AvastSvc.exe contains a full, unsandboxed JavaScript/DOM implementation
Has antivirus always been this sloppy? I recall a time in the 90s/early 2000s where the engineers working on these products were considered the best in the business.