First of all I am really surprised that as soon as I switch on , there seems to be a massive download to the tune of 50mb attributed to AVAST. This is purely AVAST and not some loopback using AVAST proxy.
This does not seem a regular signature update which could be say of maximum 1 mb. Then what is it? Especially when I have limits to internet data transfers , I cannot ill afford such unannounced transfers of AVAST. Why can’t the download content and the size of such downloads be intimated prior.
Hence I have ticked off the Streaming updates and also the Software updater (which thankfully is not an automatic intrusion).
Are you really sure it’s not a traffic through local proxy? It seems a bit excessive even if you’d combine all the communications (VPS updates, streaming updates, cloud lookup, Software Updater check etc).