Why would a legitimate application request to disable antivirus during installation?

2

1

Context:

I recently was asked by a user (a person with no large technological background) a basic question: how he can disable an antivirus. When I asked why would he want to disable it, the person explained that this was requested when installing an application.

Further questions made it appear that it is a malware disguised as an ordinary freeware product. From what I've seen, this is not the only malware which invites the user to disable an antivirus or to ignore warnings which may be shown by the antivirus.

Question:

Still, I remember a few cases where legit applications required to disable an antivirus during installation. I don't remember which ones, but there were well-known products from large companies (Adobe CS, maybe?)

Why would they, given that this gives a very bad habit to the users?

What could be a problem for the legitimate application to be installed in a context where an antivirus is on?

Arseni Mourzenko

Posted 2012-11-25T14:48:55.793

Reputation: 1 700

I would argue that an application inviting users to disable their antivirus software is illegitimate for exactly that reason. That's terrible advice regardless of who's giving it. – Marcks Thomas – 2012-11-25T15:14:52.623

@MarcksThomas not any of AV is perfect, there are some who don't report about virus in a file and some do. The same way app maker check them and if there AV finds any potential harmful code (you can say its a bug in AV) then they advise to user's to turn off their AV's to let install the program safely. AV warned you due to the DLL files t the installation time because some AV find some code/dll harmful while they are not. – avirk – 2012-11-25T15:49:39.337

Answers

2

Antivirus programs will sometimes detect false positives, and some antivirus programs will automatically quarantine or delete files that they suspect are malware.

If the antivirus accidentally deletes a legitimate file that is being used by the installer, it could interrupt the installer and leave the software that is being installed in a broken state.

When this happens, the end-user is likely to place the blame on the software that is being installed, not on the antivirus. Some software developers may ask users to disable their antivirus software to avoid this sort of situation.

HDMI

Posted 2012-11-25T14:48:55.793

Reputation: 126

1In which case they should report specific problems to the AV writer so they can be corrected. NOT ask for all the safeties to be disabled. If people take that easy way out then do not trust their programming either. Ditch it, get another product. – Hennes – 2012-11-25T15:20:56.173

In corporate environment we are asked to disable antivirus software all the time; performance reasons being the largest reason. A compromise, and most legitimate software vendors have this, is to provide a list of files to th AV to exclude. – Johnnie – 2012-11-25T15:21:21.723

1"should report specific problems to the AV writer" have you ever done this? Not as easy as it sounds to get a false positive removed unless you are a large software company requesting it. – Moab – 2012-11-25T16:27:21.197

I completely agree with Moab's comment above. If you've never tried this, you have no idea just how laborious the process is, and how obtuse the support staff of some AV vendors can be. – Karan – 2012-11-25T18:09:26.837