Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: philip brampton on March 31, 2012, 06:57:51 PM

Title: Scripts
Post by: philip brampton on March 31, 2012, 06:57:51 PM
As regards Scripts.
What is the difference in the way they are treated between XP and Windows 7?
The reason i am asking is because in XP i attract quite a number of Scripts whereas in W7 the only time i get any is if i download music from Amazon.
Perhaps someone could explain.
Thanks
Title: Re: Scripts
Post by: DavidR on March 31, 2012, 07:21:21 PM
For me it is the reverse, I see zero activity on the script shield with XP Pro and Firefox, so I guess you are using IE in XP as that is the only time I get any activity.

Since I use NoScript and RequestPolicy add-ons in firefox I would be limited on the number of scripts that are allowed to run anyway. I generally don't visit too many media heavy sites.
Title: Re: Scripts
Post by: philip brampton on March 31, 2012, 07:30:43 PM
No.
I have Firefox with XP and W7.
Title: Re: Scripts
Post by: DavidR on March 31, 2012, 08:19:23 PM
Are you using NoScript with firefox ?
If not I would certainly try it (and see if the activity is lowered) as scripts are generally required by driveby download exploits, etc.
Title: Re: Scripts
Post by: philip brampton on March 31, 2012, 09:48:38 PM
No,i don't have No Scripts but it sounds like it's worth a try.
The only difference between XP and W7 is that i have AdBan on my W7 computer.
Regards
Title: Re: Scripts
Post by: Gopher John on April 01, 2012, 02:49:25 PM
If Firefox is your default browser and is started from the Avast VPS update notification popup, then Script Shield will not be active for that Firefox session.  See http://forum.avast.com/index.php?topic=95628 (http://forum.avast.com/index.php?topic=95628).  The same is true with the monthly security reports popup.
Title: Re: Scripts
Post by: philip brampton on April 01, 2012, 03:26:45 PM
Pray tell me what VPS has got to do with my Script Shield working or not working as the case may be.
Regards
Title: Re: Scripts
Post by: Gopher John on April 01, 2012, 03:39:22 PM
Pray tell me what VPS has got to do with my Script Shield working or not working as the case may be.
Regards

It's not the VPS itself.  Read the thread.  There are other things that can affect Script Shield not running, but this one issue has been verified.  It's been verified as consistent and repeatable.  It only affects the Firefox session that is started from the Avast popups.  When that session of Firefox is closed, and Firefox is restarted normally, Script Shield works.  If the user routinely starts Firefox from the popup and doesn't close Firefox, then they'll never see any activity in Script Shield.

Of course,  if Script Shield doesn't work when Firefox is opened normally, it's obviously another issue.
Title: Re: Scripts
Post by: philip brampton on April 01, 2012, 04:23:23 PM
Another issue i think.
Regards
Title: Re: Scripts
Post by: DavidR on April 01, 2012, 04:28:14 PM
Well I never start firefox from an avast pop-up, I always start it manually shortly after boot and the script shield has never worked in firefox for me certainly not in avast7 builds. So certainly a whole different ball game.
Title: Re: Scripts
Post by: philip brampton on April 01, 2012, 04:34:54 PM
The only difference between my toys is the operating system and the W7 one has AdBan.Maybe the next time i run the XP one i will install AdBan and No Script as you suggested.
Thanks.
Title: Re: Scripts
Post by: philip brampton on April 01, 2012, 06:18:48 PM
I contacted AdBan regarding scripts.Here is their reply.


Yes, AdBan blocks certain scripts if it thinks they are related to
ads. If this breaks websites you visit, try disabling AdBan on those
websites. Open broken website, then click 'AB' icon at the upper
right-hand corner and select 'Don't block ads on ...', where ...
should contain opened site's name.
Title: Re: Scripts
Post by: Gopher John on April 01, 2012, 11:17:47 PM
Another issue i think.
Regards

Yes, there are two issues.  The popup one could also cause one to think that Script Shield would not work.  Other people, like DavidR and you, have the problem with Script Shield regardless.

I also use NoScript and Adblock Plus.  Many ads have scripts; if ABP or AdBan block them the scripting also will be blocked.  I like NoScript, because some reputable sites have scripts being retrieved from multiple third party sites.
Title: Re: Scripts
Post by: philip brampton on April 02, 2012, 01:32:17 PM
adBan makes no difference.
regards
Title: Re: Scripts
Post by: Gopher John on April 02, 2012, 02:35:26 PM
adBan makes no difference.
regards

It looks like adBan doesn't deliver what it promises.  See the reviews.  https://addons.mozilla.org/en-US/firefox/addon/adban/reviews/ (https://addons.mozilla.org/en-US/firefox/addon/adban/reviews/)
Title: Re: Scripts
Post by: philip brampton on April 02, 2012, 02:51:55 PM
I find it deals very well with adverts which is the reason why i have it.
As regards scripts i just thought that it would control scripts .
It's no big deal that it doesn't.
My XP computer is almost retired so scripts are not a problem.
Regards
Title: Re: Scripts
Post by: Gopher John on April 02, 2012, 03:24:57 PM
If you don't have any Script Shield activity in Firefox, you have no way of checking whether adBan is blocking scripts from ad sites.
Title: Re: Scripts
Post by: Tetsuo on April 02, 2012, 06:58:32 PM
For me it is the reverse, I see zero activity on the script shield with XP Pro and Firefox

I started using Script Shield today - I have never bothered installing it until now...
Not sure if it has been reported yet but with "Monitor the system for unauthorized modifications" (Behavior Shield settings) unchecked, the Script Shield drastically reduces its activity - e.g. visiting Avast Forum with Firefox: from almost 250 scanned items to 0.
I guess you have that option enabled though.

Edit - OS: XP Pro SP3
Title: Re: Scripts
Post by: DavidR on April 02, 2012, 07:25:31 PM
Thanks for the post
- That is an option in the Behavior Shield that I have unchecked (so may well have reduced my activity to zero) as I have Outpost Firewall Pro and WinPatrol Plus, both of which protect against unauthorised system modification.

So this interaction between the two shields isn't one I would have thought significant and certainly not to the script shield.
Title: Re: Scripts
Post by: Lisandro on April 02, 2012, 08:16:13 PM
Tetsuo, maybe it interests you: http://forum.avast.com/index.php?topic=96640.msg770847#msg770847
Title: Re: Scripts
Post by: Tetsuo on April 02, 2012, 10:01:34 PM
Thanks for the post
- That is an option in the Behavior Shield that I have unchecked (so may well have reduced my activity to zero) as I have Outpost Firewall Pro and WinPatrol Plus, both of which protect against unauthorised system modification.

So this interaction between the two shields isn't one I would have thought significant and certainly not to the script shield.

You're welcome, DavidR.
I just remembered you saying somewhere in the Forum that you had been seeing zero activity in the Script Shield so I checked one of the recent threads.

Although I started using Behavior/Script Shields this morning I suspect that "Monitor the system for unauthorized modifications" is responsible for many of the HIPS like pop-ups when the action to take is set to "Ask" - yeah, I'm too paranoid to set Behavior Shield to Auto :D

Anyway, I have also Online Armor which is a HIPS...

Tetsuo, maybe it interests you: http://forum.avast.com/index.php?topic=96640.msg770847#msg770847

Thank you, Tech.
Title: Re: Scripts
Post by: DavidR on April 02, 2012, 10:07:20 PM
Having temporarily enabled that option again, I have still seen zero activity. I wouldn't have thought this would require a reboot to take effect. But I will try a Behavior and Script Shield Stop/Start and see if the settings take.
Title: Re: Scripts
Post by: Tetsuo on April 03, 2012, 11:59:01 AM
I wouldn't have thought this would require a reboot to take effect. But I will try a Behavior and Script Shield Stop/Start and see if the settings take.

mmmh.... here it doesn't require a reboot, I just have to tick/untick "Monitor the system..." to see the effects.
As for today, still zero activity. Even starting Win Media Player doesn't trigger anything anymore.
Title: Re: Scripts
Post by: philip brampton on April 03, 2012, 12:27:42 PM
My problem seems to have been resolved
I reinstalled  yesterday.When i booted this Morning the counter started to count.So far 189.
Lets see what happens over the next few days.
Regards

Avast Free.v.7.0.1426
Malwarebytes Pro
Windows 7 sp1
Firefox 12 beta
Title: Re: Scripts
Post by: DavidR on April 03, 2012, 01:57:05 PM
I wouldn't have thought this would require a reboot to take effect. But I will try a Behavior and Script Shield Stop/Start and see if the settings take.

mmmh.... here it doesn't require a reboot, I just have to tick/untick "Monitor the system..." to see the effects.
As for today, still zero activity. Even starting Win Media Player doesn't trigger anything anymore.

Well after the boot this morning with the "Monitor the system for unauthorized modifications" (in the Behavior Shield settings) still enabled activity is restored in the script shield; weird or what, as I honestly can't see how the two are linked, that the BehShld would consider web activity as possible modifications to trigger the script shield. It just seems so weird that in order for the script shield to work this "Monitor the system for unauthorized modifications" option in the Behavior Shield settings has to be enabled. However, the Windows Media Player doesn't generate any activity.

Having just booted and loaded my normal programs and no activity on the script shield until I opened Firefox 11.0, plus my pinned tabs/pages browsed the forum and viewed a few video clips, script shield activity is at 290.
Title: Re: Scripts
Post by: philip brampton on April 03, 2012, 02:07:53 PM
 have been monitoring it all Morning.At the moment we have 216.
Regards.
Title: Re: Scripts
Post by: Tetsuo on April 03, 2012, 02:20:46 PM
I honestly can't see how the two are linked, that the BehShld would consider web activity as possible modifications to trigger the script shield. It just seems so weird that in order for the script shield to work this "Monitor the system for unauthorized modifications" option in the Behavior Shield settings has to be enabled.

Perhaps it monitors for browser homepage, default search engine, etc. unauthorized modifications in the same way it monitors for Hosts File unauthorized modifications. That could partially explain  the reason why the two (Behavior Shield's option & Script Shield's scanning) are linked, I guess.
Title: Re: Scripts
Post by: bob3160 on April 03, 2012, 02:30:23 PM
Mine are both sitting on a big fat 0 ???
Title: Re: Scripts
Post by: DavidR on April 03, 2012, 02:49:03 PM
Mine are both sitting on a big fat 0 ???


Have you unchecked the "Monitor the system for unauthorized modifications" option in the Behavior Shield settings though ?
Title: Re: Scripts
Post by: bob3160 on April 03, 2012, 03:11:26 PM
No
Title: Re: Scripts
Post by: Tetsuo on April 06, 2012, 12:31:08 PM
@DavidR, may I ask you if you are going to leave ""Monitor the system for unauthorized modifications" checked?
Title: Re: Scripts
Post by: DavidR on April 06, 2012, 01:12:44 PM
No as I have that area very well covered already, I only enabled for the testing phase to confirm.

What I can't understand is the need for this option to be enabled for the script shield to work. To me that just isn't logical as there appears to be no direct linkage in scanning scripts and the monitoring the system for unauthorized modifications option being enabled.
Title: Re: Scripts
Post by: bob3160 on April 06, 2012, 01:43:26 PM
No as I have that area very well covered already, I only enabled for the testing phase to confirm.

What I can't understand is the need for this option to be enabled for the script shield to work. To me that just isn't logical as there appears to be no direct linkage in scanning scripts and the monitoring the system for unauthorized modifications option being enabled.

I have it enabled but still have no activity in the script shield. I'm using Chrome for my browser.
Title: Re: Scripts
Post by: DavidR on April 06, 2012, 01:45:17 PM
Yes, another script shield anomaly that needs investigating by avast! but still a lack of input.
Title: Re: Scripts
Post by: Tetsuo on April 06, 2012, 09:16:32 PM
I'm using Chrome for my browser.

Not sure if you have already had a look at this thread: http://forum.avast.com/index.php?topic=96762.msg772212#msg772212

Igor wrote: I wouldn't really call it a bug... yes, I believe it doesn't work because the code has been prepared before Chrome 18 came out - so, Chrome 18 is not supported yet.
It will be updated in the next build of avast! (but then again, when the next version of Chrome gets released afterwards, chances are it will be unsupported again until the next avast! update - etc.)


No as I have that area very well covered already, I only enabled for the testing phase to confirm.

me too

Quote
What I can't understand is the need for this option to be enabled for the script shield to work. To me that just isn't logical as there appears to be no direct linkage in scanning scripts and the monitoring the system for unauthorized modifications option being enabled.

yeah, it's quite obscure...