shut up. They themselves don't seem to know how their own program functions.
Now that I think about it, I wonder why I still use it. Maybe because pretty much all other AV's have gone the same route. The devil you know, and all that. Sigh.
What I do with most of my software: I run a VM with much of the same software as my main PC (host). I update things there and test them for a while. If no weird things happen, I update my main PC. But only after my monthly imaging job. That way I have a safe state to revert back to if need be. Many in fact. It does mean having to fight all the auto-update functionality now common in everything. Sometimes by what amounts to hacking my own system. Just to get back control over what used to be the norm. I tend to keep things fairly up to date, but manually. Image, update, test. Rinse and repeat. I get that a lot of people would just never update again, but I do. I think automatic updates should be the default, but there should be an option to do things on your own schedule.
Last week I updated Avast, to keep current, and it started to delete exceptions and quarantining explicitly excepted files, over and over again. And then people wonder why you might be tempted to stick with an older version? Gee, I wonder why.
-
Which might be fine for a select few people, but doesn't work at all for power users.
To be fair though, in reality, those are actually the majority of people who's using computers: they really only want to click once and forget, and wouldn't want to spend time going through settings, etc.
And because of the majority of people being like that, the "power users" have to pay the price by enduring the hardships or search for some other niche products.
I was able to find some of such niche products for some cases.
But in case of antiviruses it's very hard to find at least something decent. The best choice I know so far is still Avast Free Antivirus. Which might change in the future if they force everyone to Avast One which from what I heard will be bloated with functions impossible to uninstall or disable to free memory and CPU at all.
Last week I updated Avast, to keep current, and it started to delete exceptions and quarantining explicitly excepted files, over and over again. And then people wonder why you might be tempted to stick with an older version? Gee, I wonder why.
Yeah...
That's probably related to those two hidden shields:
antirootkit and some other one right nearby it.
Those always seemed to cause various issues for many people (and for me) over the past years.
So I have them all disabled. And it's a good idea to double check afrter any update of the program, if any of the settings changed or shields got re-enabled again.
And you should be careful if you try to tempoarily stop your running shields: if you use the standard menu: it would also re-enable those two hidden shields.
Also, scanning HTTPS I always keep disabled. Since too much issues with that function.
Maybe because pretty much all other AV's have gone the same route. The devil you know, and all that. Sigh.
Yes. But so far among all the antiviruses I tested, Avast still proves to catch the most real viruses, has the least amount of false detections, and uses the least amounts of system resources (at least if I only keep the most essential shields: File and Web).
So... For all the complaints I have myself and see from others, Avast Free Antivirus is still the best out there.
-
Yes, we live in a world where computers are now used mostly by laypeople. The computer has become a white good. I'm therefore all in favor of defaults that cater to that, such as auto updates. But for those with more experience, there should be choice. And that is disappearing. Power users have become a niche small enough to ignore, it would seem. Much the same as everything being optimized for phones. The bigger user group by far. I so enjoy doing my banking on a big PC monitor and looking at a sliver of vertically used screen space because that is what phones see. Not. Or how options are hidden, simplified or even removed because there is only so much room for buttons on a touch screen device. Meanwhile I have seas of screen real estate going unused because I'm now the marginal use case, not worth developing for.
-
Yeah...
That's probably related to those two hidden shields:
antirootkit and some other one right nearby it.
I have found anti-rootkit to be the culprit. Which goes back to the problem with Avast: in my case it is mining software. Just because that is sometimes installed without consent as malware, doesn't make all use malware. And a miner in any case isn't a rootkit, so the anti-rootkit shield shouldn't even be involved. But it is.
The team building Avast chose to have the anti-rootkit shield do something else besides looking out for rootkits. Without telling us. Without changing the name of the shield. My version of Avast from a few months ago didn't have this problem. So now I have to forgo all rootkit protection, because Avast mislabeled and mis-aggregated functionality. And to top it off; the anti-rootkit shield ignores set exceptions. So it's all or nothing just to have a system that does what you want. And then the people that tell you to always stay current on everything look suprised you choose 'nothing'. Well, that's all the nuance we get in choosing. It wouldn't have to be if Avast actually did what it said on the tin, so to speak. If it actually followed it's own rules, like exceptions. But it doesn't.
-
So now I have to forgo all rootkit protection, because Avast mislabeled and mis-aggregated functionality. And to top it off; the anti-rootkit shield ignores set exceptions. So it's all or nothing just to have a system that does what you want.
At least it's not as important.
Rootkits are techncially viruses.
So as long as your file and web shields are running, there's little possibility you'd get a rootkit into your system anyways.
I guess, anti-rootkit has only one possible useful function: catch things that are already on a computer, if it was infected before installing Avast.
-
I use web shield, file shield, and mail shield. That's it. All other Avast functionality is not even installed. I used to also run anti-exploit and anti-rootkit, but no more because of this. I run a firewall (not Avast) with custom ruleset. I use a VPN (again; not Avast). Hardware router with blocking. Etc. And I have at least 6 months of full system backups I can revert to.
All the more 'funny' having Avast trying to scare me by telling me I'm unprotected without the Avast firewall and Avast VPN.
The version of Avast I used up to updating some time last week or so, from maybe a few months ago, does NOT have the problem where the anti-rootkit shield ignores exceptions, or exceptions are deleted altogether. This is new. And still not fixed.
You mentioned image viewing; I use IrfanView. Have been for over 20 years now I think. Does the job just fine.
-
The version of Avast I used up to updating some time last week or so, from maybe a few months ago, does NOT have the problem where the anti-rootkit shield ignores exceptions, or exceptions are deleted altogether. This is new. And still not fixed.
That's why I keep all the offline installers for stable versions, so I can revert back, just in case.
-
I could revert to an earlier image. A bit Draconian, but would work. I hope the devs pay attention and fix the issue. And tell us. So I can hopefully safely update again.
My fear is you're right; Avast Free may be the lesser of all evils. Which is a sad statement considering all the issues. I think Defender is nibbling at their profit margins, making them desperate with the upselling. Pushing updates without much testing (The Microsoft method) compounds the problems.
I'd love for them to get back to basics with the Avast Free product. But I don't see it happening with how the market is developing. I dread it will get much worse.
Going with a paid version of Avast also doesn't bring me anything. All the paid features are things I don't need or want. And I don't see 'better support' being very useful if that comes from a company with this mindset. I just don't see the added value. I doubt my financial support would change any of that. Maybe I would feel better about complaining about free software, but I feel I'm being very fair in my criticism. If I paid for Avast, I'd take a far more stern tone. Make demands. Ultimately, I want Avast to succeed in business. AV is important. Just, maybe concentrate on the quality of the basics instead of ever more half-assed new gizmos.
-
@Rundvleeskroket I sent you a private message.
-
To drive the point home: I just got a center screen popup, asking me if I know about tech support scams. The full Avast GUI popped up over everything else, front and center, with this #$#$
This is why many people run in silent mode, and missing actual alerts. Because the upsell is getting way to aggressive and intrusive. I'd go back to silent mode too if I didn't constantly have to check what Avast is doing to my exceptions etc.
Paying would solve this NagWare issue. Maybe. Not so sure after reading the forums for years now. But paying just to turn off the nags, and not getting any other functionality I want or need, seems like a bad deal. What I want, and might pay for, is basic AV that actually works properly. Tested. Without shenanigans.
-
Hi Rundvleeskroket
I am using paid version.
I also had same pop up appear in middle of the screen.
-
Hi Rundvleeskroket
I am using paid version.
I also had same pop up appear in middle of the screen.
A screenshot would have been helpful. Thanks
-
related to the pop up, can someone provide a screenshot, please?
-
@petr blatny
Related to this topic I started the thread with.
Avast Overseer task did something to my Avast again now, just 30 minutes ago or so (as it says).
And now it requires my computer to restart again, when it already happened the other day.
What is going on? It never happened before for the past year.
I don't like to restart my compuer that often. I keep it normally running 24/7.
I feel like disabling and removing that scheduled task and Overseer alltogether! I disabled automatic updates. I don't want any updates!
And I never used the most recent Avast either. I have v21.8 and I'm happy with its stability.
I've read too many recent posts from people about a lot of issues with the most recent version.
I don't want it.
-
@petr blatny
I restarted my computer. And it did it again right now!
I'm getting rid of this Overseer. That's it.
Also, it seems like it could triggered by updates of virus definitions.
But it never happened before. Why does computer suddenly require restarting every time I update virus definitions?
Is it because I use Windows 7 instead of most the modern one and nobody tested it on Windows 7? I don't know...
-
Hi Rundvleeskroket
I am using paid version.
I also had same pop up appear in middle of the screen.
A screenshot would have been helpful. Thanks
I tried to make one when I got the screen but when I went to alt-prntscrn it retracted into the GUI.
-
I tried to make one when I got the screen but when I went to alt-prntscrn it retracted into the GUI.
I can recommend Screenshot Captor. It existed for many years, and proven to be a great tool for taking picture of the screen, parts of the screen (easily), specific windows, etc.
And all shortcuts are adjustable, and you can have more than one shortcut for the same action (useful in this case).
Google it if interested. DonationCoder are the developers. And they prvovide free license keys for anyone who requests them, so donations aren't necessary and it won't have any adware 100%.
-
If you're on a Windows computer, Snipping Tool is part of the system.
I personally use Screencast-O-Matic.
-
I use printscreen. Or alt-printscreen if I just need a window. Paste it into whatever flavor of image viewer you prefer to save. Works fine. The point is that when I tried to make a screen shot, the popup dissapeared so now I can't show it here.
More to the point however is that is would seem even the paid users of Avast get nagged with front and center 'always on top' 'alerts'. Unless billygoat319 hasn't disabled ads in his/her paid Avast.
It does seem weird to me an Avast dev/employee needs to ask forum members what the popup looks like. Instead of asking internally if something like that was pushed recently. Someone had to make that screen.
-
Knowing what the popup looks like would offer a clue as to when this
was created. Additional information about the OS, AV, etc. would probably be helpful.
-
I use printscreen. Or alt-printscreen if I just need a window. Paste it into whatever flavor of image viewer you prefer to save. Works fine. The point is that when I tried to make a screen shot, the popup dissapeared so now I can't show it here.
<snip>
I think the problem lies in having to press the Alt key first, which kills the screen.
I have a paid for Screen Capture product Snagit and image editor, it gives options on how to initiate it, I elect to use the standard PrtSc key and any avast alert or info screen/window remains. I use that for all my screen captures in the forum.
-
I think so too. Alt killed the screen. I could've print screened the whole desktop and cut the message to size. Didn't think I would have to. Too bad.
Usually I have a bunch of windows open, and alt-printscreen is the way to go to avoid getting parts of other programs etc. in the image.
In my case it is Avast Free, latest build, on Windows 7 Ultimate.
-
That's another thing: these screens don't show up under notifications. Avast forces you to deal with them right then and there. So if you're actually interested, but not right now because you're in the middle of something, you click it away and it's gone. You can't get it back to read it when you have the time, and neither can you take a screenshot after the fact. It's vanished. Until the next nag.
Considering we're talking about an ad basically, this is very strange behavior. Obtrusive, unavoidable, yet fleeting.
-
I think so too. Alt killed the screen. I could've print screened the whole desktop and cut the message to size. Didn't think I would have to. Too bad.
Usually I have a bunch of windows open, and alt-printscreen is the way to go to avoid getting parts of other programs etc. in the image.
<snip>
Snagit starts of capturing the active window (or whole screen if no active window) but if there are multiple windows open, as you move the cursor around it will shrink to one of the windows you have open. Or you can Left click and hold and drag to capture a subsection of that window.
-
I've used many tools in the past. In the days of Win95/98/2K. For image capture and a zillion other tasks. PowerToys. 3rd party. Etc. All kinds.
In the end I found I can do just fine without most of them and not clutter up my system. All these extra hooks into the OS/GUI/Context Menus, no thanks.
For tasks that aren't daily occurrences, I'll stick with the basics. A few tools that really add useful functionality, and that's it.
Alt by itself shouldn't do anything. Alt is a modifier key. But Avast is an outlier. Or maybe I accidentally hit space or something. Who knows. No way to recreate it and test.
-
Hello InvisibleMan, can you please share your logs? Send them via support tool and provide package ID or please copy and pack logs from c:\ProgramData\AVAST Software\Avast\log\ - feel free to send them directly to me: petr.blatny@avast.com
+I'm really sorry for your trouble, overseer should not cause reboots. It would be great to have your logs and check the cause.
Petr
@petr blatny
I restarted my computer. And it did it again right now!
I'm getting rid of this Overseer. That's it.
Also, it seems like it could triggered by updates of virus definitions.
But it never happened before. Why does computer suddenly require restarting every time I update virus definitions?
Is it because I use Windows 7 instead of most the modern one and nobody tested it on Windows 7? I don't know...
-
@ Rudvleeskroket,
In Windows 10 and 11 the Windows key and the prntsc key take a picture of the entire screen
and auto save it to a folder under Pictures\Screenshots.
You can always trim the picture with another tool or simply post the entire screen.
I've never had that combo fail to take any picture.
-
Good to know. Might come in handy some day. Doesn't seem to work on Win 7 though.
-
Good to know. Might come in handy some day. Doesn't seem to work on Win 7 though.
It works on Windows 10 and 11 as I stated.
-
I can read.
-
I can read.
You're the one who mentioned Windows 7. :)
-
I didn't say I thought it would work in 7.
You said it works in 10 and 11. I said: "Good to know. Might come in handy some day."
You didn't have to repeat yourself. I can read. Thank you very much.
For that matter: I'm not sure why we're even having this whole discussion about taking screenshots. I've been doing that just fine for literal decades. The point is not how to take a screenshot. The point is that Avast pelts you with scary notifications, even explicitly calls them 'notifications', and yet you then aren't in any way able to recall said notifications under the notifications-tab. Nothing there. That's inconsistent behavior, sadly very typical for Avast communications and user interfaces. And members of the Avast team seemingly don't know the stunts their own marketing/upsell-department pull, so they ask us to provide proof via screenshots. What a weird and convoluted way to go about things... I dare say ass-backwards.
-
I didn't say I thought it would work in 7.
You said it works in 10 and 11. I said: "Good to know. Might come in handy some day."
You didn't have to repeat yourself. I can read. Thank you very much.
Here's what you said" Good to know. Might come in handy some day. Doesn't seem to work on Win 7 though.
Avast is still looking for a screenshot.
-
I didn't say I thought it would work in 7.
You said it works in 10 and 11. I said: "Good to know. Might come in handy some day."
You didn't have to repeat yourself. I can read. Thank you very much.
Here's what you said" Good to know. Might come in handy some day. Doesn't seem to work on Win 7 though.
Avast is still looking for a screenshot.
I'll reiterate: I did not say I thought it might, or expected it to, work on 7. You misinterpreted. Let's call it a miscommunication and leave it at that.
-
Hello InvisibleMan, can you please share your logs? Send them via support tool and provide package ID or please copy and pack logs from c:\ProgramData\AVAST Software\Avast\log\ - feel free to send them directly to me: petr.blatny@avast.com
+I'm really sorry for your trouble, overseer should not cause reboots. It would be great to have your logs and check the cause.
Petr
@petr blatny
I restarted my computer. And it did it again right now!
I'm getting rid of this Overseer. That's it.
Also, it seems like it could triggered by updates of virus definitions.
But it never happened before. Why does computer suddenly require restarting every time I update virus definitions?
Is it because I use Windows 7 instead of most the modern one and nobody tested it on Windows 7? I don't know...
I don't really want to go into that trouble, since it's obviously Overseer.
But I will provide you with the confirmation:
1. Yes, it was Overseer. But I never said it caused reboots. It only caused Avast to update/fix itself silently and then Avast in its user interface told me I need to restart my computer.
How do I know it's Overseer?
I actually was checking the time of the last running of the Overseer's task in Window's Task Scheduler: all several instances of this behavior happened within minutes of the last task running. Logic dictates: it was Overseer.
Additionally: ever since I disabled Overseer task and restarted my compuer (again), this problem got fixed!
2. What I suspect could be a reason:
Every instance of this behavior was accompanied by Avast Free Antivirus shortcut appearing on my destkop immediatelly!
I suspect, Overseer's new function is to "fix" the absence of the Avast Free Antivirus shorcut on my desktop,
when I prefer not to clutter my desktop with shortcuts I don't click on very often and keep all rarely used ones in a separate folder.
I suspect it's also because I have Windows 7, and I'm sure that Overseer (and Avast) isn't being tested on this OS all that well.
-
@InvisibleMan
thank you for more details, overseer probably triggers avast installer to repair the AV. We would like to help you and find out why reboot is required repeatedly, but we need to check your logs. Removed desktop shortcut is not a reason for restart, there should be something more in your case.
Logs can be found here:
setup: c:\ProgramData\AVG\Persistent Data\Antivirus\Logs\
ui and svc: c:\ProgramData\AVAST Software\Avast\log\
feel free to send them directly to petr.blatny@avast.com or share them via support tool.
Thank you
-
@InvisibleMan
thank you for more details, overseer probably triggers avast installer to repair the AV. We would like to help you and find out why reboot is required repeatedly, but we need to check your logs. Removed desktop shortcut is not a reason for restart, there should be something more in your case.
Logs can be found here:
setup: c:\ProgramData\AVG\Persistent Data\Antivirus\Logs\
ui and svc: c:\ProgramData\AVAST Software\Avast\log\
feel free to send them directly to petr.blatny@avast.com or share them via support tool.
Thank you
I don't have AVG. Only Avast Free.
What I found unusual and of relevance in the logs is this:
[2022-05-26 15:30:03.955] [info ] [opm_window ] [ 3756: 4624] Constructing of 'toaster' (msg id: 'AVAST_AV_CAMPAIGN_TOASTER_FREE_FULLSCALE')' finished with result '0'.
[2022-05-26 15:30:03.957] [warning] [opm_client ] [ 3756: 4624] Show content by product failed.
[2022-05-26 15:30:03.957] [warning] [nl_client ] [ 3756: 4624] The callee failed under reserve lock, the lock is canceled.
[2022-05-26 15:30:04.024] [info ] [opm_client ] [ 3756: 4624] Opm change event arrived, placement 'toaster' count of message(s) '1'.
[2022-05-26 15:30:04.024] [info ] [opm_client ] [ 3756: 4624] Show content for message id: 'AVAST_AV_CAMPAIGN_TOASTER_FREE_FULLSCALE'
[2022-05-26 15:30:04.024] [info ] [nl_client ] [ 3756: 4624] Reserve action 'toaster_limit' called.
[2022-05-26 15:30:04.025] [info ] [nl_client ] [ 3756: 4624] Reserve action - acknowledge request.
[2022-05-26 15:30:04.026] [info ] [UI:Brows:1 ] [ 3756: 4624] WindowManager::ShowToaster request in Silent mode is IGNORED!
[2022-05-26 15:30:04.026] [info ] [opm_window ] [ 3756: 4624] Constructing of 'toaster' (msg id: 'AVAST_AV_CAMPAIGN_TOASTER_FREE_FULLSCALE')' finished with result '0'.
[2022-05-26 15:30:04.026] [warning] [opm_client ] [ 3756: 4624] Show content by product failed.
[2022-05-26 15:30:04.026] [warning] [nl_client ] [ 3756: 4624] The callee failed under reserve lock, the lock is canceled.
It clearly tried to show me some pop-up message I think, but failed to do so.
Could a failure to show some advertisement pop-up be a reason for the Overseer to try to repair the program?
(The failure itself could be related to me blocking internet access to AvastUI ever since in the past it began nagging me with ads about paid versions I don't have spare money for. But in the past it didn't cause Overseer to try to repair the program.)
-
Hello @InvisibleMan, Avast path is: c:\ProgramData\AVAST Software\Persistent Data\Avast\Logs\
And a blocked popup is not a reason for reboot or a trigger for overseer to ask for a repair. Blocking Internet access to Avast UI could not cause that neither.
Btw, we did some changes to overseer, is the restart still triggered in you case?
Petr
-
Hello @InvisibleMan, Avast path is: c:\ProgramData\AVAST Software\Persistent Data\Avast\Logs\
And a blocked popup is not a reason for reboot or a trigger for overseer to ask for a repair. Blocking Internet access to Avast UI could not cause that neither.
Btw, we did some changes to overseer, is the restart still triggered in you case?
Petr
Ah, that's it!
In this directory I found different log files than in the one you gave me previously.
And one file was last updated just recently (2022-05-23), when I had to restart my computer for the very last time, before I disabled Overseer.
It's called AvEmUpdate.log
Here are the last portion of the log on "pastebin",
which inludes ALL those reboots it caused me, related to this update file C:\Program Files\Avast Software\Avast\setup\auup697.exe
Last log entries: https://pastebin.com/brmtVgrm (https://pastebin.com/brmtVgrm)
It looks like it tried to apply the same exact update http://uupdate.avast.com/files/emupdate/avast_21_r8_697.cabfor three times and all three times the application requested me to reboot my computer (and re-created an avast shortcut on my desktop which I didn't need).
Hopefully that should help you to identify what was going on. :)
Btw, we did some changes to overseer, is the restart still triggered in you case?
I didn't risk to enable it just yet. But if the relevant logs you helped me to find above will confirm that the changes you made to overseer should stop it from applying the same update more than one time within a few days, please let me know, so I can enable Overseer task back to test it.
P.S. Maybe it's not even overseer issue? Maybe it's an Emergency update issue?
The thing is, I disabeld BOTH tasks in Task Scheduler, including Overseer and Emergency update (just in case) to stop my avast from requesting those reboots.
-
Hello @InvisibleMan
can you please upload following log files (if they exist)?
c:\ProgramData\AVAST Software\Persistent Data\Avast\Logs\Setup.log
c:\ProgramData\AVAST Software\Persistent Data\Avast\Logs\Update.log
c:\ProgramData\AVAST Software\Persistent Data\Avast\Logs\Setup.log.old
c:\ProgramData\AVAST Software\Persistent Data\Avast\Logs\Update.log.old
Thanks, Roman
-
Hello @InvisibleMan
can you please upload following log files (if they exist)?
c:\ProgramData\AVAST Software\Persistent Data\Avast\Logs\Setup.log
c:\ProgramData\AVAST Software\Persistent Data\Avast\Logs\Update.log
c:\ProgramData\AVAST Software\Persistent Data\Avast\Logs\Setup.log.old
c:\ProgramData\AVAST Software\Persistent Data\Avast\Logs\Update.log.old
Thanks, Roman
Hello.
Only three of those are in that folder.
I sent you a private message with a link on google drive to a ZIP archive with them.
-
Hello @InvisibleMan
can you please upload following log files (if they exist)?
c:\ProgramData\AVAST Software\Persistent Data\Avast\Logs\Setup.log
c:\ProgramData\AVAST Software\Persistent Data\Avast\Logs\Update.log
c:\ProgramData\AVAST Software\Persistent Data\Avast\Logs\Setup.log.old
c:\ProgramData\AVAST Software\Persistent Data\Avast\Logs\Update.log.old
Thanks, Roman
Hello.
Only three of those are in that folder.
I sent you a private message with a link on google drive to a ZIP archive with them.
Thank you. I can see in Update.log.old that multiple repairs were started. Avast Free Antivirus.lnk was re-created. But none of the repairs led to require reboot.
Can you please also upload the whole directory
c:\ProgramData\AVAST Software\Avast\log\
Roman
-
Hello @InvisibleMan
can you please upload following log files (if they exist)?
c:\ProgramData\AVAST Software\Persistent Data\Avast\Logs\Setup.log
c:\ProgramData\AVAST Software\Persistent Data\Avast\Logs\Update.log
c:\ProgramData\AVAST Software\Persistent Data\Avast\Logs\Setup.log.old
c:\ProgramData\AVAST Software\Persistent Data\Avast\Logs\Update.log.old
Thanks, Roman
Hello.
Only three of those are in that folder.
I sent you a private message with a link on google drive to a ZIP archive with them.
Thank you. I can see in Update.log.old that multiple repairs were started. Avast Free Antivirus.lnk was re-created. But none of the repairs led to require reboot.
Can you please also upload the whole directory
c:\ProgramData\AVAST Software\Avast\log\
Roman
I think you misunderstood. I didn't get a pop-up that prompted me to reboot.
It's just I manually opened the program's GUI interface to see what's going on whenever I saw Avast Free Antivirus.lnk appear on my desktop.
The program had this text shown in its main window, that was similar to this:
You are still protected, but you should reboot as soon as possible.After each reboot that text disappeared for a while.
Are you completely sure that this kind of behavior is impossible on Windows 7 SP1 and Avast Free v21.8 ?
I don't want to send that folder with logs, since I notice in some of those files information that I consider private.
And I really don't think those would help you anyway.
I have a question about what you said
I can see in Update.log.old that multiple repairs were started.
Why exactly among those repairs it applied the same looking update for THREE times?
This update:
http://uupdate.avast.com/files/emupdate/avast_21_r8_697.cabIt definitely tried to install the same update within a few days.
Was it supposed to be like that?
It's not even a question about reboot prompts anymore.
In any case, after getting rid of emergency updater and overseer tasks, everything works as expected now on my computer.