Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Beta - Avast => Topic started by: MartinZ on January 20, 2017, 05:30:45 PM

Title: NEW: Avast Beta 17.1.2283
Post by: MartinZ on January 20, 2017, 05:30:45 PM
Hi all testers,

we have a new beta for your to enjoy some weekend testing ;-) We finally added the behavioral analysis of running programs, plus many fixes and improvements in UI.

What's new:

- Behavior Shield aka behaviorial analysis of running programs is here!
- 88 fixes and improvements in GUI (Status screen polished - added progress when Smart Scan running, new navigation menu etc..)
- Game Mode improvements, now we prevent forced Windows restarts after Windows update
- Fixed problem when it's wasn't possible to turn off PC because File Shield was blocking it
- Firewall profiles are now synchronized with Windows (both directions) (Win7+)
- Firewall rules for "Public" profile are now visible in the UI for better control and configurability
- SafeZone: New Recently closed tabs menu
- SafeZone: Modern UI window styling
- SafeZone: New currency converter
- SafeZone: Most used sites on the start page

Download links:

https://forum.avast.com/index.php?topic=179943.0

Known issues:

- Browser cleanup step in Smart Scan doesn't work
- SafeZone: Links leading to extensions store will not work
- SafeZone: Credit Card button does not work when switching back from bank mode (Workaround: click out and back to the SZB window)
- SafeZone: Useless notification about blocking an extension soon after browser start
Title: Re: NEW: Avast Beta 17.1.2283
Post by: nikf200 on January 20, 2017, 05:33:38 PM
yeaaaa!!!!!! thank you!!! :D :D :D :D
Title: Re: NEW: Avast Beta 17.1.2283
Post by: DavidR on January 20, 2017, 05:37:15 PM
I take it from the topic title/subject that the Avast program version numbering has now fallen line with AVG (from 12.x to 17.x).
Title: Re: NEW: Avast Beta 17.1.2283
Post by: MartinZ on January 20, 2017, 05:44:02 PM
I take it from the topic title/subject that the Avast program version numbering has now fallen line with AVG (from 12.x to 17.x).

That's an interesting conspirator's theory ;-) In fact we needed to unified the versioning as Avast had 12.xx and AVG 15.xx, so we jumped to 17, which nicely matches the year as well ;-)
Title: Re: NEW: Avast Beta 17.1.2283
Post by: DavidR on January 20, 2017, 05:47:01 PM
I take it from the topic title/subject that the Avast program version numbering has now fallen line with AVG (from 12.x to 17.x).

That's an interesting conspirator's theory ;-) In fact we needed to unified the versioning as Avast had 12.xx and AVG 15.xx, so we jumped to 17, which nicely matches the year as well ;-)

Thought so, but I didn't guess the 2017 bit.

I have just been checking the Beta - Release history and notes (https://forum.avast.com/index.php?topic=183548.0) topic needs to be updated.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Secondmineboy on January 20, 2017, 06:05:31 PM
Why the heck did you release a new Beta while im doing a system image?

Cant Upgrade till that image is done in like a felt eternity..........DAMN YOU :P
Title: Re: NEW: Avast Beta 17.1.2283
Post by: clocks on January 20, 2017, 06:07:39 PM
Great to see a new beta!  I see the GUI is still large, probably about 40% larger than Webroot for comparison.  Also, there is a loading screen when opening the GUI.  It literally says "loading" as you wait a 4-5 seconds.  Doesn't the old, non-beta version of the program open right up?  I guess neither of these things is a big issue in the grand scheme of things.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Alikhan on January 20, 2017, 06:16:53 PM
Any screenshots of the new improved GUI?

Actually I'll BETA test this version.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Alikhan on January 20, 2017, 06:47:06 PM
I did a clean install and the BETA version is working fine, however:

- The GUI needs to be optimized. Currently taking like 5 seconds stuck on "loading". That's annoying.
- The layout isn't very good. Why can't it be Status, Scans, Real time Shields, Privacy and then Virus Chest - it just doesn't make sense going to Anti-Virus to see the shields minimal stats.
- I think behaviour analyzer should be included in minimum install
- The settings UI still needs some work - Especially the font, size and the colours of the tab selections.
- Far too much wasted space on the UI - see attached image.
- Data Shredder was included in Avast Internet Security even though there was no option to install it (custom install). Afaik that's a Premier version feature.
- The File, Web and Mail statistics should be shown without the need of the Pi button..
- I just ran the Eicar test file and then removed the notification, however, the 1 is still there.. ( see attached image)

Title: Re: NEW: Avast Beta 17.1.2283
Post by: nikf200 on January 20, 2017, 07:00:42 PM
can someone tell me where is the hips option???
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Alikhan on January 20, 2017, 07:08:51 PM
can someone tell me where is the hips option???

I don't see it either but it never really did anything. Behaviour Analyzer is much better and proven so you're protected better.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: clocks on January 20, 2017, 07:10:43 PM
- I think behaviour analyzer should be included in minimum install

I agree with most your points except this one.  It requires it's own process, and increases the proprams footprint.  Some people may not want/need it, especially if they are using a layed defense with other programs.  I like having the option to not install it.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: RejZoR on January 20, 2017, 08:53:47 PM
Goodie :D Let see what has been improved with the interface... Also can't wait to poke Behavior Shield. If all goes well I'll test it today against latest malware to see how it's working.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Av-tester on January 20, 2017, 09:19:16 PM
can someone tell me where is the hips option???
It should be in File Shield settings
Title: Re: NEW: Avast Beta 17.1.2283
Post by: nikf200 on January 20, 2017, 09:26:48 PM
can someone tell me where is the hips option???
It should be in File Shield settings

its not.... :( :( :(
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Av-tester on January 20, 2017, 09:36:28 PM
(http://)
Font in main UI is ok, but in settings it is so tiny and sub-pixel

And what happened for hips?

Regards
Av-tester
Title: Re: NEW: Avast Beta 17.1.2283
Post by: RejZoR on January 20, 2017, 09:37:58 PM
Apart from Behavior Shield, I'm absolutely NOT impressed with the progress done on the GUI and its UX...

My honest opinion...
https://forum.avast.com/index.php?topic=195590.0
Title: Re: NEW: Avast Beta 17.1.2283
Post by: clocks on January 20, 2017, 09:42:40 PM
I have a feeling we are fighting a losing battle on the GUI.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Secondmineboy on January 20, 2017, 09:48:14 PM
I have a feeling we are fighting a losing battle on the GUI.

Same here........
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Alikhan on January 20, 2017, 10:03:12 PM
I'm connected to a network and Avast Firewall is saying "You're not connected to a Network"...

See screenshot.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: l.raiden on January 20, 2017, 10:39:55 PM
Apart from Behavior Shield, I'm absolutely NOT impressed with the progress done on the GUI and its UX...

My honest opinion...
https://forum.avast.com/index.php?topic=195590.0

I really don't understand how you can do a better interface in paint than the "professional" guy  of avast.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: l.raiden on January 20, 2017, 10:45:57 PM
I would like to have a behavior blocker more customization, I guess there are hidden settings that could be available and would be appreciated by advanced users

The application rules, the flatten view should be the default, and it should have the icons of the apps.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: pkoukoulas6 on January 20, 2017, 10:53:03 PM
I HAVE PROBLEM WITH AVAST CLEAN UP , I CANT ACTIVATE IT ??? BECAUSE I HAVE INTERNET SECURITY FROM AVAST , AND WHEN I AM GOING FROM SETTINGS THEN IT ASKED ME FOR THE CODE WHAT I MUST TO DO ???
Title: Re: NEW: Avast Beta 17.1.2283
Post by: RejZoR on January 20, 2017, 10:55:17 PM
This also just hit me that I somehow missed in the past days...

Why is the "Settings" button not square button with nice gear icon like all the rest of buttons in the sidebar? And same for "Upgrade" button. It's just bunch of inconsistent things thrown together to form a GUI.

GUI has to be fast, responsive, pleasant to look at, functional and needs to be consistent across all panels and menus. Why am i telling this to a team of professionals with decades of experience!? ???
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Vlk on January 20, 2017, 11:03:06 PM
The UI is fairly consistent, but made of different elements of course. The reason why the Settings button is different is that it's not part of the main navigation. It's intentionally pushed to the background, i.e. made less visible.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: RejZoR on January 21, 2017, 12:24:59 AM
If it's made of different elements, then it's not consistent. White checkboxes, white dropdown menus, white panels, white mega buttons, it's all sticking out of purple interface like sore thumbs. All 345 of them on one left foot. Sure, their whiteness is certainly consistent across the board, but it's clashing with the very foundation of the new GUI theme. It feels like sticking Windows 9x styled menus into Windows 7 or Windows 10. It just doesn't compute.

Then there are flip switches where some are round and some are rectangular. And if you open a main GUI and "Settings" panel and bloody close and Help (?) buttons don't even match. They look somewhat the same, but they are of different size. And there are hundreds of such examples and when you have hundreds of things that just don't match together, the overall feel will NEVER be good. It doesn't feel good.

I honestly don't care if avast!'s GUI remains absolutely the same through several years and you just change the year number on it. If it's good to begin with. But that's just not the case. It's always "That'll do" and "We'll fix it later" and it never becomes good. And you keep fiddling with it in all wrong ways.

Want to know what's a good interface in my "design" book? Kaspersky 2017. I suggest you guys install it and see what I mean. It's beautiful, consistent, logically laid out, well organized, not cluttered, it's everything avast!'s new interface isn't.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: l.raiden on January 21, 2017, 12:26:01 AM
games launched from battlenet doesn't work, it give a crash, after uninstalling the latest beta it works, with the previous beta it worked well.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Sutieday on January 21, 2017, 01:15:05 AM
I like how the new Avast is progressing, and Its been in beta for a while now, will there be another beta or an RC?
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Asyn on January 21, 2017, 05:03:54 AM
I HAVE PROBLEM WITH AVAST CLEAN UP , I CANT ACTIVATE IT ??? BECAUSE I HAVE INTERNET SECURITY FROM AVAST , AND WHEN I AM GOING FROM SETTINGS THEN IT ASKED ME FOR THE CODE WHAT I MUST TO DO ???
-> https://forum.avast.com/index.php?board=63.0
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Lord_Ami on January 21, 2017, 09:42:30 AM
Thank you developers for you hard work! Running smooth so far!

One question/comment: Why is Behavior shield not included in "minimal protection" package? It's one of the components needed for virus protection, no?
Title: Re: NEW: Avast Beta 17.1.2283
Post by: NON on January 21, 2017, 09:53:22 AM
Thanks for the new beta.

Mostly working fine, except for the GUI still has strange Japanese fonts...
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Be Secure on January 21, 2017, 11:56:50 AM
1.Can't install AOS to Google Chrome. :( Fix it avast...
2.avast Anti-spam not working at all.
3.No HIPS.
4.Need to improve Behavior Shield/IDP
5.Where is Avast Ransomware Protection?@avast team. ???
Title: Re: NEW: Avast Beta 17.1.2283
Post by: A. User on January 21, 2017, 12:53:25 PM
The update option for programs is set to "Ask after update is downloaded" but i have to open the update settings to see the thext next to the update button that a new version is available. There is no popup message which a user would expect to see if he has explicitly selected this option.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: A. User on January 21, 2017, 01:43:25 PM
I see an improvement, but some bugs remain FYI. The help popup sections were initially expanding okay, but when i get to Behavior Shield settings and clicked the help, they were again collapsing right after being expanded just like the previous beta. Plus the initial opening help popup is too small and needs to be expaded a little bit manually. I suggest looking at the size of the main GUI and making the help popup load at that same size. There are resize buttons at the edges of the settings screen, but it can't be resized down, only up. This hides the OK and Cancel buttons for 1366x768. When you have more free time you should make IMHO a separate settings for each component accessible right from a settings button right next to the component button itself which will also match the theme. Shields are now activating okay after being disabled. The notifications issue is still here. Animations and fonts are not exactly smooth, but these are minor problems which i guess you will fix for Release Candidate. I'm still not sure if it's by design that the default exceptions from the stable version are missing in the file system exclusions like the Pagefile and so on. It is good that you added all the components to the protection popup, but you should also move the current available ones to the top and leave a little space and then have a bottow row of components not installed, this will make the distinction more clear. The elements sized are OK but the padding is too large. More rows can be created by reducing it which will allow a distinction blank row. Clicking on the not installed elements does not show informative screens so add them. The HTTPS problem with loading sites in Chrome disappeared at the middle of the previous beta and is not in this one either.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: A. User on January 21, 2017, 02:19:34 PM
Okay so what exactly is the difference between the two attached images? One is for AMSI and the other one for regular detection? One is for behavior blocker and the other one for regular detection? Clicking on any of the options shows the same alert after 1 second. Clicking on block in addition shows the second popup in the bottom right and again then shows the first popup. I want to send the sample which triggered the popups. Avast doesn't ask for a restart because it can't clean it, it just pops up these messages. If someone from the Avast team wants to run it and see why these popups are appearing after clicking any of the fix options post here.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: clocks on January 21, 2017, 06:18:34 PM
Thank you developers for you hard work! Running smooth so far!

One question/comment: Why is Behavior shield not included in "minimal protection" package? It's one of the components needed for virus protection, no?

Why not give me the choice?  It is no different from the webshield, etc...
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Lord_Ami on January 21, 2017, 06:24:44 PM
Thank you developers for you hard work! Running smooth so far!

One question/comment: Why is Behavior shield not included in "minimal protection" package? It's one of the components needed for virus protection, no?

Why not give me the choice?  It is no different from the webshield, etc...
I was referring to setup process. When you choose Minimal protection, Behavior Shield is not checked (only File and Web shields).
Of course whole setup is modular so you can make up your own package. I just thought Behavior Shield should be in the Minimal package.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: clocks on January 21, 2017, 06:41:00 PM
Ah ok.  As long as the custom option still allows people the choice on what to install.

From what I can tell, the IDP module almost doubles the ram usage from using just the file/web shields.  So for those that want a very small footprint, they may not want the added overhead.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: clocks on January 21, 2017, 07:28:22 PM
Not sure how to confirm if it is related to Avast, but I have 17 svchost.exes currently running since installing this beta.  Doesn't that seem like a lot?  I don't remember having so many prior.  I guess maybe I will uninstall Avast and see how many I have running.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Asyn on January 21, 2017, 07:33:43 PM
Not sure how to confirm if it is related to Avast, but I have 17 svchost.exes currently running since installing this beta.  Doesn't that seem like a lot?
Yep, that's quite a lot. (I've running 6 here.)
Title: Re: NEW: Avast Beta 17.1.2283
Post by: clocks on January 21, 2017, 07:35:18 PM
Not sure how to confirm if it is related to Avast, but I have 17 svchost.exes currently running since installing this beta.  Doesn't that seem like a lot?
Yep, that's quite a lot. (I've running 6 here.)

I don't think it is Avast.  I just uninstalled the beta, rebooted, and now I have 19!  lol  Weird.

BTW - what version of Windows are you running that you only have 6?  I am running Windows 10 Home 64bit.

Also, other than my complaints about the GUI that I mentioned earlier, the program seems to be running well.  It will be one of my favorites.  The GUIs color scheme is actually growing on me a bit, but still think it is too large, and don't understand the 5 second load time.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Asyn on January 21, 2017, 07:42:26 PM
BTW - what version of Windows are you running that you only have 6?
Check my signature. ;)
Title: Re: NEW: Avast Beta 17.1.2283
Post by: =Snake= on January 21, 2017, 09:04:00 PM

I have 13 'svchost.exe' under W7. Under XP with '2280NU' 9!

=Snake=
Title: Re: NEW: Avast Beta 17.1.2283
Post by: OiCkilL on January 21, 2017, 09:51:08 PM
The Behavior Shield blocked too many normal apps. NVIDIA Share.exe, runonce.exe, OneDrive.exe, iCloudDrive.exe, etc.
The "minimal protection" it is very important.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Lord_Ami on January 21, 2017, 09:51:41 PM
The Behavior Shield blocked too many normal apps. NVIDIA Share.exe, runonce.exe, OneDrive.exe, iCloudDrive.exe, etc.
The "minimal protection" it is very important.

You should make a topic about this so they can fine-tune it. Include files :)
Title: Re: NEW: Avast Beta 17.1.2283
Post by: RejZoR on January 21, 2017, 09:57:07 PM
The Behavior Shield blocked too many normal apps. NVIDIA Share.exe, runonce.exe, OneDrive.exe, iCloudDrive.exe, etc.
The "minimal protection" it is very important.

Nonsense. If I were you, I'd check your system because something is not right. When Behavior Shield works as intended, it will never trigger false positives unless something really behaves like malware.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: saga7x on January 21, 2017, 10:00:30 PM
Hello RejZoR, will you make a video testing this new Avast beta?
Title: Re: NEW: Avast Beta 17.1.2283
Post by: clocks on January 21, 2017, 10:47:47 PM
Anyone else having issues getting Avast out of passive mode?
Title: Re: NEW: Avast Beta 17.1.2283
Post by: RejZoR on January 21, 2017, 10:57:57 PM
It seems they've entirely broken whole avast! because of the new interface. I don't even know where to begin testing and reporting things...
Title: Re: NEW: Avast Beta 17.1.2283
Post by: RejZoR on January 21, 2017, 11:34:06 PM
Something weird is going on. Behavior Shield detected only 1 threat where AVG using Software Analyzer detected same things no problem. What's more bizarre is that none of the ransomware encrypts anything for some reason.

I was using the quarantine every detected thing to make things easier and faster. Need to restore VM and test with "Ask command instead. Not sure what's going on.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: RejZoR on January 22, 2017, 12:56:18 AM
Yup, something is wrong with Behavior Shield. It's just not detecting things AVG is detecting with Software Analyzer. Exact same things. My sample of Vipasana ransomware for example. AVG blocked it no problems, avast! BETA with seemingly identical component for behavior analysis and blocking, got through and encrypted files.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: clocks on January 22, 2017, 05:21:34 AM
Yup, something is wrong with Behavior Shield. It's just not detecting things AVG is detecting with Software Analyzer. Exact same things. My sample of Vipasana ransomware for example. AVG blocked it no problems, avast! BETA with seemingly identical component for behavior analysis and blocking, got through and encrypted files.

Any chance you verified IP was actually running?  The reason I ask is I just checked my taskmgr, and only avastui & avastsvc were running.  Somehow aswidsagent wasn't.  So I right clicked the system tray icon to disable all shields, then re-enabled.  Rechecked taskmgr and IP was then running again. 
Title: Re: NEW: Avast Beta 17.1.2283
Post by: RejZoR on January 22, 2017, 06:52:51 AM
Well, it did detect the very first sample. Unless it crashed later on without telling me...
Title: Re: NEW: Avast Beta 17.1.2283
Post by: OiCkilL on January 22, 2017, 07:24:31 AM
The Behavior Shield blocked too many normal apps. NVIDIA Share.exe, runonce.exe, OneDrive.exe, iCloudDrive.exe, etc.
The "minimal protection" it is very important.

Nonsense. If I were you, I'd check your system because something is not right. When Behavior Shield works as intended, it will never trigger false positives unless something really behaves like malware.
OK, I think the Mactype (https://github.com/snowie2000/mactype) hooked the app's text rendering. This could be the cause of issue.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Kinry on January 22, 2017, 04:45:48 PM
Well, Beta has come out and when will the official version appear ?
Title: Re: NEW: Avast Beta 17.1.2283
Post by: DavidR on January 22, 2017, 05:10:06 PM
Well, Beta has come out and when will the official version appear ?

There isn't a hard and fast date for the release of the final regular program update.

If you have been reading the beta sub-forum and see the issues still present in the beta, it still has some work to be done.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: =Snake= on January 22, 2017, 07:16:57 PM

Well, better some more beta versions than a RTM or final with a not installing AOS.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Hun_Bolt on January 22, 2017, 07:54:43 PM
The Behavior Shield blocked too many normal apps. NVIDIA Share.exe, runonce.exe, OneDrive.exe, iCloudDrive.exe, etc.
The "minimal protection" it is very important.

Any chance you could post at least the screenshots of the detections? It would help me a lot to analyze the problem :)
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Hun_Bolt on January 22, 2017, 07:55:58 PM
Yup, something is wrong with Behavior Shield. It's just not detecting things AVG is detecting with Software Analyzer. Exact same things. My sample of Vipasana ransomware for example. AVG blocked it no problems, avast! BETA with seemingly identical component for behavior analysis and blocking, got through and encrypted files.

Could you please share the hash of the sample you used for testing?
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Charyb on January 22, 2017, 07:59:32 PM

The Behavior Shield blocked too many normal apps. NVIDIA Share.exe, runonce.exe, OneDrive.exe, iCloudDrive.exe, etc.
The "minimal protection" it is very important.


Any chance you could post at least the screenshots of the detections? It would help me a lot to analyze the problem :)



Yup, something is wrong with Behavior Shield. It's just not detecting things AVG is detecting with Software Analyzer. Exact same things. My sample of Vipasana ransomware for example. AVG blocked it no problems, avast! BETA with seemingly identical component for behavior analysis and blocking, got through and encrypted files.
Could you please share the hash of the sample you used for testing?

Are you an Avast employee?
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Hun_Bolt on January 22, 2017, 08:08:27 PM

The Behavior Shield blocked too many normal apps. NVIDIA Share.exe, runonce.exe, OneDrive.exe, iCloudDrive.exe, etc.
The "minimal protection" it is very important.


Any chance you could post at least the screenshots of the detections? It would help me a lot to analyze the problem :)



Yup, something is wrong with Behavior Shield. It's just not detecting things AVG is detecting with Software Analyzer. Exact same things. My sample of Vipasana ransomware for example. AVG blocked it no problems, avast! BETA with seemingly identical component for behavior analysis and blocking, got through and encrypted files.
Could you please share the hash of the sample you used for testing?

Are you an Avast employee?


Yes.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: A. User on January 22, 2017, 08:10:27 PM
Yes.
Waiting for Vlk to confirm.  :-\
Title: Re: NEW: Avast Beta 17.1.2283
Post by: bruce_b on January 22, 2017, 08:11:08 PM
Please let us be sure the Final Release is really ready with no bugs. This is why a few months ago, I suggested and still reiterate that Avast should not be making all new releases every month. Too much can go wrong with just one or two lines of wrong code. Better to say, just release 2 updates a year. One mid year, one end of year. The actual engine in the program seems to be doing quite a good job, so very little tweaking needed there.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: RejZoR on January 22, 2017, 08:39:56 PM
Yup, something is wrong with Behavior Shield. It's just not detecting things AVG is detecting with Software Analyzer. Exact same things. My sample of Vipasana ransomware for example. AVG blocked it no problems, avast! BETA with seemingly identical component for behavior analysis and blocking, got through and encrypted files.

Could you please share the hash of the sample you used for testing?

SHA256: E49778D20A2F9B1F8B00DDD24B6BCEE81AF381ED02CFE0A3C9AB3111CDA5F573
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Hun_Bolt on January 22, 2017, 08:43:28 PM
Yup, something is wrong with Behavior Shield. It's just not detecting things AVG is detecting with Software Analyzer. Exact same things. My sample of Vipasana ransomware for example. AVG blocked it no problems, avast! BETA with seemingly identical component for behavior analysis and blocking, got through and encrypted files.

Could you please share the hash of the sample you used for testing?

SHA256: E49778D20A2F9B1F8B00DDD24B6BCEE81AF381ED02CFE0A3C9AB3111CDA5F573

Thanks. Quick question, you are testing without network connection right? Or did you change Avast configuration besides turning off File Shield?
Title: Re: NEW: Avast Beta 17.1.2283
Post by: DavidR on January 22, 2017, 08:46:25 PM
Yes.
Waiting for Vlk to confirm.  :-\

I believe he is, just that his forum profile hasn't been updated yet. But I have sought confirmation.

What has been asked for, an image of the alert and hash for the file doesn't present any security issue, regardless of who was asking for it.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Av-tester on January 22, 2017, 08:51:35 PM
Does Software analyser in AVG and Avast (in beta) have same ability for protecting from unknown/new malware?
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Hun_Bolt on January 22, 2017, 08:57:19 PM
Does Software analyser in AVG and Avast (in beta) have same ability for protecting from unknown/new malware?

Absolutely.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Vlk on January 22, 2017, 10:17:50 PM
Hun_Bolt is indeed an Avast employee, in fact one of the key people behind IDP / Software Analyzer / Behavior Shield. Please treat him well!!  ;)

The forum admin will update his forum account soon.

Thanks
Vlk
Title: Re: NEW: Avast Beta 17.1.2283
Post by: A. User on January 22, 2017, 10:23:33 PM
can someone tell me where is the hips option???
It should be in File Shield settings

its not.... :( :( :(
Because there is a behavior blocker. It replaces the HIPS.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: A. User on January 22, 2017, 10:29:58 PM
Yes.
Waiting for Vlk to confirm.  :-\
What has been asked for, an image of the alert and hash for the file doesn't present any security issue, regardless of who was asking for it.
You took my words from my mouth. Too good questions for a person with... 1 post and no Avast badge.  ;D ;D Welcome aboard Hun_Bolt and sorry for the question.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: av20 on January 23, 2017, 02:30:45 AM
1.  The menu in help still does not work for me.  If I click "?" from the main GUI, a new window opens, then if I click the bars at the upper left corner, the mouse-up event causes a menu to drop down -- But this menu goes back up before I can click on a help menu item.

2. After smart scan, then resolve all, there are some performance items listed.  I don't have "Avast Cleanup Premium" so there is an "Activate" and a "Skip" button at the bottom of the window.  "Skip" does nothing.  Also, at the top of the window, "Back" is a choice, and it also does nothing.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: RejZoR on January 23, 2017, 09:10:11 AM
Yup, something is wrong with Behavior Shield. It's just not detecting things AVG is detecting with Software Analyzer. Exact same things. My sample of Vipasana ransomware for example. AVG blocked it no problems, avast! BETA with seemingly identical component for behavior analysis and blocking, got through and encrypted files.

Could you please share the hash of the sample you used for testing?

SHA256: E49778D20A2F9B1F8B00DDD24B6BCEE81AF381ED02CFE0A3C9AB3111CDA5F573

Thanks. Quick question, you are testing without network connection right? Or did you change Avast configuration besides turning off File Shield?

Internet connection was active, I was testing with ONLY Behavior Shield enabled. I've also tried with all the other shields removed and also all the shields installed but disabled, to see if that made any difference. From what I can tell, it didn't.

The thing is, avast!'s Behavior Shield didn't get triggered on same things new AVG got triggered by Software Analyzer despite both being the same thing now. Which made me believe there are some Behavior Shield integration issues within avast!.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Kinry on January 23, 2017, 12:38:22 PM
Apart from behaviour shield, another problem is LANGUAGE. Yes, we're Chinese, but we often meet this kind of point where Chinese cannot regularly appear. Well, the other is Sandbox cannot also run smoothly. Last, Avast beta has come out and AVG with Avast's components is closer to final version. Well, when will the final Avast build put out? even closer to a more complete one like AVG?
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Hun_Bolt on January 23, 2017, 02:42:57 PM
Yup, something is wrong with Behavior Shield. It's just not detecting things AVG is detecting with Software Analyzer. Exact same things. My sample of Vipasana ransomware for example. AVG blocked it no problems, avast! BETA with seemingly identical component for behavior analysis and blocking, got through and encrypted files.

Could you please share the hash of the sample you used for testing?

SHA256: E49778D20A2F9B1F8B00DDD24B6BCEE81AF381ED02CFE0A3C9AB3111CDA5F573

Thanks. Quick question, you are testing without network connection right? Or did you change Avast configuration besides turning off File Shield?

Internet connection was active, I was testing with ONLY Behavior Shield enabled. I've also tried with all the other shields removed and also all the shields installed but disabled, to see if that made any difference. From what I can tell, it didn't.

The thing is, avast!'s Behavior Shield didn't get triggered on same things new AVG got triggered by Software Analyzer despite both being the same thing now. Which made me believe there are some Behavior Shield integration issues within avast!.

I tested the sample with Avast Beta and with File Shield turned off it got detected by Behavior Shield.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: RejZoR on January 23, 2017, 03:53:00 PM
That's certainly strange. I even tried again with new clean VM with same results.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: A. User on January 23, 2017, 08:55:46 PM
Hun_Bolt, does selecting "Automatically quarantine known threats" still asks for unknown threats or simply ignores them? Please make it more clear in the UI. I guess that you have known behavior signatures (patterns) and also you have some kind a threshold for taking some actions, is it like that way?
Title: Re: NEW: Avast Beta 17.1.2283
Post by: RejZoR on January 23, 2017, 10:42:44 PM
What is considered "known" threats when it comes to behavior analysis? Rules that are very strict and specific and never generate false flags? Or is Behavior Shield also doing some sort of non behavior based scanning of running programs?
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Hun_Bolt on January 23, 2017, 10:57:36 PM
Known threats are threats were the behavioral engine has a very high confidence that the given process is malicious. The default setting is to auto-remove these threats and ask the user for the remaining ones.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: RejZoR on January 24, 2017, 12:22:07 AM
I've experienced ASK dialog even when I had it set to quarantine detected threats. That was in new AVG though.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: 492580903 on January 24, 2017, 11:19:30 AM
Can you restore a long time before the virus database upgrade voice prompt? Default is off, you can manually open on the line. I think it's coooool´╝ü
Title: Re: NEW: Avast Beta 17.1.2283
Post by: 492580903 on January 24, 2017, 11:21:24 AM
sorry my English is so poor
Title: Re: NEW: Avast Beta 17.1.2283
Post by: =Snake= on January 24, 2017, 01:56:40 PM
sorry my English is so poor

But you can change it like 'learning by doimg'!
 ;)
=Snake=
Title: Re: NEW: Avast Beta 17.1.2283
Post by: RejZoR on January 24, 2017, 04:07:44 PM
Yup, something is wrong with Behavior Shield. It's just not detecting things AVG is detecting with Software Analyzer. Exact same things. My sample of Vipasana ransomware for example. AVG blocked it no problems, avast! BETA with seemingly identical component for behavior analysis and blocking, got through and encrypted files.

Would also be nice if popup stated "Behavior Shield" somewhere so you know what made this detection... Currently it's just popup with no info about that. Not many people know what IDP means. And even IDP is a bit archaic and outdated name used from AVG's "Identity Protection" module...
Could you please share the hash of the sample you used for testing?

SHA256: E49778D20A2F9B1F8B00DDD24B6BCEE81AF381ED02CFE0A3C9AB3111CDA5F573

Thanks. Quick question, you are testing without network connection right? Or did you change Avast configuration besides turning off File Shield?

Internet connection was active, I was testing with ONLY Behavior Shield enabled. I've also tried with all the other shields removed and also all the shields installed but disabled, to see if that made any difference. From what I can tell, it didn't.

The thing is, avast!'s Behavior Shield didn't get triggered on same things new AVG got triggered by Software Analyzer despite both being the same thing now. Which made me believe there are some Behavior Shield integration issues within avast!.

I tested the sample with Avast Beta and with File Shield turned off it got detected by Behavior Shield.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: YLAP on January 27, 2017, 03:04:46 PM
Guys, is the "Real Site" limited to certain networks? Because on different Wi-Fi network (4G LTE SIM card via MiFi device) I see the message what "Real Site can't run on this network". Repair or fix it all option does no difference, so I am curious is it my lack of knowledge or is it bug  ;D
Title: Re: NEW: Avast Beta 17.1.2283
Post by: A. User on January 27, 2017, 03:06:27 PM
Guys, is the "Real Site" limited to certain networks? Because on different Wi-Fi network (4G LTE SIM card via MiFi device) and I see the message what "Real Site can't run on this network". Repair or fix it all option does no difference, so I am curious is it my lack of knowledge or is it bug  ;D
They said a while ago that this warning was not needed and they will remove it. But they missed to say when. :D
Title: Re: NEW: Avast Beta 17.1.2283
Post by: zoli62 on January 28, 2017, 10:54:28 AM
I have one question. One of my computer has insufficient RAM. You can turn off safely the behavior shield?
Title: Re: NEW: Avast Beta 17.1.2283
Post by: DavidR on January 28, 2017, 11:08:29 AM
I would say that the behaviour shield, if it is performing in the same way as the AVG version is going to be a powerful defence. When it isn't in use, it won't be consuming resources.

Me, I would be looking at:
1. is it possible to upgrade the RAM on this system.

2. look at the many programs that when installed want to run on boot, when they don't need to be run until needed.

3. Microsoft Windows managers RAM, after all it is there to be used. When it is running low it takes it back from other programs when it is needed by by an active program.

By far the best option is to get more RAM if that is possible.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: zoli62 on January 28, 2017, 11:49:50 AM
The behavior shield is useful against potentilly unwanted programs. The question is: it is enough the file protection for known threats?
Title: Re: NEW: Avast Beta 17.1.2283
Post by: RejZoR on January 28, 2017, 11:53:21 AM
The behavior shield is useful against potentilly unwanted programs. The question is: it is enough the file protection for known threats?

Actually, Behavior Shield is not all that great against PUP's. I mean, surely, it can detect if they go out of line and do something stupid and malicious, but PUP's in general don't do much. They can be visual annoyance in browser, for example in a form of a toolbar which is otherwise harmless, but users for the most part don't want it there. It most likely won't trigger the behavior sensors, but will still be annoyance to the user. PUP's will for the most part always remain a File Shield and partially Web Shield domain, because you have to match them by digital signature or by pattern signature.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: zoli62 on January 28, 2017, 12:18:42 PM
The behavior shield is useful against potentilly unwanted programs. The question is: it is enough the file protection for known threats?

Actually, Behavior Shield is not all that great against PUP's. I mean, surely, it can detect if they go out of line and do something stupid and malicious, but PUP's in general don't do much. They can be visual annoyance in browser, for example in a form of a toolbar which is otherwise harmless, but users for the most part don't want it there. It most likely won't trigger the behavior sensors, but will still be annoyance to the user. PUP's will for the most part always remain a File Shield and partially Web Shield domain, because you have to match them by digital signature or by pattern signature.

Your answer strengthened me: the file protection provides sufficient protection.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: RejZoR on January 28, 2017, 12:23:04 PM
It doesn't actually. Against PUP, maybe. But against general threats, not really. For good general protection you need all the basic shields (File, Web, Mail and Behavior Shield) active.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: A. User on January 28, 2017, 12:36:28 PM
Your answer strengthened me: the file protection provides sufficient protection.
I believe that you are (mistakenly) thinking that Potentially Unwanted Programs and Zero Day threats are the same thing. RejZoR has explained what are PUPs and they are different than threats for which there is currently no signature and which behave suspiciously by taking dangerous actions for your computer.


Now for the Avast team... I have run a full scan, but i don't think that it is correct for this "Working" thing to show both on "Full scan" and on "Other scans" at the same time. See the screenshot. Plus you have done the calculations wrong... I would prefer -Infinity compared to NaN%  ;D ;D
Title: Re: NEW: Avast Beta 17.1.2283
Post by: basil2012 on January 28, 2017, 01:41:51 PM
I excited to here, can u tell when will be the final release happen :) :)
Title: Re: NEW: Avast Beta 17.1.2283
Post by: CraigB on January 28, 2017, 01:44:08 PM
I excited to here, can u tell when will be the final release happen :) :)
It's been mentioned a thousand times before, there's no set release date, it's ready when it's ready.
Title: Re: NEW: Avast Beta 17.1.2283
Post by: Asyn on January 28, 2017, 01:59:59 PM
I excited to here, can u tell when will be the final release happen :) :)
It's been mentioned a thousand times before, there's no set release date, it's ready when it's ready.
There is, but I'm not allowed to tell you. ;)
Title: Re: NEW: Avast Beta 17.1.2283
Post by: CraigB on January 28, 2017, 02:14:44 PM
 ;D ;D ;D
Title: Re: NEW: Avast Beta 17.1.2283
Post by: DavidR on January 28, 2017, 03:01:21 PM
I excited to here, can u tell when will be the final release happen :) :)
<snip quote>
There is, but I'm not allowed to tell you. ;)

Or as James Bond would say - There is but if I tell you I would have to kill you :D
Title: Re: NEW: Avast Beta 17.1.2283
Post by: =Snake= on January 28, 2017, 05:34:58 PM
I excited to here, can u tell when will be the final release happen :) :)
<snip quote>
There is, but I'm not allowed to tell you. ;)

Or as James Bond would say - There is but if I tell you I would have to kill you :D

Members of this forum have to live with this danger.  ::)
Title: Re: NEW: Avast Beta 17.1.2283
Post by: A. User on January 28, 2017, 05:37:16 PM
Members of this forum have to live with this danger.  ::)
And some would need protection from the Secret service from now on.  8)