Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: tyraarane on March 12, 2012, 04:55:08 AM

Title: Avast Free v7.0.1426 ignores my exception settings?
Post by: tyraarane on March 12, 2012, 04:55:08 AM
Here's a fun one...I have some special exceptions set in the Behavior Shield, because Avast was interfering with Team Fortress 2 a bit--custom sounds wouldn't play unless I specifically told the Behavior Shield to ignore a few .dll files. Usually this works. However, on a few occasions it doesn't and the sounds will quit playing until I reset the exceptions.

When this happens, if I open the Behavior Shield, it will show the last event analyzed as one of the very same .dll files I specifically told it to ignore. Ex., C:\Games\Steam\steamapps\[my Steam username]\team fortress 2\bin\vaudio_speex.dll. Go into the "trusted process" settings and yup, that exact same file is still listed and specified as not to be monitored. Yet Avast is monitoring it anyway. Why?

This is a clean reinstall on Windows 7 Professional x64--I had to do a scrub and reinstall to fix an issue I had where Avast was hanging my system on shut down after upgrading itself to v7, preventing me from shutting my PC down cleanly.
Title: Re: Avast Free v7.0.1426 ignores my exception settings?
Post by: NON on March 12, 2012, 07:35:05 AM
I'm not quite sure, but did you try adding game's exe file to exception lists, not dll?
Title: Re: Avast Free v7.0.1426 ignores my exception settings?
Post by: DavidR on March 12, 2012, 12:48:48 PM
Check the C:\ProgramData\AVAST Software\Avast\report\BehaviorShield.txt and see if there are any game related executables mentioned.

I would also suggest setting the Behavior Shield on Ask, so you are aware of any intervention.
Title: Re: Avast Free v7.0.1426 ignores my exception settings?
Post by: tyraarane on March 12, 2012, 03:39:50 PM
I'm not quite sure, but did you try adding game's exe file to exception lists, not dll?

The game's .exe (hl2.exe) is also on the exception list. I've yet to notice the Behavior Shield scanning that...it's just the audio-related .dlls it insists on scanning and (apparently) interfering with.

I also have the Steam.exe and GameOverlayUI.exe listed as trusted processes in the Behavior Shield...and the entire Steam folder (C:\Games\Steam\*) is also specifically excluded in the file system shield settings. Basically, Avast! really should be leaving everything Steam-related on my system alone. But it's not.

Check the C:\ProgramData\AVAST Software\Avast\report\BehaviorShield.txt and see if there are any game related executables mentioned.

I would also suggest setting the Behavior Shield on Ask, so you are aware of any intervention.

I do have the Behavior Shield set to Ask, and nothing's come up yet, which is odd. Also, there's nothing in the BehaviorShield.txt...just repeated scans of MSI Afterburner.exe, which I have loading at system start for a custom fan speed profile.

I'm not sure it actually is blocking anything. However, I can trace the problem back to the Behavior Shield, thanks to some troubleshooting... If I connect to a server that uses those custom sounds, it causes the Behavior Shield to scan those .dlls, and somehow that leads to the sounds not playing in-game. If I quit the game, temporarily disable the Behavior Shield, re-launch the game and reconnect to the server, the sounds play correctly--even after the Behavior Shield is re-enabled. (The problem seems to occur with the initial load/connection.)

Likewise, if I add the .dlls to the exception list, most of the time everything works like it should. But every so often Behavior Shield takes it on itself to go ahead and scan those .dlls anyway, which leads us back to square one. In order to get the sounds working again, I either having to disable the Behavior Shield or go through and re-set all my exceptions.

Then it works again until, of course, Avast! decides it doesn't want to play along anymore. My main concern here is that my exclusions/trusted processes settings are being explicitly ignored, really.