Random split second pop up

[xSean]

So have been getting it again, but also have had it act slower which has been more useful.
Slow enough that I can even open up Task Manager to see the PID.

Image of popup: https://i.imgur.com/eGRicsj.png
Image of Avast in Task Manager: https://i.imgur.com/iBMaGso.png

It has a PID of 9344 and it looks like it is related to an attempt to send data through Google Analytics (even though I have all settings that are available related to sharing data disabled).

9344 vanishes once the popup is gone.
Here's a chunk of AvastUI.log that corresponds with both the ID and the timing:

Code: [Select]

[2020-09-21 15:27:12.368] [info   ] [base_init  ] [ 9344: 9348] Entering basInitLibrary...
[2020-09-21 15:27:12.368] [info   ] [base_init  ] [ 9344: 9348] Calling cmnbInit...
[2020-09-21 15:27:12.368] [info   ] [base_init  ] [ 9344: 9348] Calling CrashHandlerInstall...
[2020-09-21 15:27:12.371] [info   ] [crashguard ] [ 9344: 9348] CrashGuard global exception handler installed
[2020-09-21 15:27:12.371] [info   ] [crashguard ] [ 9344: 9348] CrashGuard initialized successfully, external dumping enabled
[2020-09-21 15:27:12.372] [notice ] [crashguard ] [ 9344: 9400] Process monitoring installed.
[2020-09-21 15:27:12.374] [info   ] [settings   ] [ 9344: 9348] paths.ini_store configuration is empty, settings ini store folder to asw::instup::GetDataDirectory.
[2020-09-21 15:27:12.388] [warning] [crashguard ] [ 9344: 9348] Installing crashguard from DLL instead of executable. Crashes in global destruction cannot be handled.
[2020-09-21 15:27:12.388] [info   ] [crashguard ] [ 9344: 9348] Crash handler installed successfully process-wide from module 140717398032384h
[2020-09-21 15:27:12.388] [info   ] [base_init  ] [ 9344: 9348] Validating paths...
[2020-09-21 15:27:12.394] [info   ] [base_init  ] [ 9344: 9348] basReinitLanguage: language 1033 from 'C:\Program Files\Avast Software\Avast\1033' was successfully loaded.
[2020-09-21 15:27:12.394] [info   ] [base_init  ] [ 9344: 9348] Calling GetComputerName...
[2020-09-21 15:27:12.394] [info   ] [base_init  ] [ 9344: 9348] Leaving basInitLibrary...
[2020-09-21 15:27:12.398] [info   ] [crashguard ] [ 9344: 9348] Crash handler is already resident in this process. Enabling only manual dumping from this binary.
[2020-09-21 15:27:12.398] [info   ] [crashguard ] [ 9344: 9348] CrashGuard initialized successfully, external dumping enabled
[2020-09-21 15:27:12.398] [notice ] [UI:Rend:1  ] [ 9344: 9348] Av5_App::InitInstance() - START
[2020-09-21 15:27:12.399] [notice ] [UI:Rend:1  ] [ 9344: 9348]   Parent processID:7276:0x00001c6c   UserSessionID:1
[2020-09-21 15:27:12.405] [notice ] [chromium   ] [ 9332: 9336] CefRenderer::ExecuteCefProcess
[2020-09-21 15:27:12.410] [info   ] [gui_cache  ] [ 9344: 9348] Resource path set to: C:\Program Files\Avast Software\Avast\gui_resources\1.0.558\
[2020-09-21 15:27:12.421] [info   ] [ui_renderer] [ 9344: 9348] Create Renderer SUCCEED! Type: 2 Version: 1.1.0
[2020-09-21 15:27:12.457] [notice ] [chromium   ] [ 9344: 9348] CefRenderer::ExecuteCefProcess
[2020-09-21 15:27:12.678] [info   ] [UITracking ] [ 7276: 8696] /popup/submitted: 318
[2020-09-21 15:27:16.057] [warning] [chromium   ] [ 7276: 9244] Toaster IPMResponse for url: https://ipm-provider.ff.avast.com/?data=[LONG BLOCK]&action=1 failed with HttpStatus: 204
[2020-09-21 15:27:16.059] [info   ] [chromium   ] [ 7276: 7252] CefWindow::OnLoadError ErrorCode: -3 (url: 'https://ipm-provider.ff.avast.com/?data=[LONG BLOCK]&action=1')
[2020-09-21 15:27:41.152] [info   ] [opm_client ] [ 7276: 8684] Opm change event arrived, placement 'popup' count of message(s) '1'.
[2020-09-21 15:27:41.152] [info   ] [opm_client ] [ 7276: 8684] Show content for message id: 'AVAST_AV_CB_MIGRATION_SOFT_NAG'

Then there's several of these in event_manager.log:

Code: [Select]

[sw::event_manager::google_analytics::EventConsumerImpl::Send: Event sending failed.
                                                                Exception: CURL request failed (https://ssl.google-analytics.com/collect). CURL error code: 7. Couldn't connect to server. Failed to connect to ssl.google-analytics.com port 443: Address not available
                                                                Code: 0x00000007 (7)
[2020-09-21 15:27:21.192] [info   ] [evnt_ga    ] [ 2064: 4324] asw::event_manager::google_analytics::EventConsumerImpl::Send: Event sending failed.
                                                                Exception: CURL request failed (https://ssl.google-analytics.com/collect). CURL error code: 7. Couldn't connect to server. Failed to connect to ssl.google-analytics.com port 443: Address not available
                                                                Code: 0x00000007 (7)

Editing in snippet from OPM.log that matches with that time:

Code: [Select]

[2020-09-21 15:25:38.886] [info   ] [evaluator  ] [ 2064: 4276] Evaluation expressions: 'null' equal '"en-ca"' returns result '0', (operand name: 'ipm.p_lid', '').
[2020-09-21 15:25:38.886] [info   ] [validator  ] [ 2064: 4276] End validate message 'AVAST_AV_GEEK_ENGAGEMENT_TOASTER' (valid: '0', nextTime: '2020-09-22 15:25:38 -0500').
[2020-09-21 15:25:38.886] [info   ] [evaluator  ] [ 2064: 4276] Evaluation expressions: '130' lesseq '3' returns result '0', (operand name: 'ipm.p_pro', '').
[2020-09-21 15:25:38.886] [info   ] [validator  ] [ 2064: 4276] End validate message 'NAG_EXPIRED_LOST_PAM_AVAST' (valid: '0', nextTime: '2020-09-21 17:25:38 -0500').
[2020-09-21 15:25:38.886] [info   ] [evaluator  ] [ 2064: 4276] Evaluation expressions: '130' lesseq '3' returns result '0', (operand name: 'ipm.p_pro', '').
[2020-09-21 15:25:38.886] [info   ] [validator  ] [ 2064: 4276] End validate message 'NAG_EXPIRED_PAM_AVAST' (valid: '0', nextTime: '2020-09-21 17:25:38 -0500').
[2020-09-21 15:25:38.886] [info   ] [evaluator  ] [ 2064: 4276] Evaluation expressions: '130' lesseq '3' returns result '0', (operand name: 'ipm.p_pro', '').
[2020-09-21 15:25:38.886] [info   ] [validator  ] [ 2064: 4276] End validate message 'NAG_EXPIRING_PAM_AVAST' (valid: '0', nextTime: '2020-09-21 17:25:38 -0500').
[2020-09-21 15:25:38.886] [info   ] [opm        ] [ 2064: 4276] Last validation results - active message(s): 1, inactive message(s): 0.
[2020-09-21 15:25:38.886] [warning] [opm_svc    ] [ 2064: 4276] The active messages can not be send to client because the other side is offline (placement: 'popup', internet: 'offline', registered clients: '0').
[2020-09-21 15:25:38.886] [info   ] [opm        ] [ 2064: 4276] Validate all campaign/message(s) finished.
[2020-09-21 15:25:38.886] [info   ] [opm        ] [ 2064: 4276] Set campaign definition data finished.
[2020-09-21 15:25:46.948] [info   ] [opm        ] [ 2064: 4276] Set event name: 'user_logged_in' started.
[2020-09-21 15:25:46.948] [info   ] [opm        ] [ 2064: 4276] Validate all campaign/message(s) started.
[2020-09-21 15:25:47.002] [info   ] [evaluator  ] [ 2064: 4276] Evaluation expressions: '137' lesseq '3' returns result '0', (operand name: 'ipm.p_lex', '').
[2020-09-21 15:25:47.002] [info   ] [validator  ] [ 2064: 4276] End validate message 'AVAST_AV_CB_MIGRATION_HARD_NAG' (valid: '0', nextTime: 'undefined_timeout').
[2020-09-21 15:25:47.004] [info   ] [opm        ] [ 2064: 4276] End validate message 'AVAST_AV_CB_MIGRATION_SOFT_NAG'. It is valid but it has not been processed yet, skip.
[2020-09-21 15:25:47.004] [info   ] [evaluator  ] [ 2064: 4276] Evaluation expressions: 'false' equal 'true' returns result '0', (operand name: 'product.avast.post_update_state', '').
[2020-09-21 15:25:47.004] [info   ] [validator  ] [ 2064: 4276] End validate message 'AVAST_AV_FREE_PUS_OPMPARAM_207' (valid: '0', nextTime: '2020-09-22 15:25:47 -0500').
[2020-09-21 15:25:47.004] [info   ] [evaluator  ] [ 2064: 4276] Evaluation expressions: '""' equal '"browser_incognito_enabled"' returns result '0', (operand name: 'event', '').
[2020-09-21 15:25:47.004] [info   ] [validator  ] [ 2064: 4276] End validate message 'AVAST_AV_BROWSER_INCOGNITO_TOASTER_TEST' (valid: '0', nextTime: 'undefined_timeout').
[2020-09-21 15:25:47.004] [info   ] [evaluator  ] [ 2064: 4276] Evaluation expressions: '130' equal '0' returns result '0', (operand name: 'ipm.p_pro', '').
[2020-09-21 15:25:47.004] [info   ] [validator  ] [ 2064: 4276] End validate message 'AVAST_AV_EDITION_CHANGED_DOWNGRADE' (valid: '0', nextTime: 'undefined_timeout').
[2020-09-21 15:25:47.004] [info   ] [evaluator  ] [ 2064: 4276] Evaluation expressions: '""' equal '"product_edition_changed"' returns result '0', (operand name: 'event', '').
[2020-09-21 15:25:47.004] [info   ] [validator  ] [ 2064: 4276] End validate message 'AVAST_AV_EDITION_CHANGED_SET_COOKIE' (valid: '0', nextTime: 'undefined_timeout').
[2020-09-21 15:25:47.004] [info   ] [evaluator  ] [ 2064: 4276] Evaluation expressions: '""' equal '"product_edition_changed"' returns result '0', (operand name: 'event', '').
[2020-09-21 15:25:47.004] [info   ] [validator  ] [ 2064: 4276] End validate message 'AVAST_AV_EDITION_CHANGED_UPGRADE' (valid: '0', nextTime: 'undefined_timeout').
[2020-09-21 15:25:47.004] [info   ] [evaluator  ] [ 2064: 4276] Evaluation expressions: '137' lesseq '16' returns result '0', (operand name: 'ipm.p_lex', '').
[2020-09-21 15:25:47.004] [info   ] [validator  ] [ 2064: 4276] End validate message 'AVAST_AV_EXPIRATION_TOASTER_PRE_AUTH_TRIAL' (valid: '0', nextTime: '2020-09-22 15:25:47 -0500').
[2020-09-21 15:25:47.004] [info   ] [evaluator  ] [ 2064: 4276] Evaluation expressions: '"en-us"' equal '"en-ca"' returns result '0', (operand name: 'ipm.p_lid', '').
[2020-09-21 15:25:47.004] [info   ] [validator  ] [ 2064: 4276] End validate message 'AVAST_AV_GEEK_ENGAGEMENT_TOASTER' (valid: '0', nextTime: '2020-09-22 15:25:47 -0500').
[2020-09-21 15:25:47.004] [info   ] [validator  ] [ 2064: 4276] End validate message 'AVAST_ENGAGEMENT_TOASTER_RECURRING' (valid: '1', nextTime: '2020-09-23 03:25:47 -0500').
[2020-09-21 15:25:47.004] [info   ] [opm        ] [ 2064: 4276] Delay defined - the message 'AVAST_ENGAGEMENT_TOASTER_RECURRING' is valid for placement 'toaster', but it is going to be activated after 900 s.
[2020-09-21 15:25:47.004] [info   ] [validator  ] [ 2064: 4276] End validate message 'AVAST_SURVEY_TOASTER_RECURRING' (valid: '1', nextTime: '2020-09-22 15:25:47 -0500').
[2020-09-21 15:25:47.004] [info   ] [opm        ] [ 2064: 4276] Delay defined - the message 'AVAST_SURVEY_TOASTER_RECURRING' is valid for placement 'toaster', but it is going to be activated after 600 s.
[2020-09-21 15:25:47.004] [info   ] [evaluator  ] [ 2064: 4276] Evaluation expressions: '130' lesseq '3' returns result '0', (operand name: 'ipm.p_pro', '').
[2020-09-21 15:25:47.004] [info   ] [validator  ] [ 2064: 4276] End validate message 'NAG_EXPIRED_LOST_PAM_AVAST' (valid: '0', nextTime: '2020-09-21 17:25:47 -0500').
[2020-09-21 15:25:47.004] [info   ] [evaluator  ] [ 2064: 4276] Evaluation expressions: '130' lesseq '3' returns result '0', (operand name: 'ipm.p_pro', '').
[2020-09-21 15:25:47.004] [info   ] [validator  ] [ 2064: 4276] End validate message 'NAG_EXPIRED_PAM_AVAST' (valid: '0', nextTime: '2020-09-21 17:25:47 -0500').
[2020-09-21 15:25:47.004] [info   ] [evaluator  ] [ 2064: 4276] Evaluation expressions: '130' lesseq '3' returns result '0', (operand name: 'ipm.p_pro', '').
[2020-09-21 15:25:47.004] [info   ] [validator  ] [ 2064: 4276] End validate message 'NAG_EXPIRING_PAM_AVAST' (valid: '0', nextTime: '2020-09-21 17:25:47 -0500').
[2020-09-21 15:25:47.004] [info   ] [evaluator  ] [ 2064: 4276] Evaluation expressions: '130' equal '0' returns result '0', (operand name: 'ipm.p_pro', '').
[2020-09-21 15:25:47.004] [info   ] [validator  ] [ 2064: 4276] End validate message 'TOASTER_WELCOME_SURVEY_AVAST_FREE' (valid: '0', nextTime: '2020-09-22 15:25:47 -0500').
[2020-09-21 15:25:47.004] [info   ] [evaluator  ] [ 2064: 4276] Evaluation expressions: '0' equal '1' returns result '0', (operand name: 'ipm.p_ads', '').
[2020-09-21 15:25:47.004] [info   ] [validator  ] [ 2064: 4276] End validate message 'TOASTER_WELCOME_SURVEY_AVAST_PAID' (valid: '0', nextTime: '2020-09-22 15:25:47 -0500').
[2020-09-21 15:25:47.004] [info   ] [opm        ] [ 2064: 4276] Last validation results - active message(s): 1, inactive message(s): 0.
[2020-09-21 15:25:47.004] [warning] [opm_svc    ] [ 2064: 4276] The active messages can not be send to client because the other side is offline (placement: 'popup', internet: 'offline', registered clients: '0').
[2020-09-21 15:25:47.004] [info   ] [opm        ] [ 2064: 4276] Validate all campaign/message(s) finished.
[2020-09-21 15:25:47.006] [info   ] [opm        ] [ 2064: 4276] Set event type was finished.
[2020-09-21 15:26:11.600] [info   ] [opm_svc    ] [ 2064: 3096] Call register new client (means refresh validation).
[2020-09-21 15:26:11.600] [info   ] [opm        ] [ 2064: 4276] Pull all active message(s) started.
[2020-09-21 15:26:11.600] [info   ] [opm        ] [ 2064: 4276] Pull all active message(s) (count: '1') was finished.
[2020-09-21 15:26:11.600] [warning] [opm_svc    ] [ 2064: 4276] The active messages can not be send to client because the other side is offline (placement: 'popup', internet: 'offline', registered clients: '1').
[2020-09-21 15:26:11.601] [info   ] [opm        ] [ 2064: 4276] Pull all active message(s) started.
[2020-09-21 15:26:11.601] [info   ] [opm        ] [ 2064: 4276] Pull all active message(s) (count: '1') was finished.
[2020-09-21 15:26:11.601] [warning] [opm_svc    ] [ 2064: 4276] The active messages can not be send to client because the other side is offline (placement: 'popup', internet: 'offline', registered clients: '1').
[2020-09-21 15:26:41.075] [info   ] [opm_svc    ] [ 2064: 4324] Machine has been already connected to Internet.
[2020-09-21 15:26:41.075] [info   ] [opm        ] [ 2064: 4276] Pull all active message(s) started.
[2020-09-21 15:26:41.075] [info   ] [shepsync   ] [ 2064: 4340] Updating config...
[2020-09-21 15:26:41.076] [info   ] [opm        ] [ 2064: 4276] Pull all active message(s) (count: '1') was finished.
[2020-09-21 15:26:41.076] [info   ] [opm_svc    ] [ 2064: 4276] Selected message(s) (count: '1') with priority '2600', placement 'popup'.
[2020-09-21 15:26:41.119] [info   ] [opm_svc    ] [ 2064: 4276] Send opm message refresh to client, placement 'popup'.
[2020-09-21 15:26:41.123] [info   ] [opm        ] [ 2064: 4276] Message repeat started (message 'AVAST_AV_CB_MIGRATION_SOFT_NAG', after: '60' sec).
[2020-09-21 15:26:41.123] [info   ] [opm        ] [ 2064: 4276] Message repeat finished.
[2020-09-21 15:26:41.125] [info   ] [shepsync   ] [ 2064: 4340] Trying server 'shepherd.ff.avast.com'
[2020-09-21 15:26:42.369] [info   ] [shepsync   ] [ 2064: 4340] Download of config file opm.def from shepherd.ff.avast.com succeeded.
[2020-09-21 15:26:42.371] [info   ] [shepsync   ] [ 2064: 4340] Config file C:\Program Files\Avast Software\Avast\setup\opm.def successfully updated to version 148
[2020-09-21 15:26:45.371] [info   ] [opm        ] [ 2064: 4276] Set campaign definition data started.
[2020-09-21 15:26:45.371] [info   ] [shepsync   ] [ 2064: 4340] Postpone interval was reset
[2020-09-21 15:26:45.373] [info   ] [storage    ] [ 2064: 4276] The new definition was received but it is same as last one. The update is skipped.
[2020-09-21 15:26:45.373] [info   ] [opm        ] [ 2064: 4276] Set campaign definition data finished.
[2020-09-21 15:27:41.125] [info   ] [opm        ] [ 2064:13528] The message 'AVAST_AV_CB_MIGRATION_SOFT_NAG' is triggered.
[2020-09-21 15:27:41.125] [info   ] [opm_svc    ] [ 2064:13528] Selected message(s) (count: '1') with priority '2600', placement 'popup'.
[2020-09-21 15:27:41.151] [info   ] [opm_svc    ] [ 2064:13528] Send opm message refresh to client, placement 'popup'.
[2020-09-21 15:27:41.153] [info   ] [opm        ] [ 2064: 4276] Message repeat started (message 'AVAST_AV_CB_MIGRATION_SOFT_NAG', after: '60' sec).
[2020-09-21 15:27:41.153] [info   ] [opm        ] [ 2064: 4276] Message repeat finished.
[2020-09-21 15:28:41.154] [info   ] [opm        ] [ 2064: 2752] The message 'AVAST_AV_CB_MIGRATION_SOFT_NAG' is triggered.
[2020-09-21 15:28:41.154] [info   ] [opm_svc    ] [ 2064: 2752] Selected message(s) (count: '1') with priority '2600', placement 'popup'.

[DavidR]

We need a screenshot so we can investigate. Without a screenshot, who knows where the pop up is coming from.

@bob. To do that someone would have to rig a high speed video camera in front of their screen. All you see is a breif flash of a white window, which you would never capture using PrtSc manually. Also probably explains why noone has posted a screenshot to-date.

NON (Reply #3) has a screenshot at hand.

That appears to be not from Avast here's the website, hxxps://thaliana.mydns.jp/avast/ (Changed https to hxxps so it's not selectable)

That's his signature. He didn't post it here but it's available on Slack.

OH that's handy, NOT

[bob3160]

@xSean,
I've reported this to Avast let's see if that helps. Thanks

[xSean]

Alright... so this gets a bit weirder, but the Google Analytics part of this looks separate, though it is still something I'd consider an issue. On that, it looks like after first loading into the desktop, Avast attempts to collect data (and ignoring any user-settings on the matter) to then send off for Google Analytics.

As for the popup, it looks to just be more of a random occurrence, more commonly appearing upon loading into the Desktop, which then made it look like the two events were related as they would appear at a similar time... though I suppose they could still be related in some form.


The popup can also occur just randomly after hours of a PC being on, here's a snippet from the AvastUI.log during such an instance:

Code: [Select]

[2020-09-21 19:27:57.823] [info   ] [nl_client  ] [ 8908: 8540] Reserve action - rejects request (id:'nag_limit').
[2020-09-21 19:28:57.854] [info   ] [opm_client ] [ 8908:12536] Opm change event arrived, placement 'popup' count of message(s) '1'.
[2020-09-21 19:28:57.854] [info   ] [opm_client ] [ 8908:12536] Show content for message id: 'AVAST_AV_CB_MIGRATION_SOFT_NAG'
[2020-09-21 19:28:57.855] [info   ] [nl_client  ] [ 8908:12536] Reserve action - rejects request (id:'nag_limit').
[2020-09-21 19:29:57.890] [info   ] [opm_client ] [ 8908: 8540] Opm change event arrived, placement 'popup' count of message(s) '1'.
[2020-09-21 19:29:57.890] [info   ] [opm_client ] [ 8908: 8540] Show content for message id: 'AVAST_AV_CB_MIGRATION_SOFT_NAG'
[2020-09-21 19:29:57.890] [info   ] [nl_client  ] [ 8908: 8540] Reserve action - acknowledge request (id:'nag_limit').
[2020-09-21 19:29:57.891] [info   ] [ui_renderer] [ 8908: 8540] WindowManager::ShowStoreWindow
[2020-09-21 19:29:57.891] [info   ] [opm_window ] [ 8908: 8540] Constructing of 'popup' (msg id: 'AVAST_AV_CB_MIGRATION_SOFT_NAG')' finished with result '1'.
[2020-09-21 19:29:58.122] [info   ] [base_init  ] [ 2156: 4352] Entering basInitLibrary...
[2020-09-21 19:29:58.122] [info   ] [base_init  ] [ 2156: 4352] Calling cmnbInit...
[2020-09-21 19:29:58.122] [info   ] [base_init  ] [ 2156: 4352] Calling CrashHandlerInstall...
[2020-09-21 19:29:58.124] [info   ] [crashguard ] [ 2156: 4352] CrashGuard global exception handler installed
[2020-09-21 19:29:58.124] [info   ] [crashguard ] [ 2156: 4352] CrashGuard initialized successfully, external dumping enabled
[2020-09-21 19:29:58.126] [notice ] [crashguard ] [ 2156: 7744] Process monitoring installed.
[2020-09-21 19:29:58.128] [info   ] [settings   ] [ 2156: 4352] paths.ini_store configuration is empty, settings ini store folder to asw::instup::GetDataDirectory.
[2020-09-21 19:29:58.144] [warning] [crashguard ] [ 2156: 4352] Installing crashguard from DLL instead of executable. Crashes in global destruction cannot be handled.
[2020-09-21 19:29:58.144] [info   ] [crashguard ] [ 2156: 4352] Crash handler installed successfully process-wide from module 140735530205184h
[2020-09-21 19:29:58.144] [info   ] [base_init  ] [ 2156: 4352] Validating paths...
[2020-09-21 19:29:58.152] [info   ] [base_init  ] [ 2156: 4352] basReinitLanguage: language 1033 from 'C:\Program Files\Avast Software\Avast\1033' was successfully loaded.
[2020-09-21 19:29:58.152] [info   ] [base_init  ] [ 2156: 4352] Calling GetComputerName...
[2020-09-21 19:29:58.152] [info   ] [base_init  ] [ 2156: 4352] Leaving basInitLibrary...
[2020-09-21 19:29:58.156] [info   ] [crashguard ] [ 2156: 4352] Crash handler is already resident in this process. Enabling only manual dumping from this binary.
[2020-09-21 19:29:58.156] [info   ] [crashguard ] [ 2156: 4352] CrashGuard initialized successfully, external dumping enabled
[2020-09-21 19:29:58.157] [notice ] [UI:Rend:1  ] [ 2156: 4352] Av5_App::InitInstance() - START
[2020-09-21 19:29:58.157] [notice ] [UI:Rend:1  ] [ 2156: 4352]   Parent processID:8908:0x000022cc   UserSessionID:1
[2020-09-21 19:29:58.122] [info   ] [base_init  ] [ 5356:14420] Entering basInitLibrary...
[2020-09-21 19:29:58.122] [info   ] [base_init  ] [ 5356:14420] Calling cmnbInit...
[2020-09-21 19:29:58.122] [info   ] [base_init  ] [ 5356:14420] Calling CrashHandlerInstall...
[2020-09-21 19:29:58.124] [info   ] [crashguard ] [ 5356:14420] CrashGuard global exception handler installed
[2020-09-21 19:29:58.124] [info   ] [crashguard ] [ 5356:14420] CrashGuard initialized successfully, external dumping enabled
[2020-09-21 19:29:58.125] [notice ] [crashguard ] [ 5356: 2464] Process monitoring installed.
[2020-09-21 19:29:58.128] [info   ] [settings   ] [ 5356:14420] paths.ini_store configuration is empty, settings ini store folder to asw::instup::GetDataDirectory.
[2020-09-21 19:29:58.144] [warning] [crashguard ] [ 5356:14420] Installing crashguard from DLL instead of executable. Crashes in global destruction cannot be handled.
[2020-09-21 19:29:58.144] [info   ] [crashguard ] [ 5356:14420] Crash handler installed successfully process-wide from module 140735530205184h
[2020-09-21 19:29:58.144] [info   ] [base_init  ] [ 5356:14420] Validating paths...
[2020-09-21 19:29:58.153] [info   ] [base_init  ] [ 5356:14420] basReinitLanguage: language 1033 from 'C:\Program Files\Avast Software\Avast\1033' was successfully loaded.
[2020-09-21 19:29:58.153] [info   ] [base_init  ] [ 5356:14420] Calling GetComputerName...
[2020-09-21 19:29:58.153] [info   ] [base_init  ] [ 5356:14420] Leaving basInitLibrary...
[2020-09-21 19:29:58.156] [info   ] [crashguard ] [ 5356:14420] Crash handler is already resident in this process. Enabling only manual dumping from this binary.
[2020-09-21 19:29:58.156] [info   ] [crashguard ] [ 5356:14420] CrashGuard initialized successfully, external dumping enabled
[2020-09-21 19:29:58.157] [notice ] [UI:Rend:1  ] [ 5356:14420] Av5_App::InitInstance() - START
[2020-09-21 19:29:58.157] [notice ] [UI:Rend:1  ] [ 5356:14420]   Parent processID:8908:0x000022cc   UserSessionID:1
[2020-09-21 19:29:58.166] [info   ] [gui_cache  ] [ 2156: 4352] Resource path set to: C:\Program Files\Avast Software\Avast\gui_resources\1.0.558\
[2020-09-21 19:29:58.166] [info   ] [gui_cache  ] [ 5356:14420] Resource path set to: C:\Program Files\Avast Software\Avast\gui_resources\1.0.558\
[2020-09-21 19:29:58.175] [info   ] [ui_renderer] [ 2156: 4352] Create Renderer SUCCEED! Type: 2 Version: 1.1.0
[2020-09-21 19:29:58.175] [info   ] [ui_renderer] [ 5356:14420] Create Renderer SUCCEED! Type: 2 Version: 1.1.0
[2020-09-21 19:29:58.198] [info   ] [gui_cache  ] [ 8908: 9040] Started getting content of current update file
[2020-09-21 19:29:58.198] [info   ] [gui_cache  ] [ 8908: 9040] Finished getting content of current update file
[2020-09-21 19:29:58.216] [notice ] [chromium   ] [ 2156: 4352] CefRenderer::ExecuteCefProcess
[2020-09-21 19:29:58.217] [notice ] [chromium   ] [ 5356:14420] CefRenderer::ExecuteCefProcess
[2020-09-21 19:29:58.232] [info   ] [avsvcui    ] [ 8908: 9056] {"guiLock":false,"issues":null,"lastScanTime":1599996392,"lastUpdateTime":1600696049,"licExpDays":137,"licType":"LicenseSubscription","lic_state":"lic_valid","mainStatus":"green","managed":false,"ncUnreadItemsCount":0,"numberOfDefs":14938361,"product":"premier","productEx":"","productSeller":"","silentMode":0}

[2020-09-21 19:29:58.235] [info   ] [gui_cache  ] [ 8908: 9056] Started getting content of current update file
[2020-09-21 19:29:58.236] [info   ] [gui_cache  ] [ 8908: 9056] Finished getting content of current update file
[2020-09-21 19:29:58.453] [warning] [chromium   ] [ 8908:  632] CefDialog IPMResponseFailed with HttpStatus: 204 for url: https://ipm-provider.ff.avast.com/?data=[LONG BLOCK]&action=1&p_tbc=1&p_mid=AVAST_AV_CB_MIGRATION_SOFT_NAG&p_elm=2
[2020-09-21 19:29:58.454] [warning] [opm_control] [ 8908: 8896] Download content for message 'AVAST_AV_CB_MIGRATION_SOFT_NAG' (https://ipm-provider.ff.avast.com/?data=[LONG BLOCK]&action=1&p_tbc=1&p_mid=AVAST_AV_CB_MIGRATION_SOFT_NAG&p_elm=2) failed '204'.
[2020-09-21 19:29:58.454] [info   ] [opm_client ] [ 8908: 8896] Call message shown 'AVAST_AV_CB_MIGRATION_SOFT_NAG'
[2020-09-21 19:29:58.528] [info   ] [opm_client ] [ 8908: 9040] Opm change event arrived, placement 'popup' count of message(s) '1'.
[2020-09-21 19:29:58.528] [info   ] [opm_client ] [ 8908: 9040] Show content for message id: 'AVAST_AV_CB_MIGRATION_SOFT_NAG'
[2020-09-21 19:29:58.529] [info   ] [nl_client  ] [ 8908: 9040] Reserve action - rejects request (id:'nag_limit').
and then also the OPM.log:

Code: [Select]

[2020-09-21 19:26:57.791] [info   ] [opm        ] [ 2400: 4496] Message repeat finished.
[2020-09-21 19:27:57.792] [info   ] [opm        ] [ 2400:14056] The message 'AVAST_AV_CB_MIGRATION_SOFT_NAG' is triggered.
[2020-09-21 19:27:57.792] [info   ] [opm_svc    ] [ 2400:14056] Selected message(s) (count: '1') with priority '2600', placement 'popup'.
[2020-09-21 19:27:57.823] [info   ] [opm_svc    ] [ 2400:14056] Send opm message refresh to client, placement 'popup'.
[2020-09-21 19:27:57.824] [info   ] [opm        ] [ 2400: 4496] Message repeat started (message 'AVAST_AV_CB_MIGRATION_SOFT_NAG', after: '60' sec).
[2020-09-21 19:27:57.824] [info   ] [opm        ] [ 2400: 4496] Message repeat finished.
[2020-09-21 19:28:57.826] [info   ] [opm        ] [ 2400: 8068] The message 'AVAST_AV_CB_MIGRATION_SOFT_NAG' is triggered.
[2020-09-21 19:28:57.826] [info   ] [opm_svc    ] [ 2400: 8068] Selected message(s) (count: '1') with priority '2600', placement 'popup'.
[2020-09-21 19:28:57.854] [info   ] [opm_svc    ] [ 2400: 8068] Send opm message refresh to client, placement 'popup'.
[2020-09-21 19:28:57.855] [info   ] [opm        ] [ 2400: 4496] Message repeat started (message 'AVAST_AV_CB_MIGRATION_SOFT_NAG', after: '60' sec).
[2020-09-21 19:28:57.855] [info   ] [opm        ] [ 2400: 4496] Message repeat finished.
[2020-09-21 19:29:57.856] [info   ] [opm        ] [ 2400:12764] The message 'AVAST_AV_CB_MIGRATION_SOFT_NAG' is triggered.
[2020-09-21 19:29:57.856] [info   ] [opm_svc    ] [ 2400:12764] Selected message(s) (count: '1') with priority '2600', placement 'popup'.
[2020-09-21 19:29:57.890] [info   ] [opm_svc    ] [ 2400:12764] Send opm message refresh to client, placement 'popup'.
[2020-09-21 19:29:57.891] [info   ] [opm        ] [ 2400: 4496] Message processed id 'AVAST_AV_CB_MIGRATION_SOFT_NAG'.
[2020-09-21 19:29:58.455] [info   ] [opm        ] [ 2400: 4496] Message shown id 'AVAST_AV_CB_MIGRATION_SOFT_NAG' started.
[2020-09-21 19:29:58.455] [info   ] [opm        ] [ 2400: 4496] Validate all campaign/message(s) started.
[2020-09-21 19:29:58.497] [info   ] [evaluator  ] [ 2400: 4496] Evaluation expressions: '137' lesseq '3' returns result '0', (operand name: 'ipm.p_lex', '').
[2020-09-21 19:29:58.497] [info   ] [validator  ] [ 2400: 4496] End validate message 'AVAST_AV_CB_MIGRATION_HARD_NAG' (valid: '0', nextTime: 'undefined_timeout').
[2020-09-21 19:29:58.497] [info   ] [validator  ] [ 2400: 4496] End validate message 'AVAST_AV_CB_MIGRATION_SOFT_NAG' (valid: '1', nextTime: 'undefined_timeout').
[2020-09-21 19:29:58.498] [info   ] [evaluator  ] [ 2400: 4496] Evaluation expressions: 'false' equal 'true' returns result '0', (operand name: 'product.avast.post_update_state', '').
[2020-09-21 19:29:58.498] [info   ] [validator  ] [ 2400: 4496] End validate message 'AVAST_AV_FREE_PUS_OPMPARAM_207' (valid: '0', nextTime: '2020-09-22 19:29:58 -0500').
[2020-09-21 19:29:58.498] [info   ] [evaluator  ] [ 2400: 4496] Evaluation expressions: '""' equal '"browser_incognito_enabled"' returns result '0', (operand name: 'event', '').
[2020-09-21 19:29:58.498] [info   ] [validator  ] [ 2400: 4496] End validate message 'AVAST_AV_BROWSER_INCOGNITO_TOASTER_TEST' (valid: '0', nextTime: 'undefined_timeout').
[2020-09-21 19:29:58.498] [info   ] [evaluator  ] [ 2400: 4496] Evaluation expressions: '""' equal '"user_logged_in"' returns result '0', (operand name: 'event', '').
[2020-09-21 19:29:58.498] [info   ] [validator  ] [ 2400: 4496] End validate message 'AVAST_AV_EDITION_CHANGED_DOWNGRADE' (valid: '0', nextTime: 'undefined_timeout').
[2020-09-21 19:29:58.498] [info   ] [evaluator  ] [ 2400: 4496] Evaluation expressions: '""' equal '"product_edition_changed"' returns result '0', (operand name: 'event', '').
[2020-09-21 19:29:58.498] [info   ] [validator  ] [ 2400: 4496] End validate message 'AVAST_AV_EDITION_CHANGED_SET_COOKIE' (valid: '0', nextTime: 'undefined_timeout').
[2020-09-21 19:29:58.498] [info   ] [evaluator  ] [ 2400: 4496] Evaluation expressions: '""' equal '"product_edition_changed"' returns result '0', (operand name: 'event', '').
[2020-09-21 19:29:58.498] [info   ] [validator  ] [ 2400: 4496] End validate message 'AVAST_AV_EDITION_CHANGED_UPGRADE' (valid: '0', nextTime: 'undefined_timeout').
[2020-09-21 19:29:58.498] [info   ] [evaluator  ] [ 2400: 4496] Evaluation expressions: '137' lesseq '16' returns result '0', (operand name: 'ipm.p_lex', '').
[2020-09-21 19:29:58.498] [info   ] [validator  ] [ 2400: 4496] End validate message 'AVAST_AV_EXPIRATION_TOASTER_PRE_AUTH_TRIAL' (valid: '0', nextTime: '2020-09-22 19:29:58 -0500').
[2020-09-21 19:29:58.498] [info   ] [evaluator  ] [ 2400: 4496] Evaluation expressions: '"en-us"' equal '"en-ca"' returns result '0', (operand name: 'ipm.p_lid', '').
[2020-09-21 19:29:58.498] [info   ] [validator  ] [ 2400: 4496] End validate message 'AVAST_AV_GEEK_ENGAGEMENT_TOASTER' (valid: '0', nextTime: '2020-09-22 19:29:58 -0500').
[2020-09-21 19:29:58.498] [info   ] [evaluator  ] [ 2400: 4496] Evaluation expressions: '130' lesseq '3' returns result '0', (operand name: 'ipm.p_pro', '').
[2020-09-21 19:29:58.498] [info   ] [validator  ] [ 2400: 4496] End validate message 'NAG_EXPIRED_LOST_PAM_AVAST' (valid: '0', nextTime: '2020-09-21 21:29:58 -0500').
[2020-09-21 19:29:58.498] [info   ] [evaluator  ] [ 2400: 4496] Evaluation expressions: '130' lesseq '3' returns result '0', (operand name: 'ipm.p_pro', '').
[2020-09-21 19:29:58.498] [info   ] [validator  ] [ 2400: 4496] End validate message 'NAG_EXPIRED_PAM_AVAST' (valid: '0', nextTime: '2020-09-21 21:29:58 -0500').
[2020-09-21 19:29:58.499] [info   ] [evaluator  ] [ 2400: 4496] Evaluation expressions: '130' lesseq '3' returns result '0', (operand name: 'ipm.p_pro', '').
[2020-09-21 19:29:58.499] [info   ] [validator  ] [ 2400: 4496] End validate message 'NAG_EXPIRING_PAM_AVAST' (valid: '0', nextTime: '2020-09-21 21:29:58 -0500').
[2020-09-21 19:29:58.499] [info   ] [opm        ] [ 2400: 4496] Last validation results - active message(s): 1, inactive message(s): 0.
[2020-09-21 19:29:58.499] [info   ] [opm_svc    ] [ 2400: 4496] Selected message(s) (count: '1') with priority '2600', placement 'popup'.
[2020-09-21 19:29:58.528] [info   ] [opm_svc    ] [ 2400: 4496] Send opm message refresh to client, placement 'popup'.
[2020-09-21 19:29:58.528] [info   ] [opm        ] [ 2400: 4496] Validate all campaign/message(s) finished.
[2020-09-21 19:29:58.528] [info   ] [opm        ] [ 2400: 4496] Message shown was finished.
[2020-09-21 19:29:58.529] [info   ] [opm        ] [ 2400: 4496] Message repeat started (message 'AVAST_AV_CB_MIGRATION_SOFT_NAG', after: '60' sec).
[2020-09-21 19:29:58.529] [info   ] [opm        ] [ 2400: 4496] Message repeat finished.

When it occurred this time, it was just back to being a sudden flash again, but also there was nothing new at this exact timeframe in the Event_Manager.log.

[V_B_S]

Hello again, it's nice to see some progression from others

I managed to have a screenshot of it as well, while i was watching youtube & for some odd reason this time the pop up stayed for around 14 secs, so i couldn't really see what else i could check besides taking a screen:

https://imgur.com/a/PLmIGWH

This pop up also as i have stated previously managed to pop up during my  game sessions, streams, and occasionally pops up when i open an art program like Photoshop or Clip Studio, but due to it been a split second pop up, i couldn't managed to screencap it, but i think it should be clear what's going on with that pop-up behavior, if i managed to get them again, i will try to update with a screenshot

[Asyn]

Please attach your screenshot(s), some of us don't follow external links.

[V_B_S]

Please attach your screenshot(s), some of us don't follow external links.

I tried to upload an attachment actually, but it's giving me a HTTP ERROR 500 so i put in an Imgur link instead

[Asyn]

We need a screenshot so we can investigate. Without a screenshot, who knows where the pop up is coming from.

@bob. To do that someone would have to rig a high speed video camera in front of their screen. All you see is a breif flash of a white window, which you would never capture using PrtSc manually. Also probably explains why noone has posted a screenshot to-date.

NON (Reply #3) has a screenshot at hand.

That appears to be not from Avast here's the website, hxxps://thaliana.mydns.jp/avast/ (Changed https to hxxps so it's not selectable)

That's his signature. He didn't post it here but it's available on Slack.

OH that's handy, NOT

Well, as already outlined by NON, there's nothing much to see - just an empty Avast pop-up.

[NON]

That screenshot is from Japanese BBS, not mine. Thus I posted it only for Slack, not here (as here is public forum).

[Asyn]

That screenshot is from Japanese BBS, not mine. Thus I posted it only for Slack, not here (as here is public forum).

For this very reason I didn't repost it here either.

[ju106]

I've been getting the same blank Avast pop-ups for several days now; they look exactly like screenshots above, of just the Avast dialog box (the gray theme) popping up blank and blinking out again after a couple of seconds. I am on the most recent installs of both program and defs, on Windows 10. It's not doing much except being an annoyance, but still.

[V_B_S]

Update: So not only did i get another empty pop-up, but this time, the main interface of Avast would randomly & forcefully open by itself, sometimes it's as if the program is trying to open by itself

At first i would get random empty pop-ups, then following it after 3 times, the fourth time, it decide to open the program interface (which is the status tab) and it's not empty, it's really frightening behavior & had become a huge distraction as i happened to mess up due to it
but this is the first time i'm getting this behavior just now, and it still doing it several times, just made another report about this

[Efthimios]

I have been observing the same behaviour for some time now. A couple of days ago, the pop up started staying permanently on my screen and I have to close it now. It also displays the standard status screen with the message "This computer is protected" with the "Run Smart Scan" button below.

[-=DruiD=-]

Just dropped in to say also getting this, as a paid up premium member, not only the rapid blank popup, but the Full Avast GUI that also randomly pops up and stays is infuriating like other people have said interrupting games, productivity.   I am glad I found this thread and other people have been able to capture it as I have been unsuccesfull so far.

[EB64]

I, too, have been getting this for a while now.
Been ignoring it as it wasn't disruptive to my games or anything.
However, now I'm getting where the GUI opens at random as well, which is disruptive.

I'm just glad to know I'm not alone on these issues as I was getting worried I was either hacked or some virus got through and I was gonna be in for another full reinstall...