Its the real time Avira protection.

I had to disable it to do the automatic MAJ