Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: CCV on March 11, 2014, 09:29:56 AM

Title: Same thing every day, in Hardened Mode
Post by: CCV on March 11, 2014, 09:29:56 AM
Why do I need to keep allowing the same thing over and over again?
And, why does "hardened mode" lose the exceptions already made?

It's always this Cyberlink thing kicks in at a certain time of day.
E.g.: C:\Program Files (x86)\CyberLink\Power2Go8\Power2GoExpress8.exe, and some variations..
Part of my OS, as provided, afaik.

Besides, after allowing such exceptions more than once, Exceptions on Hardened Mode TAB turn up blank.

Any ideas?




Title: Re: Same thing every day, in Hardened Mode
Post by: AdrianH on March 11, 2014, 10:17:37 AM
Because each time this program phones home it creates a new file name ..........

It is a bundled program, not part of the OS.  If you don't know what it is , you probably never use it, and don't need it.

If not used, uninstall.

 Check ALL the programs that start with Windows, remove all unneeded entries. Look at your progam list and get rid of anything you have no use for.
Title: Re: Same thing every day, in Hardened Mode
Post by: DavidR on March 11, 2014, 03:23:52 PM
Are you running avast when signed on as a limited user (not admin, etc.) ?
If running as a limited user avast would generally block changes.

What setting are you using in Hardened Mode - Moderate or Aggressive ?
I suggest you set it to Aggressive if you haven't done so already - That checks the file against the avast cloud database so it may not throw up the alert if the file info is found in the database.
Title: Re: Same thing every day, in Hardened Mode
Post by: Hammey on March 11, 2014, 04:15:10 PM
Hi power2go is cyberlinks write program like Nero. If you go into services you can disable the startup and then it will not try to connect.
Title: Re: Same thing every day, in Hardened Mode
Post by: dprout69 on March 11, 2014, 04:38:30 PM
Is it possible to put wildcard characters in the exceptions?  If not, good recommendation for future versions.
Title: Re: Same thing every day, in Hardened Mode
Post by: avast@@dvantage77.com on March 11, 2014, 05:53:08 PM
Yes * is acceptable.

So, instead of C:\Program Files (x86)\intuit\* to exclude QuickBooks,

This can be shortened to *intuit*


So for you,  *Cyberlink* in global exclusions!

Sincerely,
 
J.R. "AutoSandbox Guy" Guthrie

"At this point in time, the Internet should be regarded as an Enemy Weapons System!"
Title: Re: Same thing every day, in Hardened Mode
Post by: DavidR on March 11, 2014, 06:24:43 PM
Is it possible to put wildcard characters in the exceptions? <snip>

Yes, ? is also acceptable as a single character wildcard.

This I find useful when you have duplicate folders (for backup purposes) on a different/2nd internal drive, so I just change the drive letter to ? and that covers both locations.
Title: Re: Same thing every day, in Hardened Mode
Post by: CCV on March 12, 2014, 01:27:43 AM
Thanks people.
Yes, bundled software not OS strictly speaking - sorry for sloppy writing.
I haven't decided if I might have a use for it or not yet. It doesn't run at startup, but "phones home" (or whatever it's doing) sometime in the p.m.. There is a service I could disable, I guess...
There are now five different processes, related to Cyberlink, listed in Exclusions for Hardened Mode. Not just different file names but, different paths as well. I might try the wildcard idea if it keeps adding more. Tho I don't know what it's trying to do, tbh.

My main worry was that, after adding a number of exclusions (via the pop up message arrangement) - and seeing them listed previously - one day the list was gone.

DavidR,
I'm assuming my account type is limited. It's whatever the default is in Windows 8.1, and there doesn't seem to be any way to change it. Doesn't appear to stop me doing administratory things tho.
EDIT: I am the Administrator. (Still finding my way around.)

Hardened Mode is set to Aggressive.
Now I think about that, it demonstrates to me that "Restore factory defaults" (and, Repair - supposedly does the same thing) doesn't actually work.
I checked my Scan and Scheduling settings, and they ain't default either.  ???
But, hey.. Maybe that's where my Exclusions went.

If I may trouble you with another question now:
One of the Exclusions has a red exclamation mark on it.
Can anyone tell me what that means?
(It was a (updated) Dell software installer, btw.)
Title: Re: Same thing every day, in Hardened Mode
Post by: DavidR on March 12, 2014, 02:13:29 AM
Unfortunately I don't use win8.x so I don't know if default accounts are limited user or not.

The "Restore factory defaults" are different to the Repair as the one reverses changes that you may have made to the default settings, whilst the Repair also checks integrity and doesn't reverse setting changes that you may have made.

The Red exclamation mark, I believe is telling you that although you have an exclusion for that file, but it doesn't exist in that location. So you would need to check if that file is present in that location, if not then you can delete the exclusion.
Title: Re: Same thing every day, in Hardened Mode
Post by: Alikhan on March 12, 2014, 02:16:00 AM
If I remember correctly..

You can not exclude folders in Hardened mode but can only exclude files.

If you were to exclude a folder, you'd get the red exclamation mark.
Title: Re: Same thing every day, in Hardened Mode
Post by: CCV on March 12, 2014, 03:42:36 AM
Oh, yes.. !, in this event, indicates a non-existent file.

With only one account, it is (as always) Administrator.
PC Settings > Accounts don't tell you much. Control Panel > User Accounts > Change your user account type is they way to go - if I needed the bother.

Long story, but.. I used both "Restore factory defaults" and Repair.
I'm fairly near certain I didn't redo Hardened Mode and a few other settings afterward. Would need to test it again to be absolutely sure.
Fyi also, see attached.

Title: Re: Same thing every day, in Hardened Mode
Post by: DavidR on March 12, 2014, 03:44:16 PM
Yes, I know what the Repair window states, but it certainly didn't restore the default settings when I have used it in the past.
Title: Re: Same thing every day, in Hardened Mode
Post by: CCV on March 13, 2014, 04:49:18 AM
I only meant to present what it "says", yes.
What it does, I have no idea. Tho, I do prefer Repairs which don't touch custom options. It did fix a problem with Firewall being turned off, similar to Antispam in beta version, as it happened.

I tested the Factory Reset option and found the problem there was a memory leak (as I suspected), in my head.
It works fine.
Title: Re: Same thing every day, in Hardened Mode
Post by: DavidR on March 13, 2014, 05:33:35 PM
Yes, they could certainly do with editing that text so that it isn't misleading about restoring defaults.

I wonder if it would be worth your while trying the beta version (http://forum.avast.com/index.php?topic=145192.0) as that has some Performance and Stability issues. There should also be a beta refresh soon I think.
Title: Re: Same thing every day, in Hardened Mode
Post by: CCV on March 14, 2014, 03:08:07 AM
Thanks.
Yeah, I found the latest beta http://forum.avast.com/index.php?topic=147290.0 before I finished up yesterday.

Wouldn't mind if  i could find some way to be notifid of new betas...
Title: Re: Same thing every day, in Hardened Mode
Post by: schmidthouse on March 14, 2014, 03:32:34 AM
Thanks.
Yeah, I found the latest beta http://forum.avast.com/index.php?topic=147290.0 before I finished up yesterday.

Wouldn't mind if  i could find some way to be notifid of new betas...

lol  Well just follow the Beta Forum. ;D ;)
Title: Re: Same thing every day, in Hardened Mode
Post by: DavidR on March 14, 2014, 03:15:00 PM
Thanks.
Yeah, I found the latest beta http://forum.avast.com/index.php?topic=147290.0 before I finished up yesterday.

Wouldn't mind if  i could find some way to be notifid of new betas...

You used to be able to sign up for the beta testing on the main avast.com site, but I can't recall the URL.

I have never signed up to it being a frequent forum user I get to see it once released.
Title: Re: Same thing every day, in Hardened Mode
Post by: CCV on March 14, 2014, 11:00:36 PM
Just go to http://forum.avast.com/index.php?board=15.0 and click on Notify, seems to do the trick.
There's a new build, from a few hours ago.

Regarding the earlier question of keeping Cyberlink or not:
I don't have much use for it, is true, but some... It will burn ISO format, for example, which I might need --- one day, but hopefully not.
I'm not sure what it would take to get it back if I did uninstall it...
Title: Re: Same thing every day, in Hardened Mode
Post by: DavidR on March 15, 2014, 01:03:12 AM
Whilst that should do the trick, you will get a notification for any new post in the Beta sub-forum (as it is a forum level notify option), some might find that excessive.
Title: Re: Same thing every day, in Hardened Mode
Post by: CCV on March 15, 2014, 02:03:17 AM
I thought the same but,.. maybe not. It was worth a shot to see.  8)
Not getting notifications of new posts - only the new beta, so far.