Avast Hardened Mode Info Needed

[REDACTED]

I would like to use Avast Hardened Mode

I tested both Aggressive & Moderate Mode with few programs.
Both Mode blocked exactly the same programs & got me confused?

Which Mode is better & Why?

[Pondus]

have you looked at FAQ section and user guides ?

[DavidR]

Checking the avast context help, you have some basic information - this should be able to answer your question - on Aggressive checks all files against the avast cloud to see if they are whitelisted.

On Moderate those with a low/poor reputation will be blocked.

The problem you are experiencing is that low reputation files is just a short step away from not being on the whitelist either. So it is entirely possible to get the same results on a small sub-set of tested files.

[REDACTED]

I have Aggressive Mode enabled & password protection enabled.
To exclude on hardened mode alert requires password.
Is there an option to not require password?

[DavidR]

I have Aggressive Mode enabled & password protection enabled.
To exclude on hardened mode alert requires password.
Is there an option to not require password?

The password has nothing to do with Hardened Mode - if you set a password to protect your avast and settings - then trying to change the Hardened Mode settings would require you to enter the password that 'you' set to protect avast.

You would have to first enter the password that you set, to be able to change the settings - e.g. uncheck the password required option (which by default isn't set).

[REDACTED]

So you mean I shouldn't set password protection for Avast. Setting password protection requires password to exclude on hardened mode alert.

I think would be good to have an option not to require password to exclude on hardened mode alert even if password protection for Avast is set.

When I click on exclusion on hardened mode alert & it requires password...on the password window it mention "Protection Control". "Protection Control" is an option under password protection. I disabled/unchecked "Protection Control" under password protection but hardened mode exclusions still ask for password.
Could this be "Protection Control" password protection bug?

[DavidR]

No I'm not saying you shouldn't set a password, but you have got to remember it and realise what it is going to block.

You have asked it to protect the avast program and settings and that is exactly what it is doing.

Once you start making exceptions in what and what it doesn't protect you lessen its protection and effectively allow others to change it also.

[REDACTED]

Ok...got it.
Thanxx for the info.

[REDACTED]

Does hardened mode affects windows updates i.e alerts for windows updates?
I am running Aggressive Hardened Mode & read that aggressive uses Avast cloud whitelist. So I think windows updates is in Avast whitelist & hardened mode doesn't affect windows updates, m I right?
Or should I exclude windows updates in hardened mode?

Win 10 64

[DavidR]

It could do, as windows commonly doesn't digitally sign the update files, not to mention when these updates come out the files won't have been seen before.

I have no idea how you might be able to exclude windows updates (WU) as there wouldn't be a common file name as such you would have to find where WU places these temp files and do an exclusion on the folder. But that can leave a hole in your security.

[REDACTED]

Ok...thanxx for the support & time

[DavidR]

You're welcome.

Whilst I haven't seen any directly related to the windows update being detected whilst in the process of the update. But I have seen a couple of instances of temporary files created by WU and remaining after the update being found during an on-demand scan. But they were only being reported as avast couldn't scan them as they were protected in some way.

So not directly related to Hardened Mode.

[REDACTED]

Could windows updates service be added to hardened mode exclusions to avoid windows updates FPs/detections/alerts?

[DavidR]

No because, exclusions, exclude a file or files from scans not the activity that they generate. e.g. the creation and running of other files.

[REDACTED]

DavidR,

Thanxx for all the help & time.

I will keep Aggressive Hardened Mode enabled & if I will get alerts for windows updates then will disable it.

Regards
Yesnoo