Author Topic: NEW: Avast Beta 17.1.2283  (Read 46087 times)

0 Members and 1 Guest are viewing this topic.

Offline Hun_Bolt

  • Avast team
  • Newbie
  • *
  • Posts: 13
Re: NEW: Avast Beta 17.1.2283
« Reply #60 on: January 22, 2017, 08:08:27 PM »

The Behavior Shield blocked too many normal apps. NVIDIA Share.exe, runonce.exe, OneDrive.exe, iCloudDrive.exe, etc.
The "minimal protection" it is very important.


Any chance you could post at least the screenshots of the detections? It would help me a lot to analyze the problem :)



Yup, something is wrong with Behavior Shield. It's just not detecting things AVG is detecting with Software Analyzer. Exact same things. My sample of Vipasana ransomware for example. AVG blocked it no problems, avast! BETA with seemingly identical component for behavior analysis and blocking, got through and encrypted files.
Could you please share the hash of the sample you used for testing?

Are you an Avast employee?


Yes.
I work for Avast. I might be able to help you. Please don't spam me.

Offline A. User

  • Sr. Member
  • ****
  • Posts: 388
Re: NEW: Avast Beta 17.1.2283
« Reply #61 on: January 22, 2017, 08:10:27 PM »

Offline bruce_b

  • Sr. Member
  • ****
  • Posts: 333
Re: NEW: Avast Beta 17.1.2283
« Reply #62 on: January 22, 2017, 08:11:08 PM »
Please let us be sure the Final Release is really ready with no bugs. This is why a few months ago, I suggested and still reiterate that Avast should not be making all new releases every month. Too much can go wrong with just one or two lines of wrong code. Better to say, just release 2 updates a year. One mid year, one end of year. The actual engine in the program seems to be doing quite a good job, so very little tweaking needed there.
Dell Dimension 8200 P4 1.8Ghz Windows XP PRO SP3
Avast Free Antivirus 18.8.2356
Toshiba Satellite C855-S5347 Celeron B830 1.8Ghz
Windows 10 Home 64 Bit Version 1909 Build 18363.900
Avast Free Antivirus 20.4.2410 Build 20.4.5312.578

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9406
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re: NEW: Avast Beta 17.1.2283
« Reply #63 on: January 22, 2017, 08:39:56 PM »
Yup, something is wrong with Behavior Shield. It's just not detecting things AVG is detecting with Software Analyzer. Exact same things. My sample of Vipasana ransomware for example. AVG blocked it no problems, avast! BETA with seemingly identical component for behavior analysis and blocking, got through and encrypted files.

Could you please share the hash of the sample you used for testing?

SHA256: E49778D20A2F9B1F8B00DDD24B6BCEE81AF381ED02CFE0A3C9AB3111CDA5F573
Visit my webpage Angry Sheep Blog

Offline Hun_Bolt

  • Avast team
  • Newbie
  • *
  • Posts: 13
Re: NEW: Avast Beta 17.1.2283
« Reply #64 on: January 22, 2017, 08:43:28 PM »
Yup, something is wrong with Behavior Shield. It's just not detecting things AVG is detecting with Software Analyzer. Exact same things. My sample of Vipasana ransomware for example. AVG blocked it no problems, avast! BETA with seemingly identical component for behavior analysis and blocking, got through and encrypted files.

Could you please share the hash of the sample you used for testing?

SHA256: E49778D20A2F9B1F8B00DDD24B6BCEE81AF381ED02CFE0A3C9AB3111CDA5F573

Thanks. Quick question, you are testing without network connection right? Or did you change Avast configuration besides turning off File Shield?
I work for Avast. I might be able to help you. Please don't spam me.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: NEW: Avast Beta 17.1.2283
« Reply #65 on: January 22, 2017, 08:46:25 PM »
Quote from:  link=topic=195584.msg1360993#msg1360993 date=1485112227
Yes.
Waiting for Vlk to confirm.  :-\

I believe he is, just that his forum profile hasn't been updated yet. But I have sought confirmation.

What has been asked for, an image of the alert and hash for the file doesn't present any security issue, regardless of who was asking for it.
« Last Edit: December 14, 2021, 11:15:57 AM by Eva137 »
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

REDACTED

  • Guest
Re: NEW: Avast Beta 17.1.2283
« Reply #66 on: January 22, 2017, 08:51:35 PM »
Does Software analyser in AVG and Avast (in beta) have same ability for protecting from unknown/new malware?

Offline Hun_Bolt

  • Avast team
  • Newbie
  • *
  • Posts: 13
Re: NEW: Avast Beta 17.1.2283
« Reply #67 on: January 22, 2017, 08:57:19 PM »
Does Software analyser in AVG and Avast (in beta) have same ability for protecting from unknown/new malware?

Absolutely.
I work for Avast. I might be able to help you. Please don't spam me.

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: NEW: Avast Beta 17.1.2283
« Reply #68 on: January 22, 2017, 10:17:50 PM »
Hun_Bolt is indeed an Avast employee, in fact one of the key people behind IDP / Software Analyzer / Behavior Shield. Please treat him well!!  ;)

The forum admin will update his forum account soon.

Thanks
Vlk
If at first you don't succeed, then skydiving's not for you.

Offline A. User

  • Sr. Member
  • ****
  • Posts: 388
Re: NEW: Avast Beta 17.1.2283
« Reply #69 on: January 22, 2017, 10:23:33 PM »
can someone tell me where is the hips option???
It should be in File Shield settings

its not.... :( :( :(
Because there is a behavior blocker. It replaces the HIPS.

Offline A. User

  • Sr. Member
  • ****
  • Posts: 388
Re: NEW: Avast Beta 17.1.2283
« Reply #70 on: January 22, 2017, 10:29:58 PM »
Quote from:  link=topic=195584.msg1360993#msg1360993 date=1485112227
Yes.
Waiting for Vlk to confirm.  :-\
What has been asked for, an image of the alert and hash for the file doesn't present any security issue, regardless of who was asking for it.
You took my words from my mouth. Too good questions for a person with... 1 post and no Avast badge.  ;D ;D Welcome aboard Hun_Bolt and sorry for the question.
« Last Edit: December 13, 2021, 03:35:41 PM by Eva137 »

Offline av20

  • Jr. Member
  • **
  • Posts: 23
Re: NEW: Avast Beta 17.1.2283
« Reply #71 on: January 23, 2017, 02:30:45 AM »
1.  The menu in help still does not work for me.  If I click "?" from the main GUI, a new window opens, then if I click the bars at the upper left corner, the mouse-up event causes a menu to drop down -- But this menu goes back up before I can click on a help menu item.

2. After smart scan, then resolve all, there are some performance items listed.  I don't have "Avast Cleanup Premium" so there is an "Activate" and a "Skip" button at the bottom of the window.  "Skip" does nothing.  Also, at the top of the window, "Back" is a choice, and it also does nothing.
Avast Internet Security
Win XP SP3
FAT32 disks - RAID1
Intel Core 2 Duo
Gigabyte EP45-UD3P

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9406
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re: NEW: Avast Beta 17.1.2283
« Reply #72 on: January 23, 2017, 09:10:11 AM »
Yup, something is wrong with Behavior Shield. It's just not detecting things AVG is detecting with Software Analyzer. Exact same things. My sample of Vipasana ransomware for example. AVG blocked it no problems, avast! BETA with seemingly identical component for behavior analysis and blocking, got through and encrypted files.

Could you please share the hash of the sample you used for testing?

SHA256: E49778D20A2F9B1F8B00DDD24B6BCEE81AF381ED02CFE0A3C9AB3111CDA5F573

Thanks. Quick question, you are testing without network connection right? Or did you change Avast configuration besides turning off File Shield?

Internet connection was active, I was testing with ONLY Behavior Shield enabled. I've also tried with all the other shields removed and also all the shields installed but disabled, to see if that made any difference. From what I can tell, it didn't.

The thing is, avast!'s Behavior Shield didn't get triggered on same things new AVG got triggered by Software Analyzer despite both being the same thing now. Which made me believe there are some Behavior Shield integration issues within avast!.
Visit my webpage Angry Sheep Blog

REDACTED

  • Guest
Re: NEW: Avast Beta 17.1.2283
« Reply #73 on: January 23, 2017, 12:38:22 PM »
Apart from behaviour shield, another problem is LANGUAGE. Yes, we're Chinese, but we often meet this kind of point where Chinese cannot regularly appear. Well, the other is Sandbox cannot also run smoothly. Last, Avast beta has come out and AVG with Avast's components is closer to final version. Well, when will the final Avast build put out? even closer to a more complete one like AVG?

Offline Hun_Bolt

  • Avast team
  • Newbie
  • *
  • Posts: 13
Re: NEW: Avast Beta 17.1.2283
« Reply #74 on: January 23, 2017, 02:42:57 PM »
Yup, something is wrong with Behavior Shield. It's just not detecting things AVG is detecting with Software Analyzer. Exact same things. My sample of Vipasana ransomware for example. AVG blocked it no problems, avast! BETA with seemingly identical component for behavior analysis and blocking, got through and encrypted files.

Could you please share the hash of the sample you used for testing?

SHA256: E49778D20A2F9B1F8B00DDD24B6BCEE81AF381ED02CFE0A3C9AB3111CDA5F573

Thanks. Quick question, you are testing without network connection right? Or did you change Avast configuration besides turning off File Shield?

Internet connection was active, I was testing with ONLY Behavior Shield enabled. I've also tried with all the other shields removed and also all the shields installed but disabled, to see if that made any difference. From what I can tell, it didn't.

The thing is, avast!'s Behavior Shield didn't get triggered on same things new AVG got triggered by Software Analyzer despite both being the same thing now. Which made me believe there are some Behavior Shield integration issues within avast!.

I tested the sample with Avast Beta and with File Shield turned off it got detected by Behavior Shield.
I work for Avast. I might be able to help you. Please don't spam me.