CyberCapture

[Be Secure]

Can anyone from Avast! move this thread to sticky,but not locked it.It will be helpful for many.

[bob3160]

Can anyone from Avast! move this thread to sticky,but not locked it.It will be helpful for many.

Certainly not needed. As long as this topic is active it will always be easy to find.
When it's no longer active, it will disappear.

[DavidR]

Can anyone from Avast! move this thread to sticky,but not locked it.It will be helpful for many.

Certainly not needed. As long as this topic is active it will always be easy to find.
When it's no longer active, it will disappear.

Agreed, the forum has to have tight control over stickies, or we see before long half a page of stickies before we get to the current listing. Anyone having found it (and it shouldn't be that hard) can bookmark it, click notify or contribute to the topic and you will get an email on new posts.

[Be Secure]

Again avast! CC not run on unknown threats which is downloaded from web and open it locally.This time not even start CC.Here is the V.T link:https://www.virustotal.com/en/file/d36854312a2d17e032ed7ac8a330e5622cfb84879ce4735022014e939e8c7d2f/analysis/1467368796/.This is a new sample(Few hour) sample.Very disappointed by CC. I am send it to viruslab via virus chest.

[RejZoR]

This is what happens when you start limiting entry points. If avast! inspected EVERY unknown file regardless of how it arrives to the system, there would be no such issues. But instead, another half finished tech that again doesn't work and most likely never will. Why I'm not surprised... 

[Be Secure]

This is what happens when you start limiting entry points. If avast! inspected EVERY unknown file regardless of how it arrives to the system, there would be no such issues. But instead, another half finished tech that again doesn't work and most likely never will. Why I'm not surprised... 

+1

[Lisandro]

I understand your frustration RejZor (regarding to proactive detection of previous Avast versions and also the real-world tests).
But, this time, as you can see for Vlk's words (also the blog brings info regarding to this), everybody is doing their best to achieve the proactive (a.k.a. zero-second) protection.
Although, the zero-second protection won't be achieved in zero seconds. We're on the way 

[Rednose]

@Vlk I have one more idea. Currently, when CyberCapture locks the file into custody, you can opt to run it without waiting for verdict. You could add "Run in Sandbox" as an option for Pro, Internet Security and Premier editions since they already employ sandbox tech. This way users can run the suspicious stuff risk free in an isolated environment (if the app will work in it of course since not all do) even before they get definitive answer from CyberCapture servers. This way you add additional layer of security when users decide to run it anyway.

Thanks, that sounds like something that could be implemented very easily.

Vlk

I support this idea : It should be implemented as soon as possible

Greetz, Red.

[RejZoR]

@Vlk
How does CyberCapture track files that are from web? For example, does it only process files that are due for execution directly via download or will it also process EXE that arrived from web via password protected archive and user gets a password separately? I've seen things like this before. Meaning the EXE will then actually arrive to existence locally, because nowhere along the way to PC was avast! able to have even a look at it, let alone actually scan it. Or can it actually physically track the sequence of files what creates what and what needs to be scanned?

[Be Secure]

@Vlk
Is it possible to run CyberCapture and Hardened mode all together in same time? Earlier Deepscreen not running when Hardened mode was enabled.Is it possible to run both in same time now?

[Be Secure]

@Vlk
Again Avast! CC/DeepScreen missed a new file(VPN2.exe) from web. VT-https://virustotal.com/en/file/ca0ac979abdb6d0a863960ce5b1d021ab696c7ecd9022b38366183ff4e0e2254/analysis/1467734591/
BTW i am send this to viruslab via viruschest.

[RejZoR]

Every time you post an example I'm losing confidence in yet another tech from avast! more and more...

[Alikhan]

Every time you post an example I'm losing confidence in yet another tech from avast! more and more...

+1.

No statistics too.

[Be Secure]

Every time you post an example I'm losing confidence in yet another tech from avast! more and more...

Have patience.Wait.I just notify Vlk about the situation.

[Lisandro]

Have patience.Wait.I just notify Vlk about the situation.

Thanks. I've did the same.