Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: been on November 20, 2012, 11:26:00 PM

Title: Firefox 17.0 and Script Shield
Post by: been on November 20, 2012, 11:26:00 PM
Am I correct in observing that script shield isn't working with the latest Firefox release (17.0)?
Title: Re: Firefox 17.0 and Script Shield
Post by: DavidR on November 21, 2012, 12:04:33 AM
That appears to be the case, which after a firefox update has happened before I believe. So it may be a little while to be resolved.
Title: Re: Firefox 17.0 and Script Shield
Post by: TdkMate on November 21, 2012, 02:16:58 AM
Just so I can learn, how do you check if it's working or not?  I just opened up Avast and it says the Script Shield is running...  ??
Title: Re: Firefox 17.0 and Script Shield
Post by: iroc9555 on November 21, 2012, 02:26:46 AM
Just so I can learn, how do you check if it's working or not?  I just opened up Avast and it says the Script Shield is running...  ??

Just open Real-Time Shields > Protection Status and look at the count. Also Script Shield tab and see how many files it has scanned. See image.
Title: Re: Firefox 17.0 and Script Shield
Post by: Samson63 on November 21, 2012, 12:29:15 PM
Yep same here, XP Pro SP3, Avast free 7.0.1474 and Firefox 17.0, no Script Shield activity at all.
Title: Re: Firefox 17.0 and Script Shield
Post by: Paradoxian on November 21, 2012, 03:25:08 PM
Same here, Vista user. What is the recommended course of action? My script shield has never detected anything malicious on any of the sites I visit, and in addition I also use NoScript and Adblock to block a lot of scripts. So is it safe to continue using Firefox for now?
Title: Re: Firefox 17.0 and Script Shield
Post by: -midnight on November 21, 2012, 04:02:21 PM
I had Firefox 17 yesterday but after reading the OP's post I checked  and noticed Script Shield wasn't working so I uninstalled FF17.  I had FF 16.0.2 saved in my downloads, installed it this morning so Script Shield is working now.
Title: Re: Firefox 17.0 and Script Shield
Post by: DavidR on November 21, 2012, 04:09:31 PM
Same here, Vista user. What is the recommended course of action? My script shield has never detected anything malicious on any of the sites I visit, and in addition I also use NoScript and Adblock to block a lot of scripts. So is it safe to continue using Firefox for now?

As I type this on firefox 17.0, I think that you may have answer to your question.

Lets not forget that you still have the network shield, web shield and up to a point some of the other shields may provide a different level of protection (it would depend what the script was attempting to do). So you should still be covered, the script shield adds that little something more. No doubt in due course it will support firefox 17.0, though there are other areas other than your browser where the script shield would be monitoring (like windows scripting host I believe).

As you say firefox with NoScript also provides protection in this area by not allowing scripts to be run by default, unless you specifically allow it for a site.
Title: Re: Firefox 17.0 and Script Shield
Post by: user_1000 on November 21, 2012, 08:03:59 PM
Firefox 17.0 is an important release because it's an ESR version.

I recommend to use ESR versions of Firefox in all cases (home and all organizations). 8)
http://www.mozilla.org/en-US/firefox/organizations/all.html
Title: Re: Firefox 17.0 and Script Shield
Post by: -midnight on November 21, 2012, 09:51:14 PM
Who is it for?

Firefox ESR is intended for groups who deploy and maintain the desktop environment in large organizations such as universities and other schools, county or city governments and businesses.

Who is it not for?

Individual users who always want the latest features, performance enhancements and technologies in their browser without waiting for them to become available in ESR several development cycles later.
Title: Re: Firefox 17.0 and Script Shield
Post by: user_1000 on November 21, 2012, 10:20:54 PM
@-midnight

Yes, I know, but that Mozilla's statement doesn't actually mean anything. ;D Use the ESR version of Firefox, if you want a stable and solid version. ;)
Title: Re: Firefox 17.0 and Script Shield
Post by: jrace on November 21, 2012, 10:33:18 PM
Since I know now what Frefox ESR is, I did Firefox 17 (ESR) the compliment of installing this highly sophisticated state of the art piece of equipment on my computer.

And --- yes, script shield does not work with it's Majesty.
        :'(
Title: Re: Firefox 17.0 and Script Shield
Post by: user_1000 on November 21, 2012, 10:41:31 PM
@jrace

Script Shield will work with Firefox 17.0 after Avast has updated their software. Just wait a few days.
Title: Re: Firefox 17.0 and Script Shield
Post by: TdkMate on November 22, 2012, 12:40:47 AM
Just so I can learn, how do you check if it's working or not?  I just opened up Avast and it says the Script Shield is running...  ??
Just open Real-Time Shields > Protection Status and look at the count. Also Script Shield tab and see how many files it has scanned. See image.

It's working for me.   Thanks iroc9555.   :) 
Title: Re: Firefox 17.0 and Script Shield
Post by: -midnight on November 22, 2012, 02:07:04 PM
Firefox is so sneaky.  Each time I restart my computer it automatically updates to version 17, which I don't want so I have to uninstall it, then go to my downloads folder and reinstall version 16.0.2.
Title: Re: Firefox 17.0 and Script Shield
Post by: pk on November 22, 2012, 02:08:39 PM
Script shield uses exact pre-configured data to monitor FF 3.x up to 13.x, then it uses different method.
Now we found out, FF 16.x changed filtering algo a little bit (same as for FF 17.x I guess) so we'll need to modify our code.
I tried XP SP2 + FF 16.0.2 and SS didn't scan any FF script, can you confirm it?
I'll try to release a patched version and post a link.
Title: Re: Firefox 17.0 and Script Shield
Post by: -midnight on November 22, 2012, 02:19:44 PM
Script shield uses exact pre-configured data to monitor FF 3.x up to 13.x, then it uses different method.
Now we found out, FF 16.x changed filtering algo a little bit (same as for FF 17.x I guess) so we'll need to modify our code.
I tried XP SP2 + FF 16.0.2 and SS didn't scan any FF script, can you confirm it?
I'll try to release a patched version and post a link.

It's working on FF 16.0.2.

Windows 7 SP1
Title: Re: Firefox 17.0 and Script Shield
Post by: TdkMate on November 22, 2012, 02:30:50 PM
Firefox is so sneaky.  Each time I restart my computer it automatically updates to version 17, which I don't want so I have to uninstall it, then go to my downloads folder and reinstall version 16.0.2.

Go to Options and click on Advanced, then Update.  You can turn off Automatically Install Updates there.  See screen shot below:


Title: Re: Firefox 17.0 and Script Shield
Post by: DavidR on November 22, 2012, 04:10:53 PM
Firefox is so sneaky.  Each time I restart my computer it automatically updates to version 17, which I don't want so I have to uninstall it, then go to my downloads folder and reinstall version 16.0.2.

Nothing sneaky about it it is well known that it will auto update if you don't tell it not to.
Title: Re: Firefox 17.0 and Script Shield
Post by: -midnight on November 22, 2012, 05:26:10 PM
Firefox is so sneaky.  Each time I restart my computer it automatically updates to version 17, which I don't want so I have to uninstall it, then go to my downloads folder and reinstall version 16.0.2.

Nothing sneaky about it it is well known that it will auto update if you don't tell it not to.

It didn't use to auto update.  I now have it set to where it has to ask before updating.

So much for asking to update.  Just uninstalled a program which required my restarting my computer and once again FF updated to version 17.  Going to have to do the uninstalling and reinstalling  version 16.0.2.  What a pain!
Title: Re: Firefox 17.0 and Script Shield
Post by: Gordon_Hay on November 22, 2012, 10:58:40 PM
If I click on "Show Traffic History" for any of the shields I get a message that I need to install adobe flash player so it suggests that the problem might be with avast, not Firefox, if it thinks I don't have flash, when I do.
Title: Re: Firefox 17.0 and Script Shield
Post by: DavidR on November 22, 2012, 11:01:49 PM
This is unrelated to the topic being discussed here.

The traffic History uses flash for its graphical display. It has to be the IE version of Flash.
If this doesn't fully explain then please start your own new topic and we will try to help.
Title: Re: Firefox 17.0 and Script Shield
Post by: SpeedyPC on November 23, 2012, 06:42:19 AM
Script shield uses exact pre-configured data to monitor FF 3.x up to 13.x, then it uses different method.
Now we found out, FF 16.x changed filtering algo a little bit (same as for FF 17.x I guess) so we'll need to modify our code.
I tried XP SP2 + FF 16.0.2 and SS didn't scan any FF script, can you confirm it?
I'll try to release a patched version and post a link.

PK I've checked mind on XP Pro SP3 as the script shield doesn't work on both FF version 16.0.2 & 17.0.
Title: Re: Firefox 17.0 and Script Shield
Post by: mchain on November 23, 2012, 07:06:32 AM
Script shield uses exact pre-configured data to monitor FF 3.x up to 13.x, then it uses different method.
Now we found out, FF 16.x changed filtering algo a little bit (same as for FF 17.x I guess) so we'll need to modify our code.
I tried XP SP2 + FF 16.0.2 and SS didn't scan any FF script, can you confirm it?
I'll try to release a patched version and post a link.

PK I've checked mind on XP Pro SP3 as the script shield doesn't work on both FF version 16.0.2 & 17.0.
Confirmed issue.  Running FF 17.0 updated two days ago.

Been online about an hour and Script Shield shows 29 actions so far.  Much less than the 1,000 or so in the same time frame with FF 16.0.2.  Per DavidR, this is not a major issue, however.
Title: Re: Firefox 17.0 and Script Shield
Post by: RejZoR on November 23, 2012, 08:28:38 AM
Considering the rate of Firefox updates (and updates of other browsers), are there any plans to include components updating in the Streaming Updates? So you can push tiny updates quickly for stuff like Script Shield to start working without the long wait for the full program update.
I mean, it surely can be done that the part that needs to be specifically configured for firefox can be updated on the fly...
Title: Re: Firefox 17.0 and Script Shield
Post by: Tetsuo on November 23, 2012, 11:25:37 AM
@RejZoR

In the past they said (unfortunately I don't remember exactly when/where) that Script Shield updates for Avast! 8  will be probably included/pushed with the virus definition updates.
Title: Re: Firefox 17.0 and Script Shield
Post by: Asyn on November 23, 2012, 11:33:29 AM
A bit OT: Guys, why bother with such issues, when there's NoScript for FF... ;)
Title: Re: Firefox 17.0 and Script Shield
Post by: RejZoR on November 23, 2012, 11:40:12 AM
Well, i don't want to bother with NoScript and constantly fiddle with it. They don't work on the same level so they aren't exactly comparable.
Title: Re: Firefox 17.0 and Script Shield
Post by: Frosty_JG on November 23, 2012, 11:57:35 AM
After noticing that Script Shield doesn't work with Firefox 17 anymore, I tried Google Chrome (version 23.0.1271.64), and it didn't work, either, though I have no idea since when it doesn't work as I rarely use Chrome and never checked if it worked. All options, including Chrome, are checked in the Script Shield settings. Then I got a bit scared and launched Internet Explorer (which I never use other than to check if some problem is browser specific) and Script Shield works completely fine with IE. Anyone else having problems with Chrome, too? My OS is Win7 Home Premium SP1. All mentioned software, including Windows and Avast, are German language versions, but that shouldn't make a difference.
Title: Re: Firefox 17.0 and Script Shield
Post by: pk on November 23, 2012, 01:37:23 PM
you can try turn off self-protection mode (settings -> troubleshooting)
backup your aswJsFlt*.dll files from program files\avast software\avast
and download these 2 files: http://public.avast.com/~kurtin/patches/ap2012-11-23-001/aswJsFlt.dll + http://public.avast.com/~kurtin/patches/ap2012-11-23-001/aswJsFlt64.dll
it should work for FF 17.x (don't sure for 16.x XP SP2)
Title: Re: Firefox 17.0 and Script Shield
Post by: DavidR on November 23, 2012, 02:37:11 PM
Do we actually need the aswJsFlt64.dll if the OS and browser are 32bit versions ?
Or am I reading too much into the name (64 = 64bit).

EDIT: Even with the self-defence module disabled you may well still get file is in use, etc. I disabled the Script Shield and still got the file in use error. Solution close firefox and you should be able to replace the files.
Title: Re: Firefox 17.0 and Script Shield
Post by: iroc9555 on November 23, 2012, 02:37:29 PM
@ pk.

No joy. Replaced .dll and still no script detections. FF 17 and XP Pro_86 Sp 3
Title: Re: Firefox 17.0 and Script Shield
Post by: iroc9555 on November 23, 2012, 02:38:43 PM
@ pk.

No joy. Replaced .dll and still no script detections. FF 17 and XP Pro_86 Sp 3

DavidR I don't know if 32 bit OS needs it but it is there originally.

BTW it did not work for me.
Title: Re: Firefox 17.0 and Script Shield
Post by: pk on November 23, 2012, 02:39:16 PM
ok, let me recheck it -- this DLL is from avast8 so I didn't test it with avast7.
i'll let you know
Title: Re: Firefox 17.0 and Script Shield
Post by: iroc9555 on November 23, 2012, 02:40:10 PM
Thanks pk.
Title: Re: Firefox 17.0 and Script Shield
Post by: pk on November 23, 2012, 02:42:00 PM
@iroc9555: i updated those files from v7, can you please redownload them? thanks
Title: Re: Firefox 17.0 and Script Shield
Post by: iroc9555 on November 23, 2012, 02:52:23 PM
Well done  ;D

Now we are in business. Thanks pk
Title: Re: Firefox 17.0 and Script Shield
Post by: SpeedyPC on November 23, 2012, 02:59:31 PM
@ pk.

No joy. Replaced .dll and still no script detections. FF 17 and XP Pro_86 Sp 3

Confirmed same problem :-\


Edit: Didn't realized their was another update..........hand on
Title: Re: Firefox 17.0 and Script Shield
Post by: jrace on November 23, 2012, 03:00:10 PM
Having the same negative experiences like "iroc9555" with the first set of .dll, I can now say the second set of :dll seems to be working perfectly.

Thanks "pk"! :-*
Title: Re: Firefox 17.0 and Script Shield
Post by: DavidR on November 23, 2012, 03:02:13 PM
Working now with 2nd set of files.
Title: Re: Firefox 17.0 and Script Shield
Post by: SpeedyPC on November 23, 2012, 03:06:37 PM
Beautiful it working thank PK you're a legend ;D ;) 8)
Title: Re: Firefox 17.0 and Script Shield
Post by: -midnight on November 23, 2012, 03:17:50 PM
Doesn't work with FF 18.  Didn't think it would so uninstalled and installed 16.0.2 again.  Might update to version 17 and see if Script Shield works.
Title: Re: Firefox 17.0 and Script Shield
Post by: SpeedyPC on November 23, 2012, 03:20:59 PM
-midnight FF 18 is not out yet it still in beta :o and it should work with your FF 17.0 just re-download the patch again in page 2 from PK
Title: Re: Firefox 17.0 and Script Shield
Post by: mchain on November 23, 2012, 03:31:48 PM
Thanks pk,

By the looks of it, these are the patches we need for  FF 17.0?
Title: Re: Firefox 17.0 and Script Shield
Post by: mchain on November 23, 2012, 04:43:08 PM
you can try turn off self-protection mode (settings -> troubleshooting)
backup your aswJsFlt*.dll files from program files\avast software\avast
and download these 2 files: http://public.avast.com/~kurtin/patches/ap2012-23-11-001/aswJsFlt.dll + http://public.avast.com/~kurtin/patches/ap2012-23-11-001/aswJsFlt64.dll
it should work for FF 17.x (don't sure for 16.x XP SP2) and Chrome 16+ (incl. 23 version)
Just updated the 32-bit .dll file only.  Do I need the 64-bit .dll as this is a 32-bit system? 

Found it necessary to enter Safe Mode after disabling the self-protection module as 'Access is denied' error popped up, even though that module was turned off.  Just dragged and dropped the file into the folder specified; noted the file properties seemed to be identical to the original, what with the same origin date in September, 2012 in digital signatures, tho.  Did see a 64-bit version in there too.

Wow! Works now!  Thanks pk!
Title: Re: Firefox 17.0 and Script Shield
Post by: Harikrishnan on November 23, 2012, 04:46:37 PM
Yes, script shield doesn't work with Firefox 17
Title: Re: Firefox 17.0 and Script Shield
Post by: mchain on November 23, 2012, 04:50:27 PM
@iroc9555: i updated those files from v7, can you please redownload them? thanks
pk updated the files.  See quote above, as the original ones may have been for avast8.  Replacements are for avast7.
Title: Re: Firefox 17.0 and Script Shield
Post by: DavidR on November 23, 2012, 05:02:36 PM
<snip>
Found it necessary to enter Safe Mode after disabling the self-protection module as 'Access is denied' error popped up, even though that module was turned off.  Just dragged and dropped the file into the folder specified; noted the file properties seemed to be identical to the original, what with the same origin date in September, 2012 in digital signatures, tho.  Did see a 64-bit version in there too.

Wow! Works now!  Thanks pk!

That shouldn't be necessary, but you may need to close firefox as that is linked to the script shield filter dll.

<snip>
EDIT: Even with the self-defence module disabled you may well still get file is in use, etc. I disabled the Script Shield and still got the file in use error. Solution close firefox and you should be able to replace the files.
Title: Re: Firefox 17.0 and Script Shield
Post by: mchain on November 23, 2012, 05:08:32 PM
Doesn't work with FF 18.  Didn't think it would so uninstalled and installed 16.0.2 again.  Might update to version 17 and see if Script Shield works.
hi midnight,

This fix is specially made and tailored only for FF versions 16.0.2 and 17.0.  When FF 18.0 comes out as a final (not beta) version, I assume we may have to do this all over again, as Mozilla will make some significant changes to the final version, and Avast! will have to accommodate and incorporate these changes when it comes out.  So, one would have to wait anyway for the script shield to work properly in FF 18.0, as it still is in beta, and many changes and tweaks will be ongoing until it is finalized.

Avast! cannot predict what changes will be made while still in beta form.

Not known yet if this fix will work for Chrome.  Works just fine as is in IE without modifications, tho, probably because Microsoft does not update their browser anywhere nearly as often.
<snip>
Found it necessary to enter Safe Mode after disabling the self-protection module as 'Access is denied' error popped up, even though that module was turned off.  Just dragged and dropped the file into the folder specified; noted the file properties seemed to be identical to the original, what with the same origin date in September, 2012 in digital signatures, tho.  Did see a 64-bit version in there too.

Wow! Works now!  Thanks pk!

That shouldn't be necessary, but you may need to close firefox as that is linked to the script shield filter dll.

<snip>
EDIT: Even with the self-defence module disabled you may well still get file is in use, etc. I disabled the Script Shield and still got the file in use error. Solution close firefox and you should be able to replace the files.
@ DavidR,
FF was not running or open at the time I performed this operation.  Only sure way was to go to Safe Mode where Avast! would not be running at all.

But, next time I will certainly try the way you suggest.  Less work for me, so...  Thanks.   ;D

Title: Re: Firefox 17.0 and Script Shield
Post by: Samson63 on November 23, 2012, 05:35:19 PM
Thanks pk, patches applied and Script Shield is "busy" again  ;)
Title: Re: Firefox 17.0 and Script Shield
Post by: Gopher John on November 23, 2012, 09:26:02 PM
@iroc9555: i updated those files from v7, can you please redownload them? thanks

The updated files fixed Script Shield in Firefox 17 on both computers in my signature.  With Firefox closed, I copied them into the Avast program folder using the Admin user accounts with Avast self protection off.  After that, I turned self protection back on and restarted Windows.  Restarting Windows probably wasn't necessary, but I'm a creature of habit. :D
Title: Re: Firefox 17.0 and Script Shield
Post by: -midnight on November 23, 2012, 09:40:08 PM
-midnight FF 18 is not out yet it still in beta :o and it should work with your FF 17.0 just re-download the patch again in page 2 from PK

I started to download the patch but was asked if I was sure I wanted to download this dll so didn't go any further.
Title: Re: Firefox 17.0 and Script Shield
Post by: Alievitan on November 24, 2012, 08:08:43 AM
@PK

It now works with Firefox 17 stable, Firefox 18 beta, 19 aurora, and finally 20 nightly.  So it looks like unless Mozilla change something in the nightly again before the code freeze in January, this hack is going to work for a while.

However, it doesn't work for Chrome 23.0.1271.64 though.

Windows 7 64 bit
Title: Re: Firefox 17.0 and Script Shield
Post by: crofty59 on November 24, 2012, 09:33:20 AM
Just used the patch and script shield is now working fine in Firefox 17 .
On windows xp home edition. SP3
Title: Re: Firefox 17.0 and Script Shield
Post by: -midnight on November 24, 2012, 09:33:46 AM
@Alievitan

I tried both Aurora and Nightly but was told that Avast didn't support either browser so I uninstalled them. 
Title: Re: Firefox 17.0 and Script Shield
Post by: toontown on November 24, 2012, 12:30:08 PM
Thx pk,  :)

patches are now working in FF17, but unfortunately not in Chrome 23.
Title: Re: Firefox 17.0 and Script Shield
Post by: Alievitan on November 24, 2012, 07:28:42 PM
@Alievitan

I tried both Aurora and Nightly but was told that Avast didn't support either browser so I uninstalled them.

Not supported and cannot use are two different things.  Avast is just saying that they cannot guarantee that Avast and Firefox with the features and be conflict free with any version other than stable b/c the code changes frequently. 

With that said, it is easy to set up all channels of Firefox (stable, beta, aurora, nightly) in different directories, different profiles, and even run them at the same time if you want.  You can set up Mozilla sync so that whatever channel you currently use, you will always have the same history, addons, etc. 

I have set all four channel for testing purposes, so when new features come out, I go the relevant channel then see what is it about.  I usually stay in stable channel, but the beta channel right now (Firefox 18) incorporates a new javascript engine call ionmonkey, probably the best singular improvement since FF 4 was released, so I am putting it through it paces.  And like i posted before, all the Avast realtime stuff including scriptshield works with Firefox all the way to nightly so you can currently use any channel and get all the avast features, and be conflict free as far as I have seen. 
Title: Re: Firefox 17.0 and Script Shield
Post by: asenior on November 24, 2012, 10:47:56 PM
you can try turn off self-protection mode (settings -> troubleshooting)
backup your aswJsFlt*.dll files from program files\avast software\avast
and download these 2 files: http://public.avast.com/~kurtin/patches/ap2012-23-11-001/aswJsFlt.dll + http://public.avast.com/~kurtin/patches/ap2012-23-11-001/aswJsFlt64.dll
it should work for FF 17.x (don't sure for 16.x XP SP2)
I did discover that I had this Script Shield not working either.  I followed the instructions in this thread and downloaded the above dll's. 

Script Shield is working again!!  Thanks for the fix!! 
Title: Re: Firefox 17.0 and Script Shield
Post by: happysurf on November 25, 2012, 02:51:04 PM
you can try turn off self-protection mode (settings -> troubleshooting)
backup your aswJsFlt*.dll files from program files\avast software\avast
and download these 2 files: http://public.avast.com/~kurtin/patches/ap2012-23-11-001/aswJsFlt.dll + http://public.avast.com/~kurtin/patches/ap2012-23-11-001/aswJsFlt64.dll
it should work for FF 17.x (don't sure for 16.x XP SP2)
The files patch works but it's so difficult configure the script module for scan any Firefox.exe, Chrome.exe or any other browser process regardless of the version? 
Title: Re: Firefox 17.0 and Script Shield
Post by: jrace on November 25, 2012, 04:35:29 PM
I just can't believe it "avast! manual Update" is stealing the new dll's:

Having your skript shield working with the new aswFlt(64).dll's and doing a manual program update (settings|maintenance) the program promts you for a reboot. But it says there was nothing to update because program and defs were up to date.
So you do a reboot anyway and find after that:
Script shield has stopped working and your program folder contains the old dll's again! So far to the update and reboot.

This situation is reproducible, I did it 3 times!
Title: Re: Firefox 17.0 and Script Shield
Post by: asenior on November 26, 2012, 05:01:45 AM
Script Shield stopped working again!

First had problems with a virus update which was shown in red.  I did 2 repairs and rebooted twice because the first one would not work.  Now that the manual virus update works again (in green), the Script Shield stopped doing it's job.

I think that the poster above me is right about the dll's.  I replaced the not working dll's to the downloaded ones in this thread and all was fine until today!! 

I will wait until Avast! fixes the problem from their end.  I'm not going to replace the dll's again only for Avast! to replace these new dll's with the old ones or whatever it is.....
 
Title: Re: Firefox 17.0 and Script Shield
Post by: DavidR on November 26, 2012, 12:09:22 PM
An avast Repair is likely to replace any substituted files as part of the process no doubt is an integrity check.

I don't know if the manual virus update would be doing the same integrity check. I haven't done a manual update if the auto update is working (which it is for me), there shouldn't be any need.
Title: Re: Firefox 17.0 and Script Shield
Post by: jrace on November 26, 2012, 01:14:33 PM
You are totally right, DavidR, it is a useless  thing to do a manual program update when there is nothing to update.
I mentioned this only for the "avast! curiosity cabinet" and on purpose did not adress it to "pk".

There is the avast! team using some of their brain power to cover some issue and succeeded; and here comes some user hitting a "useless" button and an avast! integrity check is stealing the above mentioned success!

By the way the manual def update does not "steal" any dll's, it's only manual program update!
Title: Re: Firefox 17.0 and Script Shield
Post by: DavidR on November 26, 2012, 01:19:32 PM
Yes, I wasn't sure if a manual virus definitions update would do that 'steal dlls,' but I wasn't about to try and possibly undo the fix, when the regular auto update is working.
Title: Re: Firefox 17.0 and Script Shield
Post by: EmoHobo on November 29, 2012, 04:03:12 AM
I just upgraded to FF17 and my Script Shield is not working, how long will it before Avast fixes this?
Title: Re: Firefox 17.0 and Script Shield
Post by: SpeedyPC on November 29, 2012, 06:08:59 AM
I just upgraded to FF17 and my Script Shield is not working, how long will it before Avast fixes this?

Read the last post by PK on page 2 at the bottom see link to solve this problem
http://forum.avast.com/index.php?topic=109977.msg866724#msg866724
Title: Re: Firefox 17.0 and Script Shield
Post by: EmoHobo on November 29, 2012, 06:50:30 AM
I just upgraded to FF17 and my Script Shield is not working, how long will it before Avast fixes this?

Read the last post by PK on page 2 at the bottom see link to solve this problem
http://forum.avast.com/index.php?topic=109977.msg866724#msg866724
The patch .dll files?  That only works until you update Avast manually which is something I do quite often so it wouldn't work for me.
Title: Re: Firefox 17.0 and Script Shield
Post by: Asyn on November 29, 2012, 07:06:36 AM
The patch .dll files?  That only works until you update Avast manually which is something I do quite often so it wouldn't work for me.

Well, there's usually no need for a manual program update..!! ;)
Title: Re: Firefox 17.0 and Script Shield
Post by: EmoHobo on November 29, 2012, 07:25:34 AM
The patch .dll files?  That only works until you update Avast manually which is something I do quite often so it wouldn't work for me.

Well, there's usually no need for a manual program update..!! ;)
I'd much prefer an actual fix from Avast though then having to go and mess with .dll files and I do have to manual update, sometimes, no idea why.
Title: Re: Firefox 17.0 and Script Shield
Post by: Asyn on November 29, 2012, 07:31:51 AM
...I do have to manual update, sometimes, no idea why.

Program or definitions..??
Title: Re: Firefox 17.0 and Script Shield
Post by: EmoHobo on November 29, 2012, 07:35:41 AM
...I do have to manual update, sometimes, no idea why.

Program or definitions..??
Definitions although I check programs now and then, the problem is my internet is kind of spotty and sometimes it will get stuck doing an update and the only way I can get it out of that is to do a manual update.
Title: Re: Firefox 17.0 and Script Shield
Post by: Asyn on November 29, 2012, 07:43:07 AM
By the way the manual def update does not "steal" any dll's, it's only manual program update!
Title: Re: Firefox 17.0 and Script Shield
Post by: EmoHobo on November 29, 2012, 07:46:34 AM
By the way the manual def update does not "steal" any dll's, it's only manual program update!
So back to my original question, when is Avast fixing this?
Title: Re: Firefox 17.0 and Script Shield
Post by: SpeedyPC on November 29, 2012, 07:50:46 AM
By the way the manual def update does not "steal" any dll's, it's only manual program update!
So back to my original question, when is Avast fixing this?

When they release a new version, and I sure their well be another beta stage coming soon since users are having problem with Avast on W8 if I'm not mistaken
Title: Re: Firefox 17.0 and Script Shield
Post by: Asyn on November 29, 2012, 07:52:19 AM
So back to my original question, when is Avast fixing this?

Well, the fix is in the patch. ;)
Title: Re: Firefox 17.0 and Script Shield
Post by: EmoHobo on November 29, 2012, 07:52:44 AM
By the way the manual def update does not "steal" any dll's, it's only manual program update!
So back to my original question, when is Avast fixing this?

When they release a new version, and I sure their well be another beta stage coming soon since users are having problem with Avast on W8 if I'm not mistaken
Is it really a huge deal that the script shield doesn't work?  I mean I use NoScript and I have all the other shields, so am I in immediate danger that is worth the risk of me going and messing with things?
Title: Re: Firefox 17.0 and Script Shield
Post by: EmoHobo on November 29, 2012, 07:53:08 AM
So back to my original question, when is Avast fixing this?

Well, the fix is in the patch. ;)
Ah, so it's just not mass released yet.
Title: Re: Firefox 17.0 and Script Shield
Post by: Asyn on November 29, 2012, 07:57:42 AM
Is it really a huge deal that the script shield doesn't work?

As you use NoScript anyway, no.
Title: Re: Firefox 17.0 and Script Shield
Post by: EmoHobo on November 29, 2012, 08:06:28 AM
Is it really a huge deal that the script shield doesn't work?

As you use NoScript anyway, no.
Then I will just wait for the mass release of the update, thanks for putting up with my stubbornness.
Title: Re: Firefox 17.0 and Script Shield
Post by: Asyn on November 29, 2012, 08:12:19 AM
Then I will just wait for the mass release of the update, thanks for putting up with my stubbornness.

No problem. :)
Title: Re: Firefox 17.0 and Script Shield
Post by: EmoHobo on November 29, 2012, 08:24:23 AM
I am torn, I'm so paranoid about doing it, but I'm also super paranoid about damaging something.
Title: Re: Firefox 17.0 and Script Shield
Post by: been on November 29, 2012, 08:31:58 AM
I applied the patch then lost it in a manual update. Could anyone advise what the risk is (as a percentage?) of using Firefox without script shield functioning (in comparison with using Firefox with script shield working)? 
Title: Re: Firefox 17.0 and Script Shield
Post by: DavidR on November 29, 2012, 12:34:11 PM
No one can give you that answer as we don't know your browsing habits. In all honesty though it isn't so long ago that there was no script shield in the avast free version (only in Pro/paid versions) and we did just fine didn't we.

If you are using firefox then NoScript is an add-on that I believe you should be using anyway, with or without the script shield.
Title: Re: Firefox 17.0 and Script Shield
Post by: pk on November 29, 2012, 08:16:20 PM
Please follow these steps to apply patch:

1. Close all your running web browsers and turn off self-protection mode (settings -> troubleshooting).
2. Download patched version to \Program Files\AVAST Software\avast:
3. ** NEW ** Download .sum file (save it to the same folder as .dll):
       Now avast won't replace your patched version with original DLL file.

4. Turn on self-protection.
Title: Re: Firefox 17.0 and Script Shield
Post by: Samson63 on November 29, 2012, 08:30:14 PM
Thanks pk  :)
Title: Re: Firefox 17.0 and Script Shield
Post by: EmoHobo on November 29, 2012, 08:43:28 PM
Just followed those instructions, how do I know if it's working?

Actually I can see the script shield scanning again, so it works fine.

Thanks PK and now I don't need to worry about manual updates ruining this?

Edit: In the future will this cause any issues for users who applied the manual patches like this?
Title: Re: Firefox 17.0 and Script Shield
Post by: pk on November 29, 2012, 08:47:34 PM
Thanks PK and now I don't need to worry about manual updates ruining this?
That's correct (otherwise, it means my .sum files were generated incorrectly).

Quote
Edit: In the future will this cause any issues for users who applied the manual patches like this?
No, next program update will be avast8 and this .DLL will be automatically replaced with new version.
Title: Re: Firefox 17.0 and Script Shield
Post by: EmoHobo on November 29, 2012, 08:50:26 PM
Thanks PK and now I don't need to worry about manual updates ruining this?
That's correct (otherwise, it means my .sum files were generated incorrectly).

Quote
Edit: In the future will this cause any issues for users who applied the manual patches like this?
No, next program update will be avast8 and this .DLL will be automatically replaced with new version.
Great to know and I just attempted a manual update and the .dll were not replaced as they are still scanning scripts, thanks for working on these for us and getting them out to us before the next big update.
Title: Re: Firefox 17.0 and Script Shield
Post by: jrace on November 29, 2012, 10:14:38 PM
Please follow these steps to apply patch:
............snip...........

Works perfect - so, hitting the "Program Update" button does not exchange the new dll's anymore.  :-*
Thanks, pk!


Edit: The .sum files assure the survival of the new dll's even under conditions of a "Program Repair".
Title: Re: Firefox 17.0 and Script Shield
Post by: been on November 29, 2012, 10:58:42 PM
Thanks PK!
Title: Re: Firefox 17.0 and Script Shield
Post by: dfoulkes on November 29, 2012, 11:42:55 PM
I've been following this Subject since the 25th of this month because I had the Shield problem here on this Wn764bit sys.
I downloaded the patch files on the 25th and replaced both of them in my Avast folder ... as outlined in prior instructions.  I did that while I having the Shield turned off, browsers closed and if I remember correctly, I had to close out Google talk.
Once the replacement was completed I turned the Shield back on in Avast settings and then started Firefox up...

From what I've seen so far is that the Script Shield is running in Avast and after a few hours of browsing I noticed that the counter in the Real Time Shields display of Avast displayed zero for both numbers.  So, thinking that maybe my NoScript was doing too well, I opened up a profile that has no extensions installed and then browsed around some... checked that counter and it was still zero for both counters. 

Then I figured I'd start up IE and visit the same sites that I did with Firefox and the first scan number immediately went off zero... I did some more and it increased again... I closed IE, went back to Firefox (no extensions) and visited those same sites... the counter did not increment.

So, I know people here have gotten the scanning working... have you actually notice if the counter goes up as you are using Firefox?

Thanks.

Edit
I have portable Chrome and here Firefox 3.28 and I started them up...
The counters for the older Firefox incremented when I visited a site.
The counters for the latest Chrome did not increment after visiting the same site.

Edit2
OK... what I did.  Even knowing that I downloaded those two files on the 25th and moved them into the Avast folder (the dates in my file explore for those two files were also dated the 25th so, I knew that they were the new ones... plus with those new files I could turn on the script scanning option in avast (though the counters did not move as stated above) ... where prior to having those new files in avast... an attempt to turn it on responded with an error...

Anyway, I decided to start fresh with all this ... closed down browsers, closed down my Google talk (which I found had those two file open), stopped the monitoring in avast, deleted the old (new ones that I got from here) and replaced them with the two downloaded files again.. plus I installed those two .sum files.

Anyway, to my surprise... everything seems to be working properly now... I have no clue why it didn't work the first time...

So, all is OK not... and thanks for the great board and software!
Title: Re: Firefox 17.0 and Script Shield
Post by: mchain on November 30, 2012, 07:30:16 AM
Please follow these steps to apply patch:

1. Close all your running web browsers and turn off self-protection mode (settings -> troubleshooting).
2. Download patched version to \Program Files\AVAST Software\avast:
  • http://public.avast.com/~kurtin/patches/ap2012-23-11-001/aswJsFlt.dll (32-bit & 64-bit OS)
  • http://public.avast.com/~kurtin/patches/ap2012-23-11-001/aswJsFlt64.dll (64-bit OS only)
3. ** NEW ** Download .sum file (save it to the same folder as .dll):
  • http://public.avast.com/~kurtin/patches/ap2012-23-11-001/aswJsFlt.dll.sum (32-bit & 64-bit OS)
  • http://public.avast.com/~kurtin/patches/ap2012-23-11-001/aswJsFlt64.dll.sum (64-bit OS only)
       Now avast won't replace your patched version with original DLL file.

4. Turn on self-protection.
hi  dfoulkes,

The difference is in the installation of the new .sum files, as the new .sum files prevent the self-protection module within Avast! when it is turned back on from replacing the new .dll files with the old original .dll files that did not work in the first place.  This new option just came in, glad you got this sorted.

Step 3 is what is new here.
Title: Re: Firefox 17.0 and Script Shield
Post by: DavidR on November 30, 2012, 12:47:56 PM
No, not the self-defence module, or it would be replaced immediately you turned the self-defence module back on, not when a manual update check was done.

The .sum is for the validation/integrity checking function (on an update/repair, etc.), if a file doesn't pass the integrity check it is repaired (read replaced), the .sum file for the patched file is used to confirm its integrity so that it doesn't get replaced.

Step 3 I think was missed as the older fixes always had this .sum file but the user had to manually download the file/s and their corresponding .sum file/s. I believe they were missed out, I wondered why they weren't there, but though (dangerous I know) that avast had found a way to make the .sum file redundant (obviously not).
Title: Re: Firefox 17.0 and Script Shield
Post by: Gopher John on November 30, 2012, 02:46:17 PM
Is it really a huge deal that the script shield doesn't work?

As you use NoScript anyway, no.

It's only a big deal if the site one has allowed with NoScript is compromised.  Then, the script may well be malicious.  I'd rather have Avast Script Shield running, which the patch fixes.
Title: Re: Firefox 17.0 and Script Shield
Post by: dfoulkes on November 30, 2012, 05:11:07 PM
No, not the self-defence module, or it would be replaced immediately you turned the self-defence module back on, not when a manual update check was done.

The .sum is for the validation/integrity checking function (on an update/repair, etc.), if a file doesn't pass the integrity check it is repaired (read replaced), the .sum file for the patched file is used to confirm its integrity so that it doesn't get replaced.

Step 3 I think was missed as the older fixes always had this .sum file but the user had to manually download the file/s and their corresponding .sum file/s. I believe they were missed out, I wondered why they weren't there, but though (dangerous I know) that avast had found a way to make the .sum file redundant (obviously not).
On the 25th those two new .sum files were not posted here but I used the procedure that was found on the first page of this thread... the steps I took were... this all began when I received an avast notice that the script scanning was no longer running.
- downloaded those two files
- closed my browser
- backed up those two files from my original avast folder
- got into avast/troubleshooting and un-ticked the Self-defense
- attempted to delete them from the avast folder but was notified that Google Talk owned them...
- closed out Google talk
- deleted those two files
- copied/pasted the new files from my download folder into avast
- got back into avast and activated the self-defense
- everything looked OK from that point on

Then, in monitoring the counts as I mentioned before, I notice that visiting links that I knew had scripts... no changes were taking place in the avast scan counts... that's when I posted above.  I did not install those .sum files the first time around because they were not part of that first post and it/they was only found by me as I followed this thread ... because the first fix did not seem to be working... I suppose that avast may have noticed (during my first attempt) that those new files didn't match up with things and corrected itself... not sure... but it all works fine now... thanks for the feedback and help.

Also, if not already done... maybe the first post here needs to up updated with those two .sum files in case others come along here and don't follow all the remarks and just use the first fix... as I did.
Title: Re: Firefox 17.0 and Script Shield
Post by: David_E on November 30, 2012, 05:52:38 PM
Is there going to be a program update to fix this issue?
Or, is the only way to fix this to follow this thread for the latest manual patch instructions?

Is there anywhere to see easily check the status on issues like this such as a news forum?

Could Avast alert users of issues like this somehow, such as:
- A warning/notice on the Summary Page
- A warning/notice in the popup message (Avast often adds messages here...)
Title: Re: Firefox 17.0 and Script Shield
Post by: -midnight on December 02, 2012, 01:53:14 AM
It's working for me........17.0.1
Title: Re: Firefox 17.0 and Script Shield
Post by: warlock on December 02, 2012, 01:52:25 PM
@avast

Have you looked at js-ctypes? Rewriting the filter to use this api should make it Fx version independent.