Avast antivirus installations from CCleaner installer

The original issue of a delayed installation just doesn't happen here, never has.

Finally did read Hazelnuts links from the unnumbered post above. Those were informative, thank you Hazelnut. :)

Still not sure if this last installation created a new update task. Don't think so, didn't find it. Might have missed something. In any case the last restart will have "reset" this system, so further checking must wait a bit.

Automatic update won't happen here. I will block it. Not sure how, it isn't an issue yet, but I will.

Mta, dinosaurs both organic and digital still live among us. Birds and windows xp. :lol:

On 12/22/2017 at 15:04, nukecad said:
<div class="ipsQuote_contents ipsClearfix">
	<p>
		As I started this thread then I'll go first.
	</p>

	<p>
		Restarted, made sure everything had settled down (checked all was quiet in Task Manager).


		Opened file explorer, let things settle down again.


		Launched <strong>ccsetup538.exe</strong> (revised version 14/12/2017).
	</p>

	<p>
		From install button showing to offfer showing (Chrome) was <strong>2.5 seconds</strong>. (Stopwatch).
	</p>

	<p>
		Speedtest.net results: Date 12/22/2017 2:41 PM GMT, Download <strong>2.31 Mbps</strong>, Upload 1.01 Mbps, Latency 27 Ms, Server Distance ~50 mi
	</p>

	<p>
		Windows 10 Home, v1709, build 16299.125, 64 bit.


		Intel Celeron CPU N2840 @2.16GHz (Overclocks to 2.58).


		4 GB RAM.


		Windows Defender. Malwarebytes Anti Exploit stand alone is also running real time.
	</p>

	<p>
		 
	</p>

	<p>
		EDIT.


		Because you asked for the speedtest I decided to run the test again after a restart, but this time switched the lapop to 'Flight Mode' to disable the web connection before running the installer.


		Still got the 2+ second  delay in displaying the offer.
	</p>

	<p>
		I'll relocate to a faster broadband connection and try again.
	</p>

	<p>
		EDIT2
	</p>

	<p>
		OK tried again but with a fibre BB connection this time.
	</p>

	<p>
		Same <strong>2.5 second</strong> lag from install button to offer being displayed.
	</p>

	<p>
		Speedtest.net results: Date 12/22/2017 3:30 PM GMT, Download <strong>54.40 Mbps</strong>, Upload 16.14 Mbps, Latency 34 Ms, Server Distance ~200 mi
	</p>

	<p>
		All other specs the same as above. (Same laptop).
	</p>

	<p>
		 
	</p>

	<p>
		So that would seem to rule out the connection speed as a cause.
	</p>

	<p>
		Any other testing/ logs you would like then please give a shout.
	</p>

	<p>
		 
	</p>
</div>

Thank you very much for your contribution. Our testers can now recreate these exact conditions and try to reproduce. It would be useful to have some more examples to go on to speed up the process, but we will work with what we have.

If we assume your situation is not an anomaly, I agree this would allow us to rule out the speed/reliability of the connection as a cause, plus it confirms reproducibility on the latest Windows 10 update. It also allows us to systematically test against settings configurations of Defender and MalwareBytes.

Here are some potential causes we can test for:

  • A Defender setting is blocking/delaying some aspect of the offer eligibility logic
  • A Defender setting is blocking/delaying the request for offer content
  • A MWB setting is blocking/delaying some aspect of the offer eligibility logic
  • A MWB setting is blocking/delaying the request for offer content
  • The conjunction of a Defender setting and a MWB setting is causing a problem
  • A Windows system setting is blocking/delaying the request for offer content
  • An IE/Edge/browser setting that is used in relation to downloading temporary internet files
  • The destination that the offer content is stored in is not the default system location and this has unforeseen consequences

Thanks in advance to anyone else experiencing this issue who can provide the information requested. A second and third set of data points will likely speed up the testing process considerably.

Quote
<div class="ipsQuote_contents ipsClearfix">
	<p>
		When I installed an update to CCleaner, I saw the box for installing the "Avast" anti-virus just as I clicked the install option for CCleaner. It is checked by default. Well, it not only installed the Avast anti-virus software, but it disabled the Malwarebytes software I had which runs automatically on start up. I uninstalled the Avast software, but my Malwarebytes software would not come up. I finally checked the Services list, and I fould the Mawarebytes service had been disabled! I really think it takes a lot of nerve to install this anti-virus trial version on my PC, and disable something that I have running. And in a way that takes searching to see what is going on. Just my two cent's worth.
	</p>
</div>

Reported in another thread by TheMe. Common trait: offer only appeared after a delay; MalwareBytes is installed and was running.

On 02/01/2018 at 12:15, Stephen Piriform said:
<div class="ipsQuote_contents">
	<p>
		If we assume your situation is not an anomaly, I agree this would allow us to rule out the speed/reliability of the connection as a cause, plus it confirms reproducibility on the latest Windows 10 update. It also allows us to systematically test against settings configurations of Defender and MalwareBytes.
	</p>
</div>

Just to make clear that I am not running the full Malwarebytes3 in real time.

I am running Malwarebytes Anti Exploit stand alone perpetual beta which is a different, though related, programme.

It always used to be a seperate programme to Malwarebytes Antimalware, but the 2 programmes got merged with MB3.

When I get time I'll disable it and run the installer test again.

3 hours ago, nukecad said:
<div class="ipsQuote_contents ipsClearfix">
	<p>
		Just to make clear that I am not running the full Malwarebytes3 in real time.
	</p>

	<p>
		I am running <strong>Malwarebytes Anti Exploit</strong> <u>stand alone</u> perpetual beta which is a different, though related, programme.
	</p>

	<p>
		It always used to be a seperate programme to Malwarebytes Antimalware, but the 2 programmes got merged with MB3.
	</p>

	<p>
		 
	</p>

	<p>
		When I get time I'll disable it and run the installer test again.
	</p>
</div>

Thanks for the clarification, that's helpful.

Tried with Malwarebytes Anti Exploit turned off, still got the 2.5 second delay.

Speedtest.net results: Date 1/4/2018 12:50 GMT, Download 4.30 Mbps, Upload 3.09 Mbps, Latency 27 Ms, Server Distance ~50 mi

Same laptop as above so all other info is the same.

One thing I have noticed is that in all this testing the offer has always been for Chrome (not Avast or Google toolbar), not sure if that is relevant or not?

13 hours ago, nukecad said:
<div class="ipsQuote_contents ipsClearfix">
	<p>
		Tried with Malwarebytes Anti Exploit turned off, still got the 2.5 second delay.
	</p>

	<p>
		Speedtest.net results: Date 1/4/2018 12:50 GMT, Download 4.30 Mbps, Upload 3.09 Mbps, Latency 27 Ms, Server Distance ~50 mi
	</p>

	<p>
		Same laptop as above so all other info is the same.
	</p>

	<p>
		One thing I have noticed is that in all this testing the offer has always been for Chrome (not Avast or Google toolbar), not sure if that is relevant or not?
	</p>
</div>

Previously you said this:

Quote
<div class="ipsQuote_contents ipsClearfix">
	<p>
		I have noticed that the new Avast/Chrome offering with CCleaner now appears to be using a sneaky tactic, which in my opinion is not acceptable.
	</p>

	<p>
		The issue I have noticed is that the bundled offering in the CCleaner installer does not appear onscreen for a full 2 seconds after the install button is available.
	</p>

	<p>
		This delay appears to be 'built in' - which is the problem.
	</p>

	<p>
		[...]
	</p>

	<p>
		Ok, you know the delay is there now, and not to click install until you can untick the offering.
	</p>

	<p>
		But you only have to forget once, or be in a rush, and then you'll get an unwanted install of Avast/Chrome/google toolbar.
	</p>
</div>

Please can you confirm:

  • If you have experienced a delay in the latest release of CCleaner with the Avast offer in particular?
  • If you have experienced any other than immediately after booting up/restarting the system?

Yes, it was originally a mixture of the Avast and Chrome offers where I first noticed that there seemed to be a 'long' delay. (ccsetup535.exe and later).

All my testing to your instructions has been with ccsetup538.exe, updated version downloaded 14/12/2107, and has always given the Chrome offer.

When I was doing my previous testing of different installer versions I was getting offered all 3 (Avast, Chrome, Google Toolbar) at different times.

I was concentrating more on the installer version than the actual offer. As said with that testing there was a change following the hijack incident (which to be honest was what I was looking for).

And yes, it's not just immediately after a fresh boot. I originally noticed the delay when installing the monthly updates, I usually install any programme updates shortly before I shut down. (I'm not one who leaves my PCs running all the time, I always shut down when not in use).

Having said that it does seem only to happen the first time that the installer is run in each new session.


ie. Run the installer anytime after booting and you get the delay - abort the installer and run it again later, no delay.


(This is why I put a reboot in the version testing).

PS. Just thinking/guessing here;

I note that above you mention browser settings and 'where the offer content is stored'.


Does this imply that the installer is 'phoning home' for the offer content? And maybe waits 2.5 seconds to see if a valid connection can be made before then displaying a default offer?


Could this explain why I am always seeing Chrome in this v538 testing - the connection cannot be made and so I'm getting a 'built in' local offer after 2.5 secs?


(That could also explain why there is no delay on second or subsequent testing runs without a reboot, the flag has already been set that the connection cannot be made).

19 hours ago, nukecad said:
<div class="ipsQuote_contents ipsClearfix">
	<p>
		Run the installer anytime after booting and you get the delay - abort the installer and run it again later, no delay.
	</p>
</div>

If I've understood correctly, this information and testing all relates to the Chrome offer. The Avast offer behaves differently, so it's not accurate to assume that behaviour of the Chrome offer signifies the Avast offer will behave the same way. Either way, it's useful to have this information about a delay in the Chrome offer. For the time being I will focus on the Avast offer issues as having an antivirus solution installed without consent is a much bigger problem (not to mention it's more difficult to remove).

Quote
<div class="ipsQuote_contents ipsClearfix">
	<p>
		PS. Just thinking/guessing here;


		I note that above you mention browser settings and 'where the offer content is stored'.


		Does this imply that the installer is 'phoning home' for the offer content? And maybe waits 2.5 seconds to see if a valid connection can be made before then displaying a default offer?


		Could this explain why I am always seeing Chrome in this v538 testing - the connection cannot be made and so I'm getting a 'built in' local offer after 2.5 secs?


		(That could also explain why there is no delay on second or subsequent testing runs without a reboot, the flag has already been set that the connection cannot be made).
	</p>
</div>

The Chrome content is always built in, the Avast content is delivered remotely. However, without going into specifics, any delay in displaying the Avast offer is not related to having a slow or no connection. At that point it is not connection-dependent. At most only one offer is shown, and the Chrome offer will be shown over the Avast offer if eligible.

Update on Avast offer delay bug

We have managed to reproduce the Avast offer delay by performing a full system scan with MalwareBytes at the time the offer content is due to be displayed. This suggests a delivery/rendering performance issue due to high system load. The IE control responsible for creating the HTML document and rendering the web content is being blocked by one or more other processes.

To guard against the offer (and user consent) failing to display before the CCleaner installation has begun, we will extend the synchronous dependencies of the first Install screen to include waiting for the Avast offer to be ready to be displayed before that screen is shown. In other words, if you are eligible to see the Avast offer, you won't see the Install button unless that offer has been shown and you have had an opportunity to decline it.

This touches the core install flow and requires careful development and extensive testing to ensure we don't introduce any other bugs that could affect the CCleaner install process. We are about to lock down the build for this month's release so it is unlikely this fix will make it in. The Avast offer delay bug will likely be fixed in the February release.

This month we will release CCleaner Portable on day 1 along with the Free and Pro installers.

Thanks for the explanation of how the Chrome/Avast offers are delivered.

(PS. Chrome can also be a pain to remove completely, just uninstalling it is not enough, uninstalling leaves numerous files, registry entries, registry changes, etc. behind).

Good to see that you have been able to replicate a delay, even though from the description it does not seem to be the same delay that I am seeing.

Hopefully the modification to the installer will prevent any delay in displaying an offer, whatever the cause.

As a next step maybe the developers could consider not having the offer selected by default?

Many people consider 'offer selected by default' as a bit of a dodgy practice.

Thanks again for taking a look at this issue.

Here's a thought: When presenting the AVAST offer, have the install checkbox UNCHECKED (a/k/a Opt-In). If I want AVAST, I'll check it myself. You can even add a 2 second delay for me to read the offer before the "next" button is enabled.

Before, if I accidently installed Chrome, I could easily uninstall it. AVAST is a royal pain to uninstall (if it even uninstalls 100% of the files and registry settings.)

On 1/5/2018 at 16:55, BillB4 said:
<div class="ipsQuote_contents ipsClearfix">
	<p>
		Here's a thought: When presenting the AVAST offer, have the install checkbox UNCHECKED (a/k/a Opt-In). If I want AVAST, I'll check it myself. You can even add a 2 second delay for me to read the offer before the "next" button is enabled.
	</p>

	<p>
		Before, if I accidently installed Chrome, I could easily uninstall it. AVAST is a royal pain to uninstall (if it even uninstalls 100% of the files and registry settings.)
	</p>
</div>

That's a business decision and not one that the developers of CCleaner have a choice in. We will add in some functionality so that once you've opted out you are ineligible for the same offer.

Update on Avast offer delay bug - Fix candidate

We have a tentative fix for this issue. It works according to the method we have to reproduce the issue internally, but we want to be sure it addresses the same conditions that cause the issue on your machines.

If you can reliably reproduce the delay in the Avast offer appearing with a delay or on the wrong screen of the CCleaner Free installer, and you would like to assist us in testing the fix we have, please send a private message to me here on the forums and I will provide further details.

If we can prove this fix externally with your assistance within the next couple of days, we can add this to the January release (v5.39).

Still waiting for volunteers. Without any volunteers this is looking like a February release. If you know of anyone who has had the Avast offer delay, please show them this thread.

I totally agree with the writer on this topic. It installs Avast automatically and does not give a person enough time to UN-check the box.

This has caused problems with people that have other anti-virus systems on their computers and do not want to change to Avast.

Update

This fix has been pushed to the v5.40 release as we have not been able to give it sufficient testing time within the January release cycle (ETA February 13th).

On 12/01/2018 at 11:43, Stephen Piriform said:
<div class="ipsQuote_contents">
	<p>
		<strong style="background-color:#ffffff;color:#353c41;font-size:22px;">Update<span> </span></strong>
	</p>

	<p>
		This fix has been pushed to the v5.40 release as we have not been able to give it sufficient testing time within the January release cycle (ETA February 13th).
	</p>
</div>

Hi Stephen,

Interesting, because something seems to have changed with v5.39 (or maybe last weeks Windows update?).

I downloaded/ran the v5.39 installer and it offered the Avast bundle.

(In fact 5.37 &amp; 5.38 installers are also now offering me the Avast bundle if/when I run them).

Using the 'reset' testing as per before it shows a 'loading' bar for about 2 or 2-1/2 seconds and then displays the install button and Avast offer both at the same time (screenshots attached).

Any of my older installer versions, 5.36 or earlier, shows no offer at all no matter how long I wait.

Also if I disconnect from the internet (flight mode) none of my new installers, including v5.39 shows any offer.

I've attached various screenshots in a zip file.

All my specs are as previous except for the Windows build: now 16299.192

Windows 10 Home, v1709, build 16299.192, 64 bit.


Intel Celeron CPU N2840 @2.16GHz (Overclocks to 2.58).


4 GB RAM.

Running Windows Defender plus MB Anti-Exploit stand alone.

CC install caps.zip

Hey guys,

If you do need to uninstall Avast, the most thorough method is detailed here: https://support.avast.com/en-gb/article/10/

You can also use CCleaner to wipe up any leftovers there may be (e.g. registry entries).

I registered just to add to this thread. I've been a Piriform Pro user for years (read: my purchase of Pro versions are supposed to support the company so I shouldn't get this PUP stuff). I just installed CCleaner pro on a new PC - selected customize as usual - and saw NO offers for extra software. I was shocked to find Avast suddenly appear. After the last CCleaner malware debacle, I thought Piriform would be extra vigilant not to further tarnish it's previously sterling reputation. This should be fixed immediately! Installing PUP's that require a special uninstaller tool should not only require an OPT-IN, but also an "ARE YOU ABSOLUTELY SURE" message.