# avast-security-analysis

This skill examines Avast components, runtime defenses, and behavioral detection. Use it when researching antivirus internals on Windows.

- skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · 1000 installs · ★ 12
- Author: reason-machines
- License: LicenseRef-Unknown · policy=link-only · description only; the file stays with the author
- Source: https://github.com/reason-machines/security-skills/tree/HEAD/skills/avast-security-analysis/SKILL.md
- Updated: 2026-10-09
- HTML: https://affpapa.org/en/nevibecode/skills/avast-security-analysis

## What it does

The skill guides analysis of Avast security mechanisms, with attention to behavioral detection, real-time defenses, and component structure. It covers examining PE headers, locating Avast processes, and reading configuration values from the Windows registry.

The material also points to observing file activity performed by security software. Its examples use the Windows API and C++, including `AvastSvc.exe`, `AvastUI.exe`, `aswidsagent.exe`, and `SOFTWARE\\AVAST Software\\Avast`. The repository warns that related files may include unauthorized keygens, cracks, or malware, so inspect the package before running it.

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill avast-security-analysis -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/avast-security-analysis/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/avast-security-analysis/

### Codex

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill avast-security-analysis -a codex
```

2. **Manually: put the files in place**
- File: `.agents/skills/avast-security-analysis/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill avast-security-analysis -a cursor
```

2. **Manually: put the files in place**
- File: `.cursor/skills/avast-security-analysis/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install reason-machines/security-skills avast-security-analysis
```

2. **Manually: put the files in place**
- File: `.github/skills/avast-security-analysis/SKILL.md`

### Gemini CLI

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill avast-security-analysis -a gemini-cli
```

2. **Platform CLI**
```bash
gemini skills install https://github.com/reason-machines/security-skills --path skills/avast-security-analysis
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/avast-security-analysis/SKILL.md` — The legacy .windsurf/skills/ path still works

### OpenCode

**Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill avast-security-analysis -a opencode
```

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/reason-machines/security-skills/tree/HEAD/skills/avast-security-analysis/SKILL.md

## When to use it
- inspect PE headers in Avast components
- trace `AvastSvc.exe` and `AvastUI.exe` processes
- read Avast settings from the Windows registry
- study antivirus behavioral detection
- watch file activity from security software

## Example prompts
- Analyze Avast PE headers in C++ and explain the fields that matter for security research.
- Inspect `AvastSvc.exe`, `AvastUI.exe`, and `aswidsagent.exe`, then describe what each process does.
- Read `ProgramPath` and `Version` under `SOFTWARE\\AVAST Software\\Avast` and explain the results.

## Similar
- [ntwarden-windows-analysis-toolkit](https://affpapa.org/en/nevibecode/skills/ntwarden-windows-analysis-toolkit.md) — skill · 443 installs
- [powershell-security-hardening](https://affpapa.org/en/nevibecode/agents/powershell-security-hardening.md) — subagent · 194 installs
- [MCP Server for WinDbg Crash Analysis](https://affpapa.org/en/nevibecode/mcp/mcp-server-for-windbg-crash-analysis.md) — MCP server · ★ 1633
- [anti-debugging-techniques](https://affpapa.org/en/nevibecode/skills/anti-debugging-techniques.md) — skill · 3700 installs
- [windows-privilege-escalation](https://affpapa.org/en/nevibecode/skills/windows-privilege-escalation.md) — skill · 3600 installs
- [windows-ui-automation](https://affpapa.org/en/nevibecode/skills/windows-ui-automation.md) — skill · 1300 installs

From the same set: [reason-machines/security-skills](https://affpapa.org/en/nevibecode/by/reason-machines/security-skills.md) — 69 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md