Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: goldentequila on April 22, 2011, 12:06:41 AM

Title: Advice on Behavior Shield Expert Setting.
Post by: goldentequila on April 22, 2011, 12:06:41 AM
Hi,

I have this program called Admuncher, which is absolutely the best ad blocker in my opinion. There's no way I'm abandoning this program for anything.

Unfortunately, Avast is interfering with its ability to block ads in IE9 64 bit browser. I isolated the problem to be "Behavior Shield." When I disable that feature, Admuncher blocks all ads in IE9 64 bit browser. As soon as I enable it, it doesn't work. For some odd reason, it doesn't interfere with 32 bit IE9.

There are advanced settings, and I'd like some input from people who may know how to modify the settings based on this report. The settings are:
- Monitor the system for low-level rootkits (check box)
- Monitor the system for Mal-ware like behaviors (check box)
- Monitor the system for Unauthorized modifications (check box)

Then, there's "Trusted process" page where I can add processes to not monitor. I already added the followings, but it didn't solve the problem.
- AdMunch.exe
- Admunch64.exe

Can someone please help me with this? I already asked the developer of Admuncher, and he said I should contact Avast to have them add his software on white list. Meanwhile, I'm hoping that I can work around it by changing the expert setting.

Thank you,

GT
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: GrandPrixGXP on April 22, 2011, 12:15:27 AM
No need for Ad Muncher when every browser can block ads with a simple add on.
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: goldentequila on April 22, 2011, 12:17:52 AM
It seems that every forum is filled with people who make posts such as these. No offense, but that kind of post is not helpful at all. Please don't post if you don't anything helpful to say. People have their own preferences and reasons for using certain products. If there's an issue that needs troubleshoot, the answer is not "stop using it."
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: Gargamel360 on April 22, 2011, 12:30:33 AM
I already asked the developer of Admuncher, and he said I should contact Avast to have them add his software on white list.
There is no whitelist so this is not an option.

Changing any of those check boxes might work, but they are system-wide changes, so that is not ideal.

Have you tried switching the shield to "ask"?  Then (ideally) the shield should ask for the necessary process/s when they need to run, and enter them as trusted for you once you allow them.
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: goldentequila on April 22, 2011, 12:34:25 AM
Hi,

Yes, I changed that to "Ask," but Avast never asked me about anything since I made that change. Is that supposed to work on processes that Avast already decided on what to do? Or, is that going to just ask for new processes? Either way, it's not asking for anything...
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: GrandPrixGXP on April 22, 2011, 12:42:29 AM
There is no reason to run a seperate process when every modern day browser blocks ads. About 8 years ago Ad Muncher served a purpose but in 2011. Time to join the masses.
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: goldentequila on April 22, 2011, 12:51:23 AM
There is no reason to run a seperate process when every modern day browser blocks ads. About 8 years ago Ad Muncher served a purpose but in 2011. Time to join the masses.

Sigh~.... Seriously, I'm not sure what your intent is, but do you really think repeating your unhelpful comment is helpful? This is a help forum, not who's got bigger ego forum. You have your opinion and choices you made. That's all fine. I respect your choice. I'm only asking you to respect mine. I'm not gonna try to persuade you to start using Admuncher because that's none of my business. Conversely, it is not your business whatever I use. (not to mention, you really don't understand admuncher. It's not just a simple ad blocker. It does much more than those addons do. It can block ads in not only browsers but programs/softwares).

I'll say it one more time. If you don't have anything helpful to say, please do not bother posting.
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: GrandPrixGXP on April 22, 2011, 12:54:58 AM
I am being helpful. Trying to make you see the light. Uninstall Ad Muncher. Use Firefox with ad block plus and your problem is solved. Looh around this forum and many others. No one uses Ad Muncher anymore.
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: Gargamel360 on April 22, 2011, 12:56:39 AM
Is that supposed to work on processes that Avast already decided on what to do? Or, is that going to just ask for new processes?
Eh, not sure about that one. :-\  With no IE or Admuncher experience, I will only be of limited help to you.  Just trying to get the ball rolling, so to speak, try the simple things first.


@GrandPrix, Do you have a Diesel engine by any chance?  Just wondering, I smelled Diesel fumes that seemed so familliar..............
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: YoKenny on April 22, 2011, 01:00:25 AM
There is no reason to run a seperate process when every modern day browser blocks ads. About 8 years ago Ad Muncher served a purpose but in 2011. Time to join the masses.
I won't be trying it as it requires money!
Ad Muncher Premium daily updates $29.95 Ad Muncher Basic weekly updates $19.95

Much better to use a free HOSTS file:
Blocking Unwanted Parasites with a Hosts File
You can use a HOSTS file to block ads, banners, 3rd party Cookies, 3rd party page counters, web bugs, and even most hijackers. This is accomplished by blocking the connection(s) that supplies these little gems.
http://www.mvps.org/winhelp2002/hosts.htm

Plus it works for both IE9 64bit and IE9 32bit.
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: GrandPrixGXP on April 22, 2011, 01:02:40 AM
Thanks Kenny. Pay to block ads. Funniest thing I heard all day.
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: YoKenny on April 22, 2011, 01:06:51 AM
Thanks Kenny. Pay to block ads. Funniest thing I heard all day.
Maybe now you can now go to PROFILE then Modify Profile then Forum Profile Information then select your country in Please select your country: then update your Signature: with information like my signature as this helps the helpers offer pertinent advice.
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: DavidR on April 22, 2011, 01:21:32 AM
@ goldentequila
If it is the Behavior Shield blocking admuncher, and you have entered the two executables to the trusted processes and it still doesn't work. Perhaps it is another file, check the C:\ProgramData\AVAST Software\Avast\report\BehaviorShield.txt (vista win7).

See if there are any entries for any admuncher associated executables, etc. copy and paste the full path into the trusted processes.

I'm not to familiar with admuncher either, but I though it worked by using a local proxy to filter out the ads ?
If so them that proxy port would need to be coordinated with the web shield redirections, avastUI, settings, trouble shooting, Redirect Settings, add the port to the end of the list, separate with a comma before entering the port number and uncheck Ignore local communication.
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: goldentequila on April 22, 2011, 02:02:23 AM
What all does addmuncher do for $30??


The same thing that Ad Block Plus does for free.
For god's sake, please stop making irresponsible posts. Admuncher does so much more than adblocker. I've used several major well-known ad blocking softwares, so I know. Don't go around saying BS about things you don't even understand.

I asked the developer of the software to chime in here so that people will not be misled by ignorant fool like Grandprix. So, I hope he will make a post here to clarify things.

For the time being, I'll point out just one thing. If you are too cheap to pay for a quality software, that doesn't make the software bad. It just means you are too cheap. So, stop bashing a perfectly fine software.
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: Rednose on April 22, 2011, 02:12:07 AM
I smelled Diesel fumes that seemed so familliar..............

Snuff snuff ???

Yeah, I smell it too now ;D

Greetz, Red.
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: goldentequila on April 22, 2011, 02:17:22 AM
By the way,

For everyone who has been giving me helpful tips, thank you. I got caught up in the immature argument of you know who and let myself neglect the nice people I should be talking to instead.

I've reported him to the moderator, so I think he'll be gone from my thread soon (I hope).

Anyhow, I'm going to try some of the suggestions and see if I can get this to work. Thanks again  :)

GT
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: Pondus on April 22, 2011, 02:20:31 AM
I smelled Diesel fumes that seemed so familliar..............

Snuff snuff ???

Yeah, I smell it too now ;D

Greetz, Red.
yea...2 hours after the ban this registered....suspicous   ;)
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: DavidR on April 22, 2011, 02:22:38 AM
Ah almost didn't recognise you there Dieselman Rednose with your new avatar ;D

Hard to cover your tracks.
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: JeffreyCole on April 22, 2011, 02:48:12 AM
Hello Everyone. :)

I'm one of the developers of Ad Muncher.

I was told about this thread by goldentequila and he wanted my to chime in
on some of the differences between Ad Muncher and Adblock Plus.

I will but only if it's acceptable to the moderators.

May I? :)
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: DavidR on April 22, 2011, 03:07:02 AM
Whilst I'm not a moderator, if it helps in resolving goldentequila's problem I don't see it being a problem as we have had input from other software developers in relation to any issues in the past, whilst not attempting to promote a product, just resolve a problem.

You can perhaps clarify my assumption that Ad Muncher uses a proxy to achieve its Ad filtering.

If not then any other files, etc. that might be involved in the ad muncher filtering, that the behavior shield might block.

Essentially we do need goldentequila to check out the behaviorshield.txt file question I asked in this post Reply #12 on page 1 http://forum.avast.com/index.php?topic=76805.msg635823#msg635823 (http://forum.avast.com/index.php?topic=76805.msg635823#msg635823).
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: JeffreyCole on April 22, 2011, 03:43:08 AM
Ad Muncher is not a proxy.

It hooks and patches winsock calls for the filtered application.

An Avast dev will need to install the latest version to see why Avast is blocking Ad Muncher.
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: DavidR on April 22, 2011, 04:21:06 AM
OK, I will try and point someone of the mods/devs at this topic.

Edit: Is there a driver other than the executable files that have been mentioned by goldentequil - AdMunch.exe - Admunch64.exe, which could be added to the behavior shield trusted processes ?

Title: Re: Advice on Behavior Shield Expert Setting.
Post by: JeffreyCole on April 22, 2011, 04:47:33 AM
There are no drivers for Ad Muncher.

Everything runs in user space.

All files are in the Ad Muncher folder.

Title: Re: Advice on Behavior Shield Expert Setting.
Post by: DavidR on April 22, 2011, 05:11:16 AM
It's strange then that having added the two executables (presumably one of those is responsible for that hooking and patching of winsock. Which again we need input from goldentequil about the contents of the behaviorshield.txt file.

Thinking again about the hooking of winsock, I wonder if one of the settings in the behavior shield might be more geared up to stop this, 'Monitor the system for unauthorised modifications' see image.

So goldentequil could uncheck this option in the Behavior Shield and see if that resolves the problem, if not Set the Action to take to Ask so he can at least see any intervention and authorise it or not.

Well that's me for the night, 4:10am here, hopefully one of the mods/devs can pick up on this later.
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: DavidR on April 22, 2011, 07:37:27 PM
OK, I got something back from one of the developers and a suggestion to try adding iexplore.exe to the trusted processes.
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: JeffreyCole on April 22, 2011, 07:42:19 PM
Wouldn't that have to be done for every program a user wanted Ad Muncher to filter?

It filters over 200 applications by default.

Including virtually every browser made in the past 10 years and all IM applications with ads and a myriad of other applications.
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: DavidR on April 22, 2011, 07:54:27 PM
I honestly don't know, I'm just an avast user not developer, but it rather depends on how the hooking of winsock is done if via iexplore.exe then probably not.

But the start point would be having goldentequil try it and or my other suggestions. Unfortunately he hasn't been back to the topic to answer the questions (behaviorshield.txt content) or try any of the suggestions I made.

So we really are going to have to wait for his return/input.
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: JeffreyCole on April 22, 2011, 10:19:22 PM
Is there no one else who can just install Ad Muncher and test this?

http://www.admuncher.com/download.shtml

It's a lot easier to install Ad Muncher than to install a new Anti-Virus. ;p

It's just a 523KB download.
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: essexboy on April 22, 2011, 10:25:41 PM
Downloaded on win 7 64 bit - what would you like me to try ?
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: essexboy on April 22, 2011, 10:49:27 PM
Running both 32 and 64 bit IE9

Results for 64 bit
Quote
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/e/e0/Google%E2%80%99s_First_Production_Server.jpg/130px-Google%E2%80%99s_First_Production_Server.jpg]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/9/94/Symbol_support_vote.svg/14px-Symbol_support_vote.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/f/fa/Wikibooks-logo.svg/25px-Wikibooks-logo.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/4/4c/Wikisource-logo.svg/24px-Wikisource-logo.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/f/fa/Wikiquote-logo.svg/21px-Wikiquote-logo.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/2/24/Wikinews-logo.svg/25px-Wikinews-logo.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/1/1b/Wikiversity-logo-en.svg/25px-Wikiversity-logo-en.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/f/f8/Wiktionary-logo-en.svg/23px-Wiktionary-logo-en.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/b/b6/Factory_1b.svg/32px-Factory_1b.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/d/da/SF_From_Marin_Highlands3.jpg/32px-SF_From_Marin_Highlands3.jpg]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/6/69/Schmidt-Brin-Page-20080520.jpg/220px-Schmidt-Brin-Page-20080520.jpg]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/en/thumb/9/96/Google_web_search.png/220px-Google_web_search.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/e/ef/Googleplexsouthsidesecondangle.jpg/220px-Googleplexsouthsidesecondangle.jpg]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/a/a2/Noogler.png/130px-Noogler.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/en/thumb/b/b7/Google1998.png/220px-Google1998.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/b/b0/Increase2.svg/11px-Increase2.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/f/fc/Padlock-silver.svg/20px-Padlock-silver.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/3/30/Googlelogo.png/200px-Googlelogo.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://en.wikipedia.org/wiki/Google]
Default filter match - Block retrieval of URL: .google-analytics.*.js [http://www.google-analytics.com/ga.js]
Default filter match - Block retrieval of URL: /stats.wordpress. [http://stats.wordpress.com/g.gif?host=www.geekstogo.com&rand=0.21602336613775352&blog=1092593&v=ext&post=0&ref=http://www.google.co.uk/search?hl=en&q=geekstogo&meta=&rlz=]
Default filter match - Block retrieval of URL: /stats.wordpress. [http://stats.wordpress.com/e-201116.js]
Default filter match - Block retrieval of URL: /show_ads.js [http://pagead2.googlesyndication.com/pagead/show_ads.js]
Resutlts 32 bit
Quote
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/f/fd/Portal-puzzle.svg/16px-Portal-puzzle.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/4/48/Folder_Hexagonal_Icon.svg/16px-Folder_Hexagonal_Icon.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/8/89/Symbol_book_class2.svg/16px-Symbol_book_class2.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://en.wikipedia.org/wiki/Google_Chrome]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/4/4a/Commons-logo.svg/30px-Commons-logo.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/2/24/Wikinews-logo.svg/40px-Wikinews-logo.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/2/22/Browser_usage_on_wikimedia_pie_chart.png/300px-Browser_usage_on_wikimedia_pie_chart.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/f/fd/Portal-puzzle.svg/32px-Portal-puzzle.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/7/71/Usage_share_of_web_browsers_(Source_Stat_Counter).svg/300px-Usage_share_of_web_browsers_(Source_Stat_Counter).svg.png]
Default filter match - Don't match against keyword: .google.com/group/*? [http://en.wikipedia.org/wiki/Google_Chrome]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/en/thumb/6/69/Google_Chrome_-_Wikipedia,_the_free_encyclopedia.png/220px-Google_Chrome_-_Wikipedia,_the_free_encyclopedia.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/en/thumb/d/d0/Chrome_Logo.svg/100px-Chrome_Logo.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/a/ab/Acid3-Chrome4Dev.PNG/220px-Acid3-Chrome4Dev.PNG]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/en/thumb/1/1d/Screenshot-Wikipedia,_the_free_encyclopedia_-_Google_Chrome.png/300px-Screenshot-Wikipedia,_the_free_encyclopedia_-_Google_Chrome.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/d/db/Usage_share_of_alternative_web_browsers_(Source_Stat_Counter).svg/320px-Usage_share_of_alternative_web_browsers_(Source_Stat_Counter).svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/6/67/File-Chromium-Linux-Alpha.png/200px-File-Chromium-Linux-Alpha.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/en/0/0a/Google_Chrome_2011_Wrodmark_Logo.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://en.wikipedia.org/wiki/Google]
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: essexboy on April 22, 2011, 10:52:50 PM
Oh and this is straight out of the box - no fiddling with either Avast or admuncher settings  ;D
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: DavidR on April 22, 2011, 10:57:52 PM
I take it that means that it is working for you as I don't think it was even running for the OP ?
Unfortunately detailed information wasn't provided by the OP so I really don't know exactly waht his problem is.

I was hoping you could try to get it to work with the behavior shield, currently it appears to be blocking it for the OP. This is what I had asked for and suggested of the OP but no answers or feedback on any of the suggestions were forthcoming.

~~~~
What I asked of the OP and Suggestions:
1. See if there is anything in the log - Perhaps it is another file, check the C:\ProgramData\AVAST Software\Avast\report\BehaviorShield.txt

2. The following had already been added to the trusted zone:
- AdMunch.exe
- Admunch64.exe
But no joy, disabling the behavior shield was the only way to get it to work.

3. If those two are trusted and there are no other ad muncher files listed in the behaviorshield.txt file, next step, otherwise add any other ad muncher files in the behaviorshield.txt to trusted processes.

If that doesn't work:
4. Add iexplore.exe to the trusted processes.

If that doesn't work:
5. Uncheck this option 'Monitor the system for unauthorised modifications' in the Behavior Shield settings and see if that resolves the problem.

If that doesn't work:
6. We are down to disabling/uninstalling the behavior shield.

####
So we really need some detailed feedback from the OP on exactly what was going on.
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: essexboy on April 22, 2011, 11:01:04 PM
Logs are empty - I made no exceptions

And admuncher appears to work as advertised
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: DavidR on April 22, 2011, 11:09:56 PM
Weird, now it is down to the OP to get back and see if there is some other conflicting security application on the system which might tie up the behavior shield whilst it does any checking on ad muncher. But as you say nothing in the behaviorshield.txt log.
Title: Re: Advice on Behavior Shield Expert Setting.
Post by: essexboy on April 22, 2011, 11:40:15 PM
I would imagine it is something in the system configuration as mine is fairly light with security Avast only