Fiddler reports everything coming from process avp:2016

Question

I have Fiddler installed at home and at work. At home, it tells me the actual process from the web session. At work, it only says avp:2016 no matter what browser or process the session is coming from.

Does anyone know why?

Answer 1

That's happening because all of the traffic is being redirected through AVP.exe.

"Why's that?" you ask?

Because you've installed an Antivirus package (e.g. Kaspersky) which injects its own proxy into every process so that it can attempt to scan traffic for viruses or malware. (I think this is a terrible idea with bad perf/safety ratio, but a number of AV companies do this.)

If you disable that option in your AV settings (it's usually called "Web Safety" or similar) then the traffic's origins will no longer be concealed.