Author Topic: Analytics disabled, avast! still connecting?  (Read 12254 times)

0 Members and 1 Guest are viewing this topic.

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9415
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Analytics disabled, avast! still connecting?
« on: August 18, 2019, 07:23:51 PM »
I have all avast! analytics disabled with only first option enabled (for cloud detections) under Privacy menu. avast! Premium Security v19.7, activated with license.

Why avast! keeps connecting to:
analytics.ff.avast.com
ipm-provider.ff.avast.com
v7.stats.avast.com
v7event.stats.avast.com
ip-info.ff.avast.com

The gateway filter I have doesn't seem to like these as a lot of block lists are blocking all of them. Are some part of cloud by any chance, but I'm fairly certain "analytics", "stats" and "ip-info" ones aren't.
Visit my webpage Angry Sheep Blog

Offline Lord_Ami

  • Sr. Member
  • ****
  • Posts: 227
Re: Analytics disabled, avast! still connecting?
« Reply #1 on: August 18, 2019, 07:26:27 PM »
+1.

AVG IS and Avast Premier: same result on both. Fishy if you ask me... ???

Offline Patrick2

  • Poster
  • *
  • Posts: 489
Re: Analytics disabled, avast! still connecting?
« Reply #2 on: August 18, 2019, 11:38:16 PM »
+2

Wonder if it's still secretly sending data to those urls even when unchecked by users..hmmms     Should be if a user wants to opt out of all but first option, those urls shouldn't be trying to connect anymore in my eyes in the matter.    I know on the internet there is no privacy, but still trying to keep amount of data sent down  isn't bad thing I feel either,  do have a Comcast Xfinity Data cap,  with 3 Machines used in the household, it may add up

« Last Edit: August 19, 2019, 12:10:23 AM by Patrick2 »
Windows 10 Pro 64bit 1909 18363.476, Intel I7 7700 Nvidia Geforce 1050 16gb DDR4, WD 250GBSSD, 1tb Storage, Avast Free 19.8.2393
HP Omen Laptop Intel I7 7700HQ, 8gb Of Ram Windows 10 Home x64 1909 18363.476 128GB SSD, 1tb Storage, Avast Free 19.8.2393

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48468
  • 63 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Analytics disabled, avast! still connecting?
« Reply #3 on: August 19, 2019, 12:14:29 AM »
+2

Wonder if it's still secretly sending data to those urls even when unchecked by users..hmmms     Should be if a user wants to opt out of all but first option, those urls shouldn't be trying to connect anymore in my eyes in the matter.    I know on the internet there is no privacy, but still trying to keep amount of data sent down  isn't bad thing I feel either,  do have a Comcast Xfinity Data cap,  with 3 Machines used in the household, it may add up
If you are so concerned, why are you still using the product? You do have a choice. :)
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9415
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re: Analytics disabled, avast! still connecting?
« Reply #4 on: August 19, 2019, 08:08:19 AM »
+2

Wonder if it's still secretly sending data to those urls even when unchecked by users..hmmms     Should be if a user wants to opt out of all but first option, those urls shouldn't be trying to connect anymore in my eyes in the matter.    I know on the internet there is no privacy, but still trying to keep amount of data sent down  isn't bad thing I feel either,  do have a Comcast Xfinity Data cap,  with 3 Machines used in the household, it may add up
If you are so concerned, why are you still using the product? You do have a choice. :)

Well, that's where we're gonna disagree with your argument. When you disable these things and product does them anyway, it's not a "well then just use something else". The thing needs to be addressed by the company. Unless they want mass loss of users because of it coz they will do what you suggest. I've already seen tons of them leaving for Windows Defender after last test results spread over internet like wildfire. And they already say avast! is a spyware...
Visit my webpage Angry Sheep Blog

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48468
  • 63 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Analytics disabled, avast! still connecting?
« Reply #5 on: August 19, 2019, 02:33:25 PM »
+2

Wonder if it's still secretly sending data to those urls even when unchecked by users..hmmms     Should be if a user wants to opt out of all but first option, those urls shouldn't be trying to connect anymore in my eyes in the matter.    I know on the internet there is no privacy, but still trying to keep amount of data sent down  isn't bad thing I feel either,  do have a Comcast Xfinity Data cap,  with 3 Machines used in the household, it may add up
If you are so concerned, why are you still using the product? You do have a choice. :)

Well, that's where we're gonna disagree with your argument. When you disable these things and product does them anyway, it's not a "well then just use something else". The thing needs to be addressed by the company. Unless they want mass loss of users because of it coz they will do what you suggest. I've already seen tons of them leaving for Windows Defender after last test results spread over internet like wildfire. And they already say avast! is a spyware...
The user is speculating. "Wonder if". Naturally if you selected no then that needs to happen.
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline NON

  • Japanese User
  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5459
  • Whatever will be, will be.
Re: Analytics disabled, avast! still connecting?
« Reply #6 on: August 19, 2019, 02:41:36 PM »
I surely read this somewhere on the forum some time ago: VPS update does send some information about software versions or like that and this cannot be disabled.
Desktop: Win10 Pro 22H2 64bit / Core i5-7400 3.0GHz / 32GB RAM / Avast 23 Premium Beta(Icarus) / Comodo Firewall
Notebook: Win10 Pro 22H2 64bit / Core i5-3340M 2.7GHz / 12GB RAM / Avast 23 Free / Windows Firewall Control
Server: Win11 Pro 23H2 64bit / Core i3-4010U 1.7GHz / 12GB RAM / Avast One 23 Essential

Avast の設定について解説しています。よろしければご覧ください。

Offline top_stuff

  • Jr. Member
  • **
  • Posts: 21
Re: Analytics disabled, avast! still connecting?
« Reply #7 on: August 19, 2019, 02:44:44 PM »
My own testing confirms what the OP says is correct.
Not good.

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48468
  • 63 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Analytics disabled, avast! still connecting?
« Reply #8 on: August 19, 2019, 02:45:38 PM »
My own testing confirms what the OP says is correct.
Not good.
Sending what exactly? Thanks
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline top_stuff

  • Jr. Member
  • **
  • Posts: 21
Re: Analytics disabled, avast! still connecting?
« Reply #9 on: August 19, 2019, 02:51:14 PM »
My own testing confirms what the OP says is correct.
Not good.
Sending what exactly? Thanks

A lot of it is encrypted, so who knows what. Can assume too much.
And it isn't only for VPS updates. At startup, and various execution of programs and various
other triggers.


Offline NON

  • Japanese User
  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5459
  • Whatever will be, will be.
Re: Analytics disabled, avast! still connecting?
« Reply #10 on: August 19, 2019, 02:53:15 PM »
AFAIK ipm-provider is part of Avast GUI so if you open AvastUI then some connection to them will occur...
Desktop: Win10 Pro 22H2 64bit / Core i5-7400 3.0GHz / 32GB RAM / Avast 23 Premium Beta(Icarus) / Comodo Firewall
Notebook: Win10 Pro 22H2 64bit / Core i5-3340M 2.7GHz / 12GB RAM / Avast 23 Free / Windows Firewall Control
Server: Win11 Pro 23H2 64bit / Core i3-4010U 1.7GHz / 12GB RAM / Avast One 23 Essential

Avast の設定について解説しています。よろしければご覧ください。

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9415
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re: Analytics disabled, avast! still connecting?
« Reply #11 on: August 20, 2019, 01:15:47 AM »
Things like this should be more transparent with appropriate non-cryptic domains connecting. If you name domain stupid names, we'll assume stupid things. Name them self explanatory and we won't.
Visit my webpage Angry Sheep Blog

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9415
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re: Analytics disabled, avast! still connecting?
« Reply #12 on: August 23, 2019, 07:14:59 AM »
Getting no response by anyone to this inquiry for days is a bit worrying...
Visit my webpage Angry Sheep Blog

Offline MartinZ

  • Advanced Poster
  • **
  • Posts: 1057
  • Product Manager
Re: Analytics disabled, avast! still connecting?
« Reply #13 on: August 27, 2019, 05:10:04 PM »
Hi RejZor, sorry for delay we posted an asnwer to this topic in different thread. These domains are used for our own internal analytics and it's not possible to opt out from them. There are necessary for the AV functionality.

Offline lukor

  • Administrator
  • Super Poster
  • ***
  • Posts: 1885
    • AVAST Software
Re: Analytics disabled, avast! still connecting?
« Reply #14 on: August 27, 2019, 05:31:08 PM »
RejZoR,
What happened? Avast is not an offline AV, it still provides quite a lot of functions with the help of our backends, and the list is getting bigger every day.

For example, ip-info.ff.avast.com provides the client with information about its wan IP address, such as ISP and ASN, and it's used it several places, such as displaying ISP in Wifi-inspector scans network detail. No connection with any 3rd party (or 1st party) analytics here.

Avast uses v7.stats.avast.com when downloading a new VPS (afaik the only usage I know), v7event records the result of VPS update -- success/failure/old-program, AFAIK you can not receive VPS updates without accessing these two - unless you would be downloading the updates manually.

"ipm-provider" is hosting parts of our UI, so again, no possibility to use the product without accessing this one.

And the last one - analytics - well, as the name suggests, its the source of all our data for all data analysis and AI, from detections to error reports. With cloud detections, there will for sure be several accesses to this guy, CyberCapture connects here and many other components. Again, the same domain is used for other products if the submits are on, but it is also essential for the core AV product.

RejzoR, sorry to have kept you waiting for a response. None of this is very new. It has been like this for many years, didn't expect that someone so seasoned would be surprised and worried. While Avast works better when connected to our backends, fully offline setups are also possible, several of our enterprise customers are using Avast like that. You would have to resort to blocking *.avast.com on the firewall and then providing the AV with VPS updates manually.

One last thing, you mentioned that a couple of blacklists are blocking some or all of Avast core domains? Can you give me an example of such a list or a product that does that? We are facing complains (from time to time) from users about not getting the latest version of VPS, or mismatched versions of the UI and the scanning service - I'd like to know more. If anyone is deliberately blocking these - we might at least stop hunting for it as a bug and let the support team be aware.

Thanks a lot.
Lukas.