It was the AVAST.SETUP transient file that confused me. Giving rights to that fixed the problem. Thanks.