Avast isn't downloading it, it is going through the avast localhost proxy
And that makes comodo firewall think that avast is downloading,
while it is actually defender. What if I wanted comodo to block defender?
I have comodo set on custom policy, which makes it
ask me for my approval for every net connection.
But it didn't ask me in this case.
Not sure if that was the case because avast was practically disguising defender,
or because I have
c:\windows\system32\svchost.exe and
system enabled
in comodo and defender was treated by comodo as
system.
So I'm a bit confused now... what if some other app decides to download
something, and comodo sees avast - and not the real app?
BTW, this post is tightly connected to comodo firewall,
but I could be using any other firewall - and avast shouldn't
disguise any app, no matter which firewall used.