Author Topic: Haven't Seen This Before  (Read 3020 times)

0 Members and 1 Guest are viewing this topic.

Offline midnight

  • Massive Poster
  • ****
  • Posts: 2473
Haven't Seen This Before
« on: July 27, 2015, 09:29:16 PM »
What is it and should I allow or deny it?
« Last Edit: July 27, 2015, 09:48:20 PM by -midnight »
.

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Re: Haven't Seen This Before
« Reply #1 on: July 27, 2015, 09:33:11 PM »
Its a alert from the new HIPS Module :)

Can you give us the full path of the file please ?
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89061
  • No support PMs thanks
Re: Haven't Seen This Before
« Reply #2 on: July 27, 2015, 09:35:15 PM »
In all honesty if you can't answer that you shouldn't have HIPS enabled, because it always asks you to decide on an action (you have to have a reasonable knowledge of your system and what is going on in it). That is why the default settings are not enabled

If you want to do use HIPS I would suggest not enabling the 'Monitor the system for unauthorised modifications.'
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Re: Haven't Seen This Before
« Reply #3 on: July 27, 2015, 09:37:48 PM »
@DavidR: Sometimes its automated its not always asking :)
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33902
  • malware fighter
Re: Haven't Seen This Before
« Reply #4 on: July 27, 2015, 09:48:54 PM »
I will try to explain this to you, dear -midnight, so you can also enjoy HIPS and understand what it does and better even what it does not do for the Avast user.  ;D  All technical issues can also be explained in a way to inexperienced netizens, so they might grow in their experience and may enjoy their gained insights in a proper way. So shall we give this a try, as you already came a long way after you joined the official avast user forums, and I bear witness of this. 

It is a warning that Avast has not seen this software run before, you can allow it when you know that it is above board. What were you doing exactly just before or during that  this HIPS alert appeared? You could say I was updating a program I checked before but Avast has never seen it.

Avast HIPs does this for first time when a particular new  program or program update is run or is to run. When Avast HIPS has established it as OK, it will be further left to run without a second alert.

The above extra security procedure  is an additional security measure, like when you get a PUP alerrt when you have set avast to alert for PUPs (not set as by default).
I have the PUP alert set for ON, because I do not like potential unwanted programs (adware for instance).
I would keep HIPs and come to get familiar with the workings thereof, which is not too complicated when you are given the A to Z to work it right. Another lesson learned, another insight gained, and so we learn everyday, isn't it.

polonus
« Last Edit: July 27, 2015, 09:52:12 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline midnight

  • Massive Poster
  • ****
  • Posts: 2473
Re: Haven't Seen This Before
« Reply #5 on: July 27, 2015, 09:53:16 PM »
In all honesty if you can't answer that you shouldn't have HIPS enabled, because it always asks you to decide on an action (you have to have a reasonable knowledge of your system and what is going on in it). That is why the default settings are not enabled

If you want to do use HIPS I would suggest not enabling the 'Monitor the system for unauthorised modifications.'

I don't know anything about Hips and I didn't enable it.
.

Offline midnight

  • Massive Poster
  • ****
  • Posts: 2473
Re: Haven't Seen This Before
« Reply #6 on: July 27, 2015, 09:57:39 PM »
polonus,

I was taking a nap, got up, came into my office and the HIPs Warning was on my screen.  I don't know if I should deny or allow.
.

Offline schmidthouse

  • VIRUS FREE A Long Time
  • Avast Evangelist
  • Starting Graphoman
  • ***
  • Posts: 7170
  • When you think you know, Think Again
Re: Haven't Seen This Before
« Reply #7 on: July 27, 2015, 10:01:20 PM »
In all honesty if you can't answer that you shouldn't have HIPS enabled, because it always asks you to decide on an action (you have to have a reasonable knowledge of your system and what is going on in it). That is why the default settings are not enabled

If you want to do use HIPS I would suggest not enabling the 'Monitor the system for unauthorised modifications.'

I don't know anything about Hips and I didn't enable it.


So disable it

Offline midnight

  • Massive Poster
  • ****
  • Posts: 2473
Re: Haven't Seen This Before
« Reply #8 on: July 27, 2015, 10:08:57 PM »
Where can I find it?
.

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Re: Haven't Seen This Before
« Reply #9 on: July 27, 2015, 10:10:10 PM »
Settings>Active protection>File-system Shield>Sensitivity at the bottom :)
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

Offline midnight

  • Massive Poster
  • ****
  • Posts: 2473
Re: Haven't Seen This Before
« Reply #10 on: July 27, 2015, 10:14:43 PM »
Thank you.  :)
.

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89061
  • No support PMs thanks
Re: Haven't Seen This Before
« Reply #11 on: July 27, 2015, 11:32:51 PM »
@DavidR: Sometimes its automated its not always asking :)

Even more of a reason to leave it set on the defaults (off). But in this instance which I was responding to there was an interactive popup.

I have a firewall and winpatrol plus which have HIPS or HIPS like behaviour, so I'm more than covered.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security