Author Topic: Avast installed itself  (Read 74232 times)

0 Members and 1 Guest are viewing this topic.

Offline MartinZ

  • Avast team
  • Advanced Poster
  • *
  • Posts: 1069
  • Product Manager
Re: Avast installed itself
« Reply #30 on: June 20, 2018, 06:06:21 PM »
20h is definitely weird.
can you please look into C:\Program Files\Avast Software\Avast\setup\setup.ini
what Cookie= value you have inside?

Offline craudio

  • Newbie
  • *
  • Posts: 3
Re: Avast installed itself
« Reply #31 on: June 20, 2018, 06:16:16 PM »
20h is definitely weird.
can you please look into C:\Program Files\Avast Software\Avast\setup\setup.ini
what Cookie= value you have inside?

I believe that I have deleted everything with the name "Avast" in it. I'm not at home now, I'll look for it and let you know later.

Offline Idit2

  • Newbie
  • *
  • Posts: 8
Re: Avast installed itself
« Reply #32 on: June 20, 2018, 10:53:18 PM »
It should be enough to look into setup logs and look for "/cookie:" parameters. If Avast comes with a bundle, there should be identifier of such bundle and we can investigate more.

Hi drake,

In my Setup.log I searched for /cookie: and found the following lines (in different places in the file)


[2018-05-26 12:10:02.412] [info   ] [instup     ] [ 3256:11028] Command: '"C:\Users\someone\AppData\Local\Temp\_av_iup.tm~a06084\instup.exe" /edition:1 /ga_clientid:abc20872-bc9c-4cc8-9262-8326c66f1407 /guid:eb3c70da-372d-422a-88a3-c1bc3d0fb30d /prod:ais /sfx:lite /sfxstorage:C:\Users\someone\AppData\Local\Temp\_av_iup.tm~a06084 /cookie:mmm_lvs_ppi_002_967_n /ga_clientid:abc20872-bc9c-4cc8-9262-8326c66f1407 /silent'

[2018-05-26 12:10:11.892] [info   ] [system     ] [ 3256:11028] Executing '"C:\Users\someone\AppData\Local\Temp\_av_iup.tm~a06084\New_12040922\instup.exe" /cookie:mmm_lvs_ppi_002_967_n /edition:1 /ga_clientid:abc20872-bc9c-4cc8-9262-8326c66f1407 /guid:eb3c70da-372d-422a-88a3-c1bc3d0fb30d /online_installer /prod:ais /sfx /sfxstorage:C:\Users\someone\AppData\Local\Temp\_av_iup.tm~a06084 /silent'.

[2018-05-26 12:10:12.341] [info   ] [instup     ] [12452: 7344] Command: '"C:\Users\someone\AppData\Local\Temp\_av_iup.tm~a06084\New_12040922\instup.exe" /cookie:mmm_lvs_ppi_002_967_n /edition:1 /ga_clientid:abc20872-bc9c-4cc8-9262-8326c66f1407 /guid:eb3c70da-372d-422a-88a3-c1bc3d0fb30d /online_installer /prod:ais /sfx /sfxstorage:C:\Users\someone\AppData\Local\Temp\_av_iup.tm~a06084 /silent'


Can we learn anything from this?


Offline Idit2

  • Newbie
  • *
  • Posts: 8
Re: Avast installed itself
« Reply #33 on: June 20, 2018, 11:35:13 PM »
[

Did you also find the Avast antivirus program installed, or was it just the browser extension?  And did you already have some active antivirus on your system, with real-time protection enabled?

Avast antivirus was installed as well. I had to remove it from "Add and Remove Programs" and restart.
I don't have another antivirus other than the default Windows Defender that is a part of Windows 10. I'm not sure it was enabled though.

Well with Windows 10, Defender will fully activate itself unless you disable it, or if it automatically detects a 3rd party antivirus solution installed.  If it detects another AV, it will go into passive mode.  If you uninstall your current AV, Defender will pick up the slack.  That's actually a good call on Microsoft's part!

But the installer for Avast had to arrive on your machine bundled with something else.  I can't imagine it just appearing out of the ether.  In my case earlier, I had Bitdefender running on a Windows 7 machine, and when I updated CCleaner, it installed Avast!  There was a known issue where that install was supposed to be optional, but apparently CCleaner missed something in the GUI that did not show ME the opt out.  It was probably a rare corner case, but it did happen!

That was long winded, but I must assume something else was updated on your computer that invited Avast aboard.   ;)

I assume so too, I know programs don't get installed from the air :) but I would like to know what it was, and more then that I think the Avast team should find what it was, since things like that will give them a bad rep.
No program, however legitimately installed or updated, should install a different program without asking the user and letting us opt-out.
This is malware-like behavior.

« Last Edit: June 20, 2018, 11:44:40 PM by Idit2 »

Offline bob3160

  • Avast √úberevangelist
  • Probably Bot
  • *****
  • Posts: 43915
  • 60 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Avast installed itself
« Reply #34 on: June 21, 2018, 12:47:56 AM »
[

Did you also find the Avast antivirus program installed, or was it just the browser extension?  And did you already have some active antivirus on your system, with real-time protection enabled?

Avast antivirus was installed as well. I had to remove it from "Add and Remove Programs" and restart.
I don't have another antivirus other than the default Windows Defender that is a part of Windows 10. I'm not sure it was enabled though.

Well with Windows 10, Defender will fully activate itself unless you disable it, or if it automatically detects a 3rd party antivirus solution installed.  If it detects another AV, it will go into passive mode.  If you uninstall your current AV, Defender will pick up the slack.  That's actually a good call on Microsoft's part!

But the installer for Avast had to arrive on your machine bundled with something else.  I can't imagine it just appearing out of the ether.  In my case earlier, I had Bitdefender running on a Windows 7 machine, and when I updated CCleaner, it installed Avast!  There was a known issue where that install was supposed to be optional, but apparently CCleaner missed something in the GUI that did not show ME the opt out.  It was probably a rare corner case, but it did happen!

That was long winded, but I must assume something else was updated on your computer that invited Avast aboard.   ;)

I assume so too, I know programs don't get installed from the air :) but I would like to know what it was, and more then that I think the Avast team should find what it was, since things like that will give them a bad rep.
No program, however legitimately installed or updated, should install a different program without asking the user and letting us opt-out.
This is malware-like behavior.
It is malware like behavior on the part of the program that installed Avast. In this case, it isn't Avast doing the installation but,
Avast is being installed via that other program.
One of the reasons to always do custom installs regardless of what you install.
It's also a good Idea to have Unchecky ( https://unchecky.com/ ) running in the background in case you miss something.
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 10 Pro v1909 64bit, 24 Gig Ram, 1TB SSD, AvastOmni 20.3.xxx, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline Idit2

  • Newbie
  • *
  • Posts: 8
Re: Avast installed itself
« Reply #35 on: June 21, 2018, 01:11:22 AM »
[

Did you also find the Avast antivirus program installed, or was it just the browser extension?  And did you already have some active antivirus on your system, with real-time protection enabled?

Avast antivirus was installed as well. I had to remove it from "Add and Remove Programs" and restart.
I don't have another antivirus other than the default Windows Defender that is a part of Windows 10. I'm not sure it was enabled though.

Well with Windows 10, Defender will fully activate itself unless you disable it, or if it automatically detects a 3rd party antivirus solution installed.  If it detects another AV, it will go into passive mode.  If you uninstall your current AV, Defender will pick up the slack.  That's actually a good call on Microsoft's part!

But the installer for Avast had to arrive on your machine bundled with something else.  I can't imagine it just appearing out of the ether.  In my case earlier, I had Bitdefender running on a Windows 7 machine, and when I updated CCleaner, it installed Avast!  There was a known issue where that install was supposed to be optional, but apparently CCleaner missed something in the GUI that did not show ME the opt out.  It was probably a rare corner case, but it did happen!

That was long winded, but I must assume something else was updated on your computer that invited Avast aboard.   ;)

I assume so too, I know programs don't get installed from the air :) but I would like to know what it was, and more then that I think the Avast team should find what it was, since things like that will give them a bad rep.
No program, however legitimately installed or updated, should install a different program without asking the user and letting us opt-out.
This is malware-like behavior.
It is malware like behavior on the part of the program that installed Avast. In this case, it isn't Avast doing the installation but,
Avast is being installed via that other program.
One of the reasons to always do custom installs regardless of what you install.
It's also a good Idea to have Unchecky ( https://unchecky.com/ ) running in the background in case you miss something.


I agree, and I always do customs installs.
In this case I'm not aware that I have installed anything, so whatever it was - I believe it was a silent process.

On the face of it, it may be claimed that Avast is "not at fault" if it was silently installed by something else, but when a program is bundled with another it's usually a case of co-operation between the companies, and not out of the "good will" of the installing program.
In any case, until the other program is found and declared, Avast remains the only address to complain to, and the one that suffers from the bad rep.


Offline mchain

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 5416
  • Spartan Warrior
Re: Avast installed itself
« Reply #36 on: June 21, 2018, 05:37:01 PM »
@ Idit,

Appears installation was indeed silent per your cookie data.
Windows 10 Home 64-bit 1909 Avast Premier Security version 20.1.2397 (build 20.1.5069.559) UI version 1.0.460.

Offline Idit2

  • Newbie
  • *
  • Posts: 8
Re: Avast installed itself
« Reply #37 on: June 21, 2018, 07:13:48 PM »
@ Idit,

Appears installation was indeed silent per your cookie data.

Thanks, mchain. Any idea by what/how?

Offline churrero

  • Newbie
  • *
  • Posts: 2
Re: Avast installed itself
« Reply #38 on: June 22, 2018, 01:18:23 AM »
I have had the same problem. Avast has installed itself on my computer. It seems that it was installed with Easeus Partition Master Free (downloaded from its official website).

The most curious thing is that it is not installed at the moment, but after a while, it is a silent and delayed installation.

Now it is already uninstalled, and I also passed avastclear.exe. But I still do not understand how it could be installed, I rejected all the promotional software during the installation of Easeus Partition Master.

Offline mchain

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 5416
  • Spartan Warrior
Re: Avast installed itself
« Reply #39 on: June 22, 2018, 02:56:57 AM »
@ Idit,

Appears installation was indeed silent per your cookie data.

Thanks, mchain. Any idea by what/how?
Not a clue as I'm not with the Avast Team.  But a silent install would go a ways to explaining things.

Drake is an Avast Team Member.  Best to wait for his answer.
I have had the same problem. Avast has installed itself on my computer. It seems that it was installed with Easeus Partition Master Free (downloaded from its official website).

The most curious thing is that it is not installed at the moment, but after a while, it is a silent and delayed installation.

Now it is already uninstalled, and I also passed avastclear.exe. But I still do not understand how it could be installed, I rejected all the promotional software during the installation of Easeus Partition Master.

Get Unchecky here:  https://unchecky.com/

« Last Edit: June 22, 2018, 02:58:33 AM by mchain »
Windows 10 Home 64-bit 1909 Avast Premier Security version 20.1.2397 (build 20.1.5069.559) UI version 1.0.460.

Offline churrero

  • Newbie
  • *
  • Posts: 2
Re: Avast installed itself
« Reply #40 on: June 22, 2018, 01:15:19 PM »

Get Unchecky here:  https://unchecky.com/

Out of curiosity I've tested Unchecky on a virtual machine and does absolutely nothing to avoid installing unwanted software during the installation of Easeus Partition Master free. I have even accepted the installation of that software and it has not done anything.

Offline mchain

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 5416
  • Spartan Warrior
Re: Avast installed itself
« Reply #41 on: June 22, 2018, 08:52:56 PM »

Get Unchecky here:  https://unchecky.com/

Out of curiosity I've tested Unchecky on a virtual machine and does absolutely nothing to avoid installing unwanted software during the installation of Easeus Partition Master free. I have even accepted the installation of that software and it has not done anything.
Maybe the author of the program needs to update his program?  Possible to help by letting him know.
Windows 10 Home 64-bit 1909 Avast Premier Security version 20.1.2397 (build 20.1.5069.559) UI version 1.0.460.

Offline johnr4

  • Newbie
  • *
  • Posts: 1
Re: Avast installed itself
« Reply #42 on: June 28, 2018, 08:02:37 PM »
Here is the answer to why Avast Installed itself...at least for my customers...

See this article...

https://www.ghacks.net/2017/11/19/avast-bundles-ccleaner-with-avast-free-antivirus/

Avast bought Piriform - the maker of CCleaner and started bundling it with it's free CCLeaner download.

Check it out...do custom installs of CCleaner form now on and UN Select AVAST.

Cheers!

Offline Idit2

  • Newbie
  • *
  • Posts: 8
Re: Avast installed itself
« Reply #43 on: June 28, 2018, 09:28:42 PM »
Here is the answer to why Avast Installed itself...at least for my customers...

See this article...

https://www.ghacks.net/2017/11/19/avast-bundles-ccleaner-with-avast-free-antivirus/

Avast bought Piriform - the maker of CCleaner and started bundling it with it's free CCLeaner download.

Check it out...do custom installs of CCleaner form now on and UN Select AVAST.

Cheers!

Thanks, johnr4 :) but I didn't install CCleaner at all, and don't have it on my computer, so it must be something else in my case.

Offline bob3160

  • Avast √úberevangelist
  • Probably Bot
  • *****
  • Posts: 43915
  • 60 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Avast installed itself
« Reply #44 on: June 28, 2018, 09:36:57 PM »
Here is the answer to why Avast Installed itself...at least for my customers...

See this article...

https://www.ghacks.net/2017/11/19/avast-bundles-ccleaner-with-avast-free-antivirus/

Avast bought Piriform - the maker of CCleaner and started bundling it with it's free CCLeaner download.

Check it out...do custom installs of CCleaner form now on and UN Select AVAST.

Cheers!

Thanks, johnr4 :) but I didn't install CCleaner at all, and don't have it on my computer, so it must be something else in my case.
That article also referrers to the installation of Ccleaner if you already have Avast Free.
It doesn't mention anything about installing Avast.
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 10 Pro v1909 64bit, 24 Gig Ram, 1TB SSD, AvastOmni 20.3.xxx, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq