
When the update check is triggered, the elevated process cleans the ACL of the Update.ini file in %PROGRAMDATA%\Avast Software\Browser\Update\ and sets all privileges to group Everyone. The vulnerability is due to an insecure ACL set by the AvastBrowserUpdate.exe (which is running as NT AUTHORITY\SYSTEM) when AvastSecureBrowser.exe checks for new updates. That was mere speculation with no evidence at all.A Local Privilege Escalation issue was discovered in Avast Secure Browser. If it is this that caused the initial trouble then it must be a new thing because I'd bet Spybot and AVAST had been working together without conflict on his computer up until then.įrom the sound of it the OP has multiple malware problems and they had nothing at all to do with a supposed Spybot/AVAST conflict. Quote from: Cluster-Lizard2014 on February 23, 2016, 02:31:17 PM A conflict with Spybot (Tea Timer) is a lazy go to excuse for what has happened. The important question that should be asked is how that has happened when the OP is using AVAST? That was mere speculation with no evidence at all. Its never given me any false positives either, unlike AVAST has done many times over the same period.įrom the sound of it the OP has multiple malware problems and they had nothing at all to do with a supposed Spybot/AVAST conflict. Whilst it didn't stop them getting onto my machine neither did AVAST which at no point reported them at all. Over that time it has sat there doing very little apparently but when needed kicks in and has flagged up two keyloggers and a number of PUPs for me in real time. I'm sure it has even been recommended here in the past. The most recent version of Spybot is a bloated thing you really don't want or need but the older, smaller footprint v1.6.2 (including Tea Timer) has been happily working alongside various versions of AVAST on my computer for almost 5 years with no issues.

Spybot updates are just definition updates, like the Malwarebytes free version, the only reason a conflict might have occurred is because AVAST changed something not Spybot. If it is this that caused the initial trouble then it must be a new thing because I'd bet Spybot and AVAST had been working together without conflict on his computer up until then.

A conflict with Spybot (Tea Timer) is a lazy go to excuse for what has happened.
