Author Topic: [Wish] Analyze files before accepting them to Hardened Mode exclusions  (Read 1675 times)

0 Members and 1 Guest are viewing this topic.

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9406
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
I've talked about this before ages ago and nothing happened about this. So, I'm posting again. Big update is incoming in 2017 and it would be a shame leaving such important things out of it again.

If you use Hardened Mode, either Moderate or Aggressive, whenever you run a file that is suspicious or not whitelisted, you get a Hardened Mode popup. And here is where things get less perfect...

Undesired behavior
If you click "Add exclusion", you essentially bypass Hardened Mode, DeepScreen and CyberCapture before file gets evaluated by any of them because anything treated by Hardened mode doesn't even go through those 3 security checkpoints, making it actually more dangerous than just leaving avast! in default configuration, allowing it to scan the file with all the measures it has.

Desired behavior
When you click "Add exclusion" on Hardened Mode popup, avast! should first check the file with CyberCapture or at least DeepScreen before adding it to exclusions, eliminating potential bad user decision to exclude it anyway.

I mean, this way you ensure double safety, because in the end, decision is entirely down to user as things stand at the moment and user can make mistake adding it to exclusions list. DeepScreening it or CyberCapture check it before actually adding file to Hardened Mode exclusion would at least partially eliminate that possibility of infection.
Visit my webpage Angry Sheep Blog

Offline Rednose

  • Pirate Party Member
  • Avast Überevangelist
  • Massive Poster
  • *****
  • Posts: 3739
  • Bits of Freedom : https://www.bof.nl
    • Nederlandstalig Avast! forum
Re: [Wish] Analyze files before accepting them to Hardened Mode exclusions
« Reply #1 on: November 30, 2016, 01:09:41 AM »
Yes I agree :)

In general : Avast realtime system protection modules should be working together in clear decision ( if then else )  structures, for both online and offline scenario's.

Greetz, Red.
OS: Win 10 / iOS 17 / Debian 12 / Tails 5
Real Time: Avast Premium Security
On Demand: Malwarebytes
VPN: NordVPN ( NordLynx ) with Threat Protection ( Lite )