Please I am really interested in finding the cause of this. Three weeks ago I noticed that there was an Avast software folder in local appdata. Inside it it had Datascan.json file.
Now, I have never downloaded anything Avast related to my pc (neither the CCleaner). Datascan file is clean according to multiple Av’s and virustotal.
What’s strange is it reappers every every Monday. I have done multiple scans of my computer and tried to be as thorough as possible and nothing has come up as being malicious. What could be the cause of this? Thank you
Link to Virustotal scan of the Datascan file
Here’s some solutions:
Scheduled Tasks:
- You mentioned it occurring every Monday, check your scheduled tasks to see if there is a task set to create this folder and/or file. You can check the task schedules and review the tasks that run at specific intervals.
Startup Programs:
- Check to see if there is anything Avast related or anything suspicious in your startup programs.
Registry Entries:
- Check for any Avast-related entries that could have been left behind. Avast related protects tend to get tacked onto software as a method of them trying to get you to buy their product. Maybe a bad installer left some stuff behind.
Browser Extensions:
- Sometimes software installs browser extensions without explicit permission, check to see if you have any Avast-related extensions.
File System Monitoring:
- Consider installing and using system monitoring tools to track changes to your file system. This will help identify what process or program is creating the Avast folder and Datascan.json file.
Check Network Activity:
- Monitor your Network activity during the time when the folder appears, this can be done using network monitoring tools like Wireshark or Windows Resource Monitor.
You should also consider the fact that this may be Malware. It’s very possible to obfuscate Malware such that malware scanners don’t pick up on it. So you may want to consider doing a full system scan. I personally use Eset Nod32, but there are other reputable antivirus solutions.
Thank you so much for taking the time to comment!
I’ve done multiple full system scans with Eset Premium version, Windows defender, Malwarebytes, even with the MRT.exe. Other scans include Hitmanpro and Malwarebytes adwcleaner. All of them have given me clear results.
I went to see what my browser extensions are, and I have the following. AdBlock, Malwarebytes Browser Guard, Metamask, Return Youtube Dislike and Zoom Chrome Extension
I’ve gone through all the startup programs, and nothing Avast related is found. I used Taskmanager and Autoruns for this. I’ve also used Autoruns to search for any suspicious programs. I haven’t found anything
I searched anything related to Avast from the Registry, and nothing came up
I have monitored the scheduled tasks, and nothing matches the time when the Avast Software folder was created.
I also went through the event viewer, and the only thing that happened at the same time as the file was created was this. 27.11.2023 14.06.21 Microsoft Windows security auditing. Logon/Special logon
The file was created 14.06.20
These special logons happened many times before the folder creation, so I’m not sure if it is related
Honestly, I am so exhausted because it’s constantly in my mind, and the cause of this seems so mysterious.
With my laptop, I am really careful with every download almost to the point of mild paranoia, haha. All upcoming emails are scams until proven otherwise. Not sure what to do next