Germany-based security biz Avira's antivirus has enabled a new feature: " [1]Avira Crypto ". It's opt-in, but if you click "yes", the AV will use your computer to mine Ethereum.

[2]

Avira's stand at the CEBIT expo in Hanover, Germany, back in 2011

Many Reg readers probably won't have user fleets running on the legacy AV, however, as highlighted by security researcher Brian Krebs [3]earlier today , the feature was added to Avira's product set [4]late last year , just days after Norton360 started to hit the headlines [5]for doing the same .

Perhaps we shouldn't be too surprised, as the same company, NortonLifeLock, owns both [6]brands . NortonLifeLock is what's left of Symantec after [7]it spun off Veritas and then [8]got bought by Broadcom .

As NortonLifeLock [9]also bought Avast last year , it will be interesting to see if its owner's new-found fondness for imaginary internet money will soften Avast's strong [10]anti-cryptocurrency-mining stance. (Just in case that page might mysteriously vanish from Avast's website, we've [11]archived it for your convenience.)

Amusingly, if Avast should start grassing up its sister products, there is precedent for that: [12]at one point Avira flagged up itself as malware.

[13]

Before it was purchased by Norton, [14]Avast itself bought AVG (for full disclosure, about a year after your correspondent left the latter company). Both companies had issues around add-on browser toolbars that [15]Firefox-maker Mozilla itself branded as malware .

[16]

[17]

Moves like these are signs of the continuing consolidation in the antivirus market, since [18]Microsoft bought GeCAD and Giant , started offering [19]its own freeware antivirus for Windows XP, Vista and 7, then [20]bundled it , to the [21]ire of other antivirus vendors .

Both Norton360 and Avira mine Ethereum, a cryptocurrency whose chief difference from Bitcoin is that it allows you to embed code into its blockchain. It was the basis of distributed venture-capital fund "The DAO", founded at the end of April 2016 under the [22]slogan :

"To blaze a new path in business organization for the betterment of its members, existing simultaneously nowhere and everywhere and operating solely with the steadfast iron will of unstoppable code ." [Emphasis in the original.]

Unsurprisingly, by June, [23]an attacker exploited a vulnerability in the org and it lost a third of its capital: $50m . To fix the hole, Ethereum's developers had to [24]fork their own software. A cynic could be forgiven for pointing out that embedding code into an immutable blockchain is a bad plan: all software has bugs, but if it's read-only, you can't fix them when you find them. "Unstoppable code" is not a good thing.

[25]Remember Norton 360's bundled cryptominer? Irritated folk realise Ethereum crafter is tricky to delete

[26]No defence for outdated defenders as consumer AV nears RIP

[27]The inside story of ransomware repeatedly masquerading as a popular JS library for Roblox gamers

[28]Remember SoftRAM 95? Compression app claimed to double memory in Windows but actually did nothing at all

The real problem is that things like browser toolbars bring in more revenue than freeware antivirus, especially when the OS vendor throws in a serviceable-enough antivirus program for nothing.

So, instead, why not use under-utilised PCs to mine pretend internet ransom-payment tokens? Paid home antivirus mainly sells to people who are not very tech-literate, especially senior citizens. Those same people are also very likely to fall prey to get-rich-quick schemes… and that's exactly what cryptocurrencies are.

[29]

As Dreamwidth co-founder Denise Paolucci [30]observed on Twitter:

All of my professional service providers keep asking me about crypto because they keep hearing about it and they know I'm a tech person and I'm like 'Look. If this were ever going to be a viable ANYTHING, porn studios would have embraced it 5 minutes after it showed up.'

And then they laugh and I'm like 'No, I'm dead flat serious, if there's a new payment, communication, or data storage thing and the porn industry didn't immediately adopt it widely? It is not ever going to be a thing.'

®

Get our [31]Tech Resources



[1] https://support.avira.com/hc/en-us/articles/4407469485585-What-is-Avira-Crypto-

[2] https://regmedia.co.uk/2022/01/10/shutterstock_avira.jpg

[3] https://krebsonsecurity.com/2022/01/500m-avira-antivirus-users-introduced-to-cryptomining/

[4] https://www.avira.com/en/blog/avira-unveils-extended-features-with-avira-crypto-game-booster-and-breach-monitor

[5] https://www.theregister.com/2022/01/05/norton_360_cryptominer_deletion/

[6] https://www.nortonlifelock.com/us/en/corporate-profile/

[7] https://www.theregister.com/2016/02/01/problems_hinder_veritas_sale_spoil_launch/

[8] https://www.theregister.com/2019/08/09/broadcom_buys_symantec_for_10bn/

[9] https://www.theregister.com/2021/08/11/nortonlifelock_to_acquire_avast/

[10] https://blog.avast.com/reclassify-cryptominers-as-tool-or-malware

[11] https://archive.ph/1B6j4

[12] https://www.theregister.com/2011/10/26/avira_auto_immune_false_positive/

[13] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Ydy6lq5ZRPlmM4-FUKee5QAAAMs&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[14] https://www.theregister.com/2016/09/30/avast_closes_avg_buyout/

[15] https://www.theregister.com/2019/12/04/avast_avg_mozilla_takedown/

[16] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Ydy6lq5ZRPlmM4-FUKee5QAAAMs&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[17] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Ydy6lq5ZRPlmM4-FUKee5QAAAMs&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[18] https://www.theregister.com/2006/10/09/av_market_analysis/

[19] https://www.theregister.com/2009/09/30/microsoft_security_essentials_analysis/

[20] https://www.theregister.com/2011/09/14/windows_8_bundles_antivirus/

[21] https://www.theregister.com/2017/06/06/windows_defender_competition_complaint/

[22] https://web.archive.org/web/20160622212753/https://daohub.org/index.html

[23] https://www.theregister.com/2016/06/17/digital_currency_ethereum/

[24] https://davidgerard.co.uk/blockchain/the-dao/

[25] https://www.theregister.com/2022/01/05/norton_360_cryptominer_deletion/

[26] https://www.theregister.com/2022/01/10/opinion_column_consumer_av/

[27] https://www.theregister.com/2021/11/16/nobloxjs_typosquatting_discord/

[28] https://www.theregister.com/2021/11/15/softram95/

[29] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Ydy6lq5ZRPlmM4-FUKee5QAAAMs&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[30] https://twitter.com/rahaeli/status/1480371442881470466

[31] https://whitepapers.theregister.com/