Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: rocksteady on February 07, 2019, 10:14:20 PM

Title: Behaviour Shield action options
Post by: rocksteady on February 07, 2019, 10:14:20 PM
I can read the difference, but can someone please explain the difference between options:
Automatically move detected threats to chest.
Automatically move known threats to chest.

Surely you can't move a threat to the chest unless it is actually detected - can you?
(Is there a subtle hidden meaning)
Title: Re: Behaviour Sheield action options
Post by: DavidR on February 07, 2019, 10:46:43 PM
Why do you think that it is called the Behaviour Shield, it monitors behaviour that could/would be suspect.

Title: Re: Behaviour Shield action options
Post by: rocksteady on February 08, 2019, 11:29:27 AM
@David,
Yes I am aware of what the Behaviour Shield is and its history in Avast.

My question here is simply what is the difference between "known threat" and "detected threat" ?
Answer to that would be appreciated.
Title: Re: Behaviour Sheield action options
Post by: DavidR on February 08, 2019, 05:19:02 PM
I can't give you a definitive answer (as an avast user like yourself), but a known threat could be a known means of exploit/entry but hasn't physically been detected.  There is probably only a very thin line between both definitions.

I generally I don't allow any autonomous actions preferring to make that decision myself.  That way I would at least know what program/file the behaviour shield is referring to and why it might be making that detection.
Title: Re: Behaviour Shield action options
Post by: rocksteady on February 09, 2019, 12:46:33 PM
I have never had anything put in the chest that I am aware of as result of the behaviour shield (so far).

PS. I have corrected my original bad spelling of "Shield" in Subject line of my posts - may assist any searches in future.
Title: Re: Behaviour Shield action options
Post by: Evjls on February 09, 2019, 08:13:58 PM
"always ask" and "Automatically move detected threats to chest" are more powerful than the default one. They will detect more threats but increase false positive rate

As you know, the default option (detect KNOWN threat) only detects known threats

The first 2 options will expand avast's power