Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: XhenEd on January 08, 2014, 04:00:23 PM

Title: Is DeepScreen working?
Post by: XhenEd on January 08, 2014, 04:00:23 PM
I'm back to avast today. But I don't see any actions from deepscreen. I tried to launch some executables like games (e.g. Counter Strike and NBA live 08) and proxy applications (Ultrasurf and Cproxy). I even launched the autosandboxme2. But nothing from the deepscreen.

I'm planning on reinstalling avast again later... hopefully, I can use the avast uninstall tool for clean installation...
regarding the uninstallation, after uninstalling avast I can't use the uninstall tool because the avast folder in the program files is not present. Is there a way to use the tool even the folder in the program files is not present?

But, I think avast is working because it detected eicar, which i created using eicar's code; ran a full scan and detected and quarantined a mal-gen...

I use Win XP Pro 32-bit... I have avast free... I have Zemana Antilogger (already installed before the installation of avast)... and I have Comodo Firewall (installed hours after I installed avast)... I launched some executables while CFW was not installed yet...

Edit: I also have Sandboxie... :D

Any advice?
Title: Re: Is DeepScreen working?
Post by: Para-Noid on January 08, 2014, 04:18:22 PM
Yes deepscreen does work try using this tool...http://public.avast.com/dev/autosandboxme2.exe
Title: Re: Is DeepScreen working?
Post by: XhenEd on January 09, 2014, 01:03:29 AM
no pop up by avast when I use the above tool... it just creates an .exa file and shows a box "Modify the System"... if I click the modify the system, it says that "SUCCESS:Sandbox seems to work properly!" without avast displaying some pop up window...

Deepscreen is enabled in the settings. I assume that the deepscreen shows a pop up window when an unknown or less known program is launched.

But, I get notified by CFW's autosandbox or Zemana's System Defense. But note that I disabled them to test if Avast would notify me through the deepscreen.


I'm planning on reinstalling. But, why is it that after the regular uninstallation of avast, avast's folder in the Program Files will not be present already. Is it because the regular uninstallation takes all remnants of avast in the system? That's why I couldn't use the avastclear uninstallation tool.


BTW, my previous AV was Kaspersky Internet Security. I already ran its uninstall utility twice before installing avast.

Any advice?
Title: Re: Is DeepScreen working?
Post by: Arnold72 on January 09, 2014, 01:59:30 AM
I think relying on an avast created tool to see if deepscreen is working would be very foolhardy.The tool may be seen by others as being a gimmick to advertise deepscreen.
Upon browsing the net my personal opinion would be that deepscreen does not work properly and is merely a work in progress.nice idea but not fully implemented yet.

If you really want to check its protection value then turn the av modules off and throw some malware at it.
This is supposedly the zero-day protection.
Title: Re: Is DeepScreen working?
Post by: XhenEd on January 09, 2014, 02:09:52 AM
I think relying on an avast created tool to see if deepscreen is working would be very foolhardy.The tool may be seen by others as being a gimmick to advertise deepscreen.
Upon browsing the net my personal opinion would be that deepscreen does not work properly and is merely a work in progress.nice idea but not fully implemented yet.

If you really want to check its protection value then turn the av modules off and throw some malware at it.
This is supposedly the zero-day protection.
So, you haven't seen any pop ups by the deepscreen in your system yet?
I know that the deepscreen is not yet "fully" functional. But I have already read some users in the forum that the deepscreen is working correctly (or for some, incorrectly).
Unless, of course, emergency updates of avast disabled deepscreen for now.


I really want it to be functional, so that I can be assured of the total protection of avast. :D
Title: Re: Is DeepScreen working?
Post by: olddog on January 09, 2014, 02:41:55 AM
So, you haven't seen any pop ups by the deepscreen in your system yet?
I know that the deepscreen is not yet "fully" functional. But I have already read some users in the forum that the deepscreen is working correctly (or for some, incorrectly).
Unless, of course, emergency updates of avast disabled deepscreen for now.

Does deepscreen give a pop up when it detects a program it can't identify - Yes
Does deepscreen give a pop up when it has cleared such program after a nominal 10 second run - yes
See screen shots

Does deepscreen automatically add an exclusion to a program it has cleared, so next time the program will run normally - Yes

How does it react if it finds the program is malicious, or has a virus - I don't know, fortunately I haven't run into that scenario, and I don't go deliberately looking for trouble. I have already scanned all program or application files before I run them, and I would expect a virus to be picked up then.
Title: Re: Is DeepScreen working?
Post by: XhenEd on January 09, 2014, 03:02:43 AM
So, you haven't seen any pop ups by the deepscreen in your system yet?
I know that the deepscreen is not yet "fully" functional. But I have already read some users in the forum that the deepscreen is working correctly (or for some, incorrectly).
Unless, of course, emergency updates of avast disabled deepscreen for now.

Does deepscreen give a pop up when it detects a program it can't identify - Yes
Does deepscreen give a pop up when it has cleared such program after a nominal 10 second run - yes
See screen shots

Does deepscreen automatically add an exclusion to a program it has cleared, so next time the program will run normally - Yes

How does it react if it finds the program is malicious, or has a virus - I don't know, fortunately I haven't run into that scenario, and I don't go deliberately looking for trouble. I have already scanned all program or application files before I run them, and I would expect a virus to be picked up then.

I know avast displays a pop up of deepscreen when it analyzes less known programs. But, in my system it wouldn't. That's why I think deepscreen of avast is not working in my system.

I haven't seen any pop up of deepscreen so far since the installation of avast today. I just would like any advice for this.

I'm planning on reinstalling avast, but I'm waiting for a solution to use the avastclear tool. I can't use it because the avast folder in the Program Files is not present after avast's regular uninstallation.


Edit: I already uninstalled Zemana Antilogger to see if it solves the problem. But deepscreen of avast is not working still. :(
Edit: Oh, btw, I have CryptoPrevent installed too. :D
Title: Re: Is DeepScreen working?
Post by: XhenEd on January 09, 2014, 03:13:19 AM
YES!

It's now working! :D
I launched the autosandboxme2 and the deepscreen popup showed up. :D It was really Zemana Antilogger that caused the issue. :D

But, does deepscreen really flag the autosandboxme2 as safe?


Edit: I installed back Zemana Antilogger and the deepscreen of avast still works. :D Perhaps, installing Zemana after avast is the proper way after all. :D
Title: Re: Is DeepScreen working?
Post by: olddog on January 09, 2014, 09:32:11 AM
But, does deepscreen really flag the autosandboxme2 as safe?

If you got the second "Avast! DeepScreen has finished analysing the file - No problems found" and if you now have an exclusion for the application at GUI->Settings->Antivirus->Exclusions->DeepScreen Tab, then the answer is (as far as the tests it runs, YES.

The fileshield should also have scanned the program file when it was executed
 
Title: Re: Is DeepScreen working?
Post by: XhenEd on January 10, 2014, 02:58:28 AM
I have another "minor" problem. Deepscreen only works when a file analysed is in the C: drive. If the file is in another partition, deepscreen won't show up. I'm talking about the autosandboxme2.exe file.

But, earlier the file was always detected by the deepscreen (because I tested it again and again while also removing its exclusion) even if it is located in my D: drive.

I think the problem arose because I changed my firewall. I had Comodo Firewall, but decided to try Private FW. After noticing that the deepscreen couldn't load because the HIPS showed first, I uninstalled Private FW and got back to Comodo FW. CFW is now my current firewall.

Now, deepscreen won't work with autosandboxme2 while in the D: partition, but works if the file is in the C: partition.  I guess I messed something.
I already checked again and again if the D: drive is excluded (globally or specifically) but there is none.

Is there a uninstall tool for Private FW 7? Maybe, some registry files and drivers are still present.

Any advice?
Title: Re: Is DeepScreen working?
Post by: olddog on January 10, 2014, 03:14:59 AM
Deepscreen only works when a file analysed is in the C: drive. If the file is in another partition, deepscreen won't show up.

Not sure why that should be - if you look at the screen picture I posted earlier of the Deepscreen popup, you will see that the file being checked was on the M: (in that case a USB flash drive)

If I get time later today I'll do some tests running the files from other partitions of local hard drives.

Title: Re: Is DeepScreen working?
Post by: XhenEd on January 10, 2014, 03:21:47 AM
Deepscreen only works when a file analysed is in the C: drive. If the file is in another partition, deepscreen won't show up.

Not sure why that should be - if you look at the screen picture I posted earlier of the Deepscreen popup, you will see that the file being checked was on the M: (in that case a USB flash drive)

If I get time later today I'll do some tests running the files from other partitions of local hard drives.

yeah, that's why I believe there's wrong with my current security configuration.
I'm thinking again on reinstalling avast.


But, can someone tell me first why the regular uninstallation of avast also deletes the avast folder in the Program Files? I can't use the avastclear because there's no avast folder which it requires.



Edit: it's now working! The problem was the remaining driver of Zemana Antilogger. I removed the driver and rebooted, then voila! deepscreen is working even in the D: drive. :D
But please can someone from avast tell me how to use the avastclear even if there is no avast folder to be deleted? This is for the future if I'll cleanly reinstall avast.
Title: Re: Is DeepScreen working?
Post by: olddog on January 10, 2014, 08:22:53 AM
But please can someone from avast tell me how to use the avastclear even if there is no avast folder to be deleted?

I'm not from Avast, just a user, but I can tell you how I use Avastclear.exe.
I don't use the Windows uninstall for avast at all.

I simply start up AvastClear when I'm in normal mode, it handles the reboot to safe mode, the folder is there, and it uninstalls the product.   
Title: Re: Is DeepScreen working?
Post by: XhenEd on January 10, 2014, 09:42:19 AM
Ahhh... okay... thank you, olddog...
Title: Re: Is DeepScreen working?
Post by: Para-Noid on January 10, 2014, 05:32:46 PM
 http://files.avast.com/iavs9x/avastclear.exe
Reboot
Install
Reboot
Register

Many of us use CCleaner (http://www.filehippo.com/download_ccleaner) to clean the registry after uninstall and before the re-install.
Title: Re: Is DeepScreen working?
Post by: Arnold72 on January 10, 2014, 07:12:31 PM
Using the find functionality in regedit helps also.