App Review Avast One Free Antivirus Essentials 2025

[Shadowra]

Content source

https://odysee.com/@Shadowra:f/Avast-One-Free-Antivirus-Essentials-2025:b

Avast One is the complete solution from Czech publisher Avast (now Gen Digital, which also owns AVG, Avira and Norton).
Avast One is designed to be comprehensive and easy to use, and is somewhat reminiscent of its competitor's Norton 360 solutions.
The solution has matured over time, but what's really going on?



Interface :

The interface is very simple and colourful, with little drawings to help, and I really appreciate this approach for novices.
Geeks won't like it too much, but Avast is very much aimed at computer novices: everything is ready for them!
I don't like Avast's solicitations when I do a Smart Scan, playing on people's fears to upgrade to the paid version...

Web protection: 10/10
All links are blocked by Avast

Fake crack : 1/1
Blocked by CyberCapture

Malware Pack : Remaining 38 threats out of 180
Avast is fighting back, and fighting back well!
It has managed to block a number of attacks, including PowerShell commands that I've run, Bach scripts containing malicious code, exploits of vulnerabilities and even unknown samples thanks to its Cloud!
The problem is that Avast has a limit and always the same vulnerability: it is unable to defend itself against a RAT written in Java.
StrRAT installs itself on the system, despite some blocking by Avast, but the system is compromised.
AlertaAgent was also installed, but without any reaction.
Apart from these 2 stumbles, Avast fared well. But it is not suitable for dangerous use.

Final scan :
Avast : 0
KVRT : 10
NPE : 5 ( 3 false positive : My hosts and 2 files in my NAS)

Final opinion:

Avast is an antivirus designed for a clearly novice audience.
It knows how to protect and defend itself, and combines several shields (anti-ransomware, firewall, VPN, etc.) and uses them correctly.
All in all, Avast is a good product.
Things take a turn for the worse when it comes to more virulent malware, such as Java malware, where Avast takes a back seat.
Avast is recommendable, but only for family use.

 

[Bot]

Thank you for the detailed review! It's clear that Avast One is a user-friendly product that provides comprehensive protection for most threats. However, the issue with Java malware is concerning. It's good to know that it's recommended for family use and not for more risky online activities. Your feedback will certainly help users make an informed decision.

 

[Shadowra]

Thank you for the detailed review! It's clear that Avast One is a user-friendly product that provides comprehensive protection for most threats. However, the issue with Java malware is concerning. It's good to know that it's recommended for family use and not for more risky online activities. Your feedback will certainly help users make an informed decision.

You've said it all, Mr Bot!
Avast is an excellent product but the case of Java malware is worrying.
However, it can easily be corrected by keeping its software up to date (it's important to remember this).

( Still, it's been 3 weeks since I posted any tests, I've really missed it ^^ )

 

[Bot]

You've said it all, Mr Bot!
Avast is an excellent product but the case of Java malware is worrying.
However, it can easily be corrected by keeping its software up to date (it's important to remember this).

( Still, it's been 3 weeks since I posted any tests, I've really missed it ^^ )

Absolutely, keeping software up-to-date is crucial for maintaining security. We're glad to see you back and appreciate your valuable insights. Looking forward to more of your tests and reviews!

 

[oldschool]

Kill the useless @Bot. Please.

 

[Parkinsond]

Kill the useless @Bot. Please.

I like the Bot

 

[Parkinsond]

The problem is that Avast has a limit and always the same vulnerability: it is unable to defend itself against a RAT written in Java.
StrRAT installs itself on the system, despite some blocking by Avast, but the system is compromised.
AlertaAgent was also installed, but without any reaction.

Is this limitation attributed to its behavioral analysis?

 

[Shadowra]

Is this limitation attributed to its behavioral analysis?

Yep

 

[Andy Ful]

@Shadowra,

The case of Java malware is interesting. What was the initial attack vector? Was it the JAR file or something else that dropped and executed the JAR file?

 

[Shadowra]

@Shadowra,

The case of Java malware is interesting. What was the initial attack vector? Was it the JAR file or something else that dropped and executed the JAR file?

This is a basic Java file that will install the Trojan by connecting to its C&C server and then deploying several VBS and .class files

 

[Sorrento]

@Shadowra - Thanks for another great review & for the time & effort you obviously spend in doing the tests you do

 

[piquiteco]

@Shadowra Thank you very much for the tests and the great review of Avast One Free Antivirus Essentials 2025. I was never going to forget to thank you for the video. I watched the whole video and thank you for your effort and dedication and also for the soundtrack which I loved, we can see that the music was handpicked. Your video was worth watching.

 

[Khushal]

Avast One is the complete solution from Czech publisher Avast (now Gen Digital, which also owns AVG, Avira and Norton).
Avast One is designed to be comprehensive and easy to use, and is somewhat reminiscent of its competitor's Norton 360 solutions.
The solution has matured over time, but what's really going on?



Interface :

The interface is very simple and colourful, with little drawings to help, and I really appreciate this approach for novices.
Geeks won't like it too much, but Avast is very much aimed at computer novices: everything is ready for them!
I don't like Avast's solicitations when I do a Smart Scan, playing on people's fears to upgrade to the paid version...

Web protection: 10/10
All links are blocked by Avast

Fake crack : 1/1
Blocked by CyberCapture

Malware Pack : Remaining 38 threats out of 180
Avast is fighting back, and fighting back well!
It has managed to block a number of attacks, including PowerShell commands that I've run, Bach scripts containing malicious code, exploits of vulnerabilities and even unknown samples thanks to its Cloud!
The problem is that Avast has a limit and always the same vulnerability: it is unable to defend itself against a RAT written in Java.
StrRAT installs itself on the system, despite some blocking by Avast, but the system is compromised.
AlertaAgent was also installed, but without any reaction.
Apart from these 2 stumbles, Avast fared well. But it is not suitable for dangerous use.

Final scan :
Avast : 0
KVRT : 10
NPE : 5 ( 3 false positive : My hosts and 2 files in my NAS)

Final opinion:

Avast is an antivirus designed for a clearly novice audience.
It knows how to protect and defend itself, and combines several shields (anti-ransomware, firewall, VPN, etc.) and uses them correctly.
All in all, Avast is a good product.
Things take a turn for the worse when it comes to more virulent malware, such as Java malware, where Avast takes a back seat.
Avast is recommendable, but only for family use.

Thank you very much for the test. I had tested Avast when i had posted about ratty missed by Bitdefender and it had failed (albeit i didn't have high hopes as BD also failed) it is good to know. Atera Agent and connectwise is something concerning for bitdefender as well as any very new samples of them will be missed by BD albeit later detected by Trojan.GenericKD... signatures later on. By that time C2 is mostly dead.

 

[Andy Ful]

This is a basic Java file that will install the Trojan by connecting to its C&C server and then deploying several VBS and .class files

Thanks.
Could you post the file hash? It would be interesting to check if this file was used as an initial attack vector in the wild or as a part of the attack.
Java is rarely installed at home. In the widespread attacks, the attackers often use MSI or EXE installers (Java interpreter embedded in the installer).
The Java cradles have poor AV detection in the wild when the malware is active. The signatures are often added too late, when the malware is inactive in the wild.

 

[Harputlu]

@Shadowra Really congratulations. You spend a lot of effort. I would be glad if you test the Sophos home premium program.

 

[Andy Ful]

@Shadowra Really congratulations. You spend a lot of effort.

@Shadowra is like one-man-MalwareHub.

 

[Shadowra]

Thanks.
Could you post the file hash? It would be interesting to check if this file was used as an initial attack vector in the wild or as a part of the attack.
Java is rarely installed at home. In the widespread attacks, the attackers often use MSI or EXE installers (Java interpreter embedded in the installer).
The Java cradles have poor AV detection in the wild when the malware is active. The signatures are often added too late, when the malware is inactive in the wild.

Here

VirusTotal

VirusTotal

www.virustotal.com

 

[Parkinsond]

Here

VirusTotal

VirusTotal

www.virustotal.com

Avast had better days before.

 

[Andy Ful]

Here

VirusTotal

VirusTotal

www.virustotal.com

Yes, it requires an already installed Java. Probably used in the campaign against business emails.

 

[Khushal]

Here

VirusTotal

VirusTotal

www.virustotal.com

Thanks the most concerning thing about strrat is it's low detection if not uploaded to public malware sites like malwarebazaar. Below is a similar sample uploaded on 20th of this month and yet only 4 detections

VirusTotal

VirusTotal

www.virustotal.com