Author Topic: Software Updater and Open Candy  (Read 32380 times)

0 Members and 1 Guest are viewing this topic.

Offline NoelC

  • Poster
  • *
  • Posts: 569
Re: Software Updater and Open Candy
« Reply #45 on: July 15, 2014, 10:22:11 PM »
Thank you, Igor.

But, with all due respect, how can you really know for sure?  It's a signed binary - that implies you didn't build it from source and packaged the binary file just as given to you by OpenCandy.  Therefore only they know what's in there.  Are you saying that no part of the existing installation of Avast calls into it any more?

I assume this DLL will be absent from the next update.  Will the updater remove old DLLs such as this one that are no longer a part of the current package?

And by the way, it appears to be protected against direct deletion.

-Noel

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 45664
  • 61 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Software Updater and Open Candy
« Reply #46 on: July 15, 2014, 11:11:17 PM »
Thank you, Igor.

But, with all due respect, how can you really know for sure?  It's a signed binary - that implies you didn't build it from source and packaged the binary file just as given to you by OpenCandy.  Therefore only they know what's in there.  Are you saying that no part of the existing installation of Avast calls into it any more?

I assume this DLL will be absent from the next update.  Will the updater remove old DLLs such as this one that are no longer a part of the current package?

And by the way, it appears to be protected against direct deletion.

-Noel
Removal is easy enough and avast! seems to run just fine without it.
https://drive.google.com/file/d/0B-vSic0iJgyeRXd6WTdZZVlyV1k/edit?usp=sharing
I'll see if it returns after a program update or a VPS update. :)
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v21H2 64bit, 16 Gig Ram, 1TB SSD, AvastOmni 21.6, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline NoelC

  • Poster
  • *
  • Posts: 569
Re: Software Updater and Open Candy
« Reply #47 on: July 16, 2014, 06:14:40 AM »
Seems to me that disabling self defense would reduce security overall in other ways, but thanks.

-Noel

Offline mchain

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 5420
  • Spartan Warrior
Re: Software Updater and Open Candy
« Reply #48 on: July 16, 2014, 06:31:52 AM »
@ NoelC,

True.

Just re-tick the box for the self-defense option (re-enable it) when done with the operation.  When self-defense is active is when you will get the access denied errors, otherwise you won't when you disable it first, when one attempts to modify, move, or delete an avast! file.
Windows 10 Home 64-bit 20H2 Avast Premier Security version 21.3.2459 (build 21.3.6164.652) UI version 1.0.612.

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 45664
  • 61 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Software Updater and Open Candy
« Reply #49 on: July 16, 2014, 11:57:57 AM »
Seems to me that disabling self defense would reduce security overall in other ways, but thanks.

-Noel
The suggestion was never to disable self defense on a permanent basis.  :o
As mentioned, if you need to make any changes to anything avast! related,
the self defense module will stop you and the cyber crook from doing so.
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v21H2 64bit, 16 Gig Ram, 1TB SSD, AvastOmni 21.6, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline NoelC

  • Poster
  • *
  • Posts: 569
Re: Software Updater and Open Candy
« Reply #50 on: July 17, 2014, 04:52:03 AM »
Did you miss the part where the Avast employee said the file would come back on its own?

And do we know the implications of their software trying to call a module that's not there?  We would hope the code is defensive and handles the error of a missing library okay, but we just don't know.  I'll bet it wasn't tested much that way.

Thanks, but I'll just wait for it to be eliminated in due time.

-Noel

Offline mchain

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 5420
  • Spartan Warrior
Re: Software Updater and Open Candy
« Reply #51 on: July 17, 2014, 05:10:38 AM »
Maybe.

I've removed it and so far, it's gone. 

[EDIT:]  There have been no errors or alerts or info boxes since this file was removed.
« Last Edit: July 17, 2014, 05:13:27 AM by mchain »
Windows 10 Home 64-bit 20H2 Avast Premier Security version 21.3.2459 (build 21.3.6164.652) UI version 1.0.612.

Offline MartinZ

  • Moderator
  • Advanced Poster
  • *
  • Posts: 1070
  • Product Manager
Re: Software Updater and Open Candy
« Reply #52 on: July 17, 2014, 02:21:05 PM »
Hi,

the aswRec.dll will be fixed via micro-update during next week.


Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 45664
  • 61 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Software Updater and Open Candy
« Reply #53 on: July 17, 2014, 04:33:05 PM »
Hi,

the aswRec.dll will be fixed via micro-update during next week.
Thanks Martin,
Does that mean it will be removed ???
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v21H2 64bit, 16 Gig Ram, 1TB SSD, AvastOmni 21.6, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline Gopher John

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2098
Re: Software Updater and Open Candy
« Reply #54 on: July 17, 2014, 05:28:27 PM »
Hi,

the aswRec.dll will be fixed via micro-update during next week.
Thanks Martin,
Does that mean it will be removed ???

+1
AMD A6-5350M APU with Radeon HD Graphics, 8.0GB RAM, Win7 Pro SP1 64bit, IE11
i7-3610QM 2.3GHZ, 8.0GB Ram,  Nvidia GeForce GT 630M 2GB, Win7 Pro SP1 64bit, IE 11
Common to both: Avast Premium Security 19.7.2388, WinPatrol Plus, SpywareBlaster 5.5, Opera 12.18, Firefox 68.0.2, MBam Free, CCleaner

Offline novi

  • Newbie
  • *
  • Posts: 4
Re: Software Updater and Open Candy
« Reply #55 on: August 18, 2016, 01:26:02 PM »
Sorry for replying on this old post but I wasn't sure whether would be a good idea in duplicating topics.
Issue I have noticed today is that the file detection is triggered by Avast itself other than third party AV.
The detection is triggered while performing a Boot-time scan as per picture uploaded.
Is that normal? Anyone knows anything?
I have also another pc with avast and when I scan the file from within windows explorer with Avast or MalwareBytes there is no detection triggered.

Thanks

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 45664
  • 61 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Software Updater and Open Candy
« Reply #56 on: August 18, 2016, 01:38:57 PM »

It's never a good idea to re-open an ancient thread. :)
Many things change in this long a time frame.
Remember that there are different settings and parameters for different types of scans. Something "detected" by one need not be detected by a different type of scan.
Also note that a PUP is a possible unwanted program that's different than an infection.
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v21H2 64bit, 16 Gig Ram, 1TB SSD, AvastOmni 21.6, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline novi

  • Newbie
  • *
  • Posts: 4
Re: Software Updater and Open Candy
« Reply #57 on: August 18, 2016, 01:59:13 PM »
I kind of agree with that although as a forum admin perhaps the topic should be just locked out after a certain amount of inactivity.
I understand this is a PUP detection but do you know more on why this is triggered anyway as it sounds a bit strange that an AV product detects a DLL of their own?

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 45664
  • 61 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Software Updater and Open Candy
« Reply #58 on: August 18, 2016, 02:05:22 PM »
I kind of agree with that although as a forum admin perhaps the topic should be just locked out after a certain amount of inactivity.
I understand this is a PUP detection but do you know more on why this is triggered anyway as it sounds a bit strange that an AV product detects a DLL of their own?
Deciding if a pup is dangerous or unwanted is a decision made by the user and depends on where it's found.
The scan simply informs you of what it's found. It's up to the user or, the person instructing you to run this scan, to make the decision. It's also one of the reasons why in most instances,
a boot scan is only run when asked and usually any changes made from detections are supervised.
A boot time scan isn't meant to be run by a novice. :)
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v21H2 64bit, 16 Gig Ram, 1TB SSD, AvastOmni 21.6, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline Cluster-Lizard2014

  • Sr. Member
  • ****
  • Posts: 307
Re: Software Updater and Open Candy
« Reply #59 on: August 18, 2016, 02:10:58 PM »
The cause of the anomaly between the Boot Time AVAST scan report and an ordinary AVAST scan is probably simply because, by default, all AVAST's AV scan setting options have PUP detection turned off. Unless you enable it AVAST doesn't scan for PUPs.

However  the Boot Time option scans for everything and by default PUP detection is turned on. It can be turned off in the Boot Time scan Settings.

To get rid of Open Candy I'd do a manual scan with free Malwarebytes or Spybot. When I last had Open Candy sneak onto my computer both picked it up during my regular weekly scans.

How it got on to my system when I have AVAST set to include PUPs and everything I download manually is scanned with Malwarebytes as well suggests it was integrated into some otherwise trustworthy installer or update software.