Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: richo on June 15, 2010, 06:46:12 AM

Title: Behaviour shield
Post by: richo on June 15, 2010, 06:46:12 AM
What is the current state of play with the Behaviour shield for x64 systems? In the past it has been suggested that it is not active for x64.... I'm curious to know what it's level of functioning is now.
Thanks.
Title: Re: Behaviour shield
Post by: Gargamel360 on June 15, 2010, 08:00:14 AM
Mine has never registered any activity.
Nor have I seen anything saying I should expect it to start.
I haven't removed or deactivated it, but if I had to lose one of my Avast!
shields for whatever reason, it would be the first to go.
Title: Re: Behaviour shield
Post by: tsilo on June 15, 2010, 09:50:50 AM
I thin avast! Behaviour shield is formal component.. maybe in future it will developed but today it's simply don't do anything.
Is there any way to test works it really or not?
Title: Re: Behaviour shield
Post by: SafeSurf on June 15, 2010, 10:01:24 AM
I personally wouldn't want to test mine!  That could mean trouble entered my machine, and I don't like trouble.  :o
Title: Re: Behaviour shield
Post by: YoKenny on June 15, 2010, 02:50:28 PM
Behavior shield works fine on my XP Pro system but not on my Windows 7 system.

For detction follow polonus' posts in viruses and worms

Example:
Source of infection...
http://forum.avast.com/index.php?topic=60161.0
Title: Re: Behaviour shield
Post by: richo on June 17, 2010, 09:58:09 AM
Anyone from Avast like to comment? Would be keen to know if the Behaviour Shield is woth installing on my x64 system.
Title: Re: Behaviour shield
Post by: SafeSurf on June 17, 2010, 10:04:37 AM
Richo, If you click Real Time Shield > Behavior Shield > Show Traffic History....does a graph load up and show you something?  It does for me.
Title: Re: Behaviour shield
Post by: Hermite15 on June 17, 2010, 11:55:41 AM
the feature shouldn't have been implemented at all in the first place, at least not as long as it's not doing anything, which is the case on 99% of 32 bit systems, and 100% of 64 systems.
Title: Re: Behaviour shield
Post by: sanctuaryforever on June 17, 2010, 04:50:46 PM
I think they have started improving it since the last program update at least thats what it says in the change log, as for activity it is there sometimes but as for detections I haven't seen anything maybe in the next few program updates it will come "alive" as it were :)
Title: Re: Behaviour shield
Post by: YoKenny on June 17, 2010, 09:16:53 PM
the feature shouldn't have been implemented at all in the first place, at least not as long as it's not doing anything, which is the case on 99% of 32 bit systems, and 100% of 64 systems.
Granted it is 100% on 64it systems but do you have proof of 99% of 32 bit systems.

It works great on my XP Pro system:
http://forum.avast.com/index.php?topic=59354.msg512583#msg512583

Quote
I think vlk fixed this slowdown problem in behav shield yesterday.
http://forum.avast.com/index.php?topic=60829.msg513411#msg513411
Title: Re: Behaviour shield
Post by: Dch48 on June 17, 2010, 11:15:15 PM
Behavior Shield works fine on XP Pro for me too.
Title: Re: Behaviour shield
Post by: Lisandro on June 17, 2010, 11:47:33 PM
Working fine here with Windows 7 32 bits.
Title: Re: Behaviour shield
Post by: richo on June 18, 2010, 09:45:53 AM
Thanks for the replies. In a round about way, I think the answer has been provided. My impression is that the Behavious shield works in 32bit Windows, not in 64bit Windows. Please correct me if I'm wrong.
Title: Re: Behaviour shield
Post by: tsilo on June 18, 2010, 12:34:56 PM
you can say it works if it will catch anything with this shield... but there's no way we can test it.
Title: Re: Behaviour shield
Post by: Lisandro on June 18, 2010, 01:06:05 PM
My impression is that the Behavious shield works in 32bit Windows, not in 64bit Windows. Please correct me if I'm wrong.
I think it has less detection signatures, but it should work.
Better will be if the programmers drop a final word here.
Title: Re: Behaviour shield
Post by: richo on June 18, 2010, 01:31:16 PM
Would be delighted with a word from a programmer.
Title: Re: Behaviour shield
Post by: PileOfMush on June 18, 2010, 05:25:15 PM
I also have shown no activity on Behavior Shield since installing v5 in mid-March on Win7 Pro 64-bit.
Title: Re: Behaviour shield
Post by: pk on June 18, 2010, 06:33:57 PM
@richo, PileOfMush, Tech,

How is the Behavior Shield supported on x64 OSes?
Read the 2nd part of this topic: http://forum.avast.com/index.php?topic=53407.msg453198#msg453198
Title: Re: Behaviour shield
Post by: zenzor on June 18, 2010, 06:43:58 PM
the feature shouldn't have been implemented at all in the first place, at least not as long as it's not doing anything, which is the case on 99% of 32 bit systems, and 100% of 64 systems.

Well on my system (XP 32 bit) it certainly does something - slowing down everything... :-)

So I have it permanently shut down.
Title: Re: Behaviour shield
Post by: Lisandro on June 18, 2010, 08:30:34 PM
Thanks pk.
I have forgotten that.
Title: Re: Behaviour shield
Post by: YoKenny on June 19, 2010, 03:48:54 AM

Well on my system (XP 32 bit) it certainly does something - slowing down everything... :-)

So I have it permanently shut down.
It would help if you go to PROFILE then Modify Profile then then update your Signature: with information like my signature as this helps the helpers offer pertinent advice.
Title: Re: Behaviour shield
Post by: SafeSurf on June 19, 2010, 07:48:00 AM
Well on my system (XP 32 bit) it certainly does something - slowing down everything... :-) So I have it permanently shut down.

Sorry to hear it isn't working for you Zenzor.  Luckily, I'm not having a problem.  Hang in there.
Title: Re: Behaviour shield
Post by: Fract504 on August 14, 2010, 04:47:54 PM
Is there any update on our favorite vaporware component called "Behavior Shield"?
I haven't yet seen any technical explanation or any positive detection it found.

Logos wrote it does 99% nothing in Windows XP. I would rather go for 100%  ;)
Sometimes you see a bar graph spike, but this means nothing to me since I have no indicationon what triggered it.
Not in the logs, nowhere!

For now it seems to be only in the product as a placeholder or for marketing reason?
If anyone ever had any detection: We would like to hear what has been detected.
Title: Re: Behaviour shield
Post by: DavidR on August 14, 2010, 05:44:37 PM
- avast! Behaviour Shield, general information from an interview Softpedia - Ondrej Vlcek
Ondrej Vlcek:
The Behaviour Shield that we shipped in version 5.0 is a new component that is going to be further developed moving forward. For example, in version 5.1, we will be adding more sensors that will allow for even finer-grain filtering.

For now, the Behaviour Shield is focused on exploits coming via typical mechanisms (browser, PDF reader, and flash vulnerabilities, for example). It also closely monitors all kernel-mode code (drivers) loaded into the operating system, and is able to detect zero-day rootkits.
Title: Re: Behaviour shield
Post by: wonder on August 14, 2010, 06:04:05 PM
our favorite vaporware component called "Behavior Shield"

Oh..my God...it made me dying with laughter ;D ;D
Actually is true...at the moment there' no evidence of any kind of real behavior shield activity...lets wait for the next 5.1.  ::)
Title: Re: Behaviour shield
Post by: YoKenny on August 14, 2010, 06:56:10 PM
@ wonder

While you are dying with laughter maybe you could Go to PROFILE then Modify Profile then Forum Profile Information then Signature: and put information about your system just like my signature about your system just like my signature so that the helpers can offer pertinent advice.

As DavidR is an avast! Technical advisor you could provide the system information! ;)