Yesterday I downloaded from avast.com the free version
MD5 is 0ea95f1e762494b5d928ed4d5b5da29b. Is that correct?
I had several questions, posted them here:
http://forum.avast.com/index.php?topic=127697.0
but I was told to come to this forum instead.
Can someone comment on what I saw in my post there, please, so we don’t duplicate. Thank you.
Avast is reporting on the behaviour of the google update. Does this occur all the time or was it just a one off
It happened as I was installing the latest, bestest, avast. Which, likely due to my inattention, pushed that google chrome thing with a rootkit in it. I never expected avast to give me an installer with a rootkit.
It never happened before. I have no google applications here. Never did. So no google updates possible.
I think I will do a complete reinstallation, or restore from a week old image, because an idea of a rootkit, a hidden update service in this instance, gives me cold shivers. what do you think? I know you’re a malware expert, so I will trust what you suggest.
It will not be a rootkit, but the behaviour of the file that alerted Avast. As long as the installer was downloaded from a reputable site I would go for a false positive