AVG deleting data



  • I know AVG is not a very good product. However, we use the antivirus for several of our customers. We found 2 cases where AVG completely removed most, if not all files from a drive. It appears to leave the directories, but deleted most of the files in the directories. Looks like the files get deleted when it's either installed/removed, and is rebooted afterwards. After reboot, files are gone. Happened for a workstation and a server, which were 2 different customers. Any thoughts or a similar experience?



  • Are you seeing logs to confirm AVG is actually deleting the files?



  • @IRJ said in AVG deleting data:

    Are you seeing logs to confirm AVG is actually deleting the files?

    It's assumed it's AVG from the team based on these 2 instances. This kind of got handed over to me to investigate what the root cause might be. I ran MB and Mbam to see if it's a possible virus, but nothing. I'm searching through the logs in the program data folder to see if there's anything eye opening.



  • This sounds familiar, I recall some piece of software doing this. I can't recall if it was AVG or Symantec.



  • I was on mobile last night, but the same thing was occurring from what I recall. At uninstall time, the software was just deleting all sorts of files IIRC.



  • If its really deleting system files on uninstall that is a very undesirable behavior. Are they any logs confirming this?

    Was there any rhyme or reason to the files it deleted? Were they files that may have been in quarantine or something?

    Also is there any removal tool for AVG? Many other AVs have a removal tool to completely remove them. Btw that shouldnt be the issue because deleting files during a normal uninstall is crazy, but a removal tool is the correct way to uninstall if there is an official one.



  • @IRJ

    I did not find any logs that show the files being removed. I did find logs that show when AVG reported the disk space was less than what it was that morning. It appears Scan Reports are not enabled by default though, which is a setting you must enable. This one was not. I also found we have a 3rd instance of these happening to another customer. The tech removed AVG with the removal tool. Then, boom. Files are all gone. We are trying to mitigate the problem in our lab. Hopefully we find out something.



  • @Fredtx said in AVG deleting data:

    @IRJ

    I did not find any logs that show the files being removed. I did find logs that show when AVG reported the disk space was less than what it was that morning. It appears Scan Reports are not enabled by default though, which is a setting you must enable. This one was not. I also found we have a 3rd instance of these happening to another customer. The tech removed AVG with the removal tool. Then, boom. Files are all gone. We are trying to mitigate the problem in our lab. Hopefully we find out something.

    Setup FIM to see what is causing it 100%



  • @IRJ said in AVG deleting data:

    Setup FIM to see what is causing it 100%

    FIM?


Log in to reply