Author Topic: The behavior shield and the ransomware shield need improvement.  (Read 11307 times)

0 Members and 1 Guest are viewing this topic.


Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48523
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: The behavior shield and the ransomware shield need improvement.
« Reply #1 on: July 21, 2017, 10:13:26 PM »
https://www.youtube.com/watch?v=8NuJc_-qqcc
Obviously the one making the video doesn't realize that the Avast protection is based on multiple shields.
Some of them interact and are a part of the other. Simply turning shields off at random, will get you some unwanted and unexpected results.
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

REDACTED

  • Guest
Re: The behavior shield and the ransomware shield need improvement.
« Reply #2 on: July 21, 2017, 11:21:11 PM »
https://www.youtube.com/watch?v=8NuJc_-qqcc
Obviously the one making the video doesn't realize that the Avast protection is based on multiple shields.
Some of them interact and are a part of the other. Simply turning shields off at random, will get you some unwanted and unexpected results.

Nothing "interacts". That's why these are INDIVIDUAL shields which can be enabled or disabled INDIVIDUALLY.

The "interaction" thing is the usual excuse to justify failure...
« Last Edit: July 22, 2017, 04:27:18 AM by John712 »

Offline cristianojgm

  • Jr. Member
  • **
  • Posts: 78
Re: The behavior shield and the ransomware shield need improvement.
« Reply #3 on: July 21, 2017, 11:23:59 PM »
https://www.youtube.com/watch?v=8NuJc_-qqcc
Obviously the one making the video doesn't realize that the Avast protection is based on multiple shields.
Some of them interact and are a part of the other. Simply turning shields off at random, will get you some unwanted and unexpected results.

Nothing "interacts". That's why these are INDIVIDUAOL shields which can be enabled or disabled INDIVIDUALLY.

The "interaction" think is the usual excuse to justify failure...

I agree with you.

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48523
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: The behavior shield and the ransomware shield need improvement.
« Reply #4 on: July 21, 2017, 11:28:01 PM »
https://www.youtube.com/watch?v=8NuJc_-qqcc
Obviously the one making the video doesn't realize that the Avast protection is based on multiple shields.
Some of them interact and are a part of the other. Simply turning shields off at random, will get you some unwanted and unexpected results.

Nothing "interacts". That's why these are INDIVIDUAOL shields which can be enabled or disabled INDIVIDUALLY.

The "interaction" think is the usual excuse to justify failure...

I agree with you.
You have that right even if it's not correct. :)
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

REDACTED

  • Guest
Re: The behavior shield and the ransomware shield need improvement.
« Reply #5 on: July 22, 2017, 12:41:30 PM »
https://www.youtube.com/watch?v=8NuJc_-qqcc
Obviously the one making the video doesn't realize that the Avast protection is based on multiple shields.
Some of them interact and are a part of the other. Simply turning shields off at random, will get you some unwanted and unexpected results.

Nothing "interacts". That's why these are INDIVIDUAOL shields which can be enabled or disabled INDIVIDUALLY.

The "interaction" think is the usual excuse to justify failure...

I agree with you.
You have that right even if it's not correct. :)


Why "exactly" it's not correct?
Which shields " interact and are a part of the other"???
If they are part of each other, how come you can disable them , one by one, ore even decide to uninstall them????

I understand that you are in love with Avast!, but this shouldn't affect common sense.

REDACTED

  • Guest
Re: The behavior shield and the ransomware shield need improvement.
« Reply #6 on: July 22, 2017, 02:21:38 PM »
https://www.youtube.com/watch?v=8NuJc_-qqcc
Obviously the one making the video doesn't realize that the Avast protection is based on multiple shields.
Some of them interact and are a part of the other. Simply turning shields off at random, will get you some unwanted and unexpected results.

Nothing "interacts". That's why these are INDIVIDUAOL shields which can be enabled or disabled INDIVIDUALLY.

The "interaction" think is the usual excuse to justify failure...

I agree with you.
You have that right even if it's not correct. :)


Why "exactly" it's not correct?
Which shields " interact and are a part of the other"???
If they are part of each other, how come you can disable them , one by one, ore even decide to uninstall them????

I understand that you are in love with Avast!, but this shouldn't affect common sense.

That is the point.  Why do you have switches to turn shields off it they depend on each other?
When is Avast going to stick to doing a good job of its Anti-virus, Keyloggers, Malware and Ransomware and leave out all the other gimmicks that do not work.  Get the things that should work working and forget about programmes that are out of date that Avast can't update most of the time anyway.  Get the job you are supposed to be doing done and do a good job at it, be the best and drop all the gimmicks.
 

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48523
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: The behavior shield and the ransomware shield need improvement.
« Reply #7 on: July 22, 2017, 02:30:52 PM »
If you don't like the added features simply use a custom install.
Which you should actually do any time you install any program.
Avast happens to do an excellent job. One of the reasons it's my AV of choice since 2003.
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline Be Secure

  • Long Time Avast User(10years.....) Security Enthusiast.
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1908
Re: The behavior shield and the ransomware shield need improvement.
« Reply #8 on: July 22, 2017, 02:58:32 PM »
From Topic: The behavior shield and the ransomware shield need improvement.
Yes it(BS) need improvement(basically on fast encryption of Ransomwares).No doubt about that and Avast needs to be more active on development of CyberCapture because the option on the settings:Allow me to decide is a flop. :(
Hope avast team is read this post.
« Last Edit: July 22, 2017, 03:26:32 PM by Be Secure »
PC- Windows10 EDU 64Bit,avast! free 21.1.2449,uBlock Origin,NVT_OSA,GoogleChrome(64bit),CCleaner,Unchecky,ZAM Free,Shadow Defender.
Security Enthusiast

Offline Be Secure

  • Long Time Avast User(10years.....) Security Enthusiast.
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1908
Re: The behavior shield and the ransomware shield need improvement.
« Reply #9 on: July 22, 2017, 03:10:47 PM »
https://www.youtube.com/watch?v=8NuJc_-qqcc
Obviously the one making the video doesn't realize that the Avast protection is based on multiple shields.
Some of them interact and are a part of the other. Simply turning shields off at random, will get you some unwanted and unexpected results.
Hi bob.
You are partly correct.They call it behavior shield because it is not rely on any other shields(File/Web).
PC- Windows10 EDU 64Bit,avast! free 21.1.2449,uBlock Origin,NVT_OSA,GoogleChrome(64bit),CCleaner,Unchecky,ZAM Free,Shadow Defender.
Security Enthusiast

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: The behavior shield and the ransomware shield need improvement.
« Reply #10 on: July 22, 2017, 03:12:46 PM »
I strongly suggests you read Bob's first reply here again.
Quote
Obviously the one making the video doesn't realize that the Avast protection is based on multiple shields.

And that guy really didn't test the ransomware shield at all.
First mistake he made was not disabling the build in ransomware protection in Windows.
Second huge mistake is not explaining how the ransomware shield is supposed to work.

Sure I can run a test and say it failed or succeeded.
But no mater what I say, it doesn't mean anything if the readers doesn't know what exactly has been tested and how/why.

And what has "Got talent"(?) got to do with the testing ?
Is Simon Cowel ransomware ?

Offline Be Secure

  • Long Time Avast User(10years.....) Security Enthusiast.
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1908
Re: The behavior shield and the ransomware shield need improvement.
« Reply #11 on: July 22, 2017, 03:21:59 PM »
I strongly suggests you read Bob's first reply here again.
Quote
Obviously the one making the video doesn't realize that the Avast protection is based on multiple shields.

And that guy really didn't test the ransomware shield at all.
First mistake he made was not disabling the build in ransomware protection in Windows.
Second huge mistake is not explaining how the ransomware shield is supposed to work.

Sure I can run a test and say it failed or succeeded.
But no mater what I say, it doesn't mean anything if the readers doesn't know what exactly has been tested and how/why.

And what has "Got talent"(?) got to do with the testing ?
Is Simon Cowel ransomware ?
Hmm.You got points.But no matter what avast needs improvements for sure.
PC- Windows10 EDU 64Bit,avast! free 21.1.2449,uBlock Origin,NVT_OSA,GoogleChrome(64bit),CCleaner,Unchecky,ZAM Free,Shadow Defender.
Security Enthusiast

Offline cristianojgm

  • Jr. Member
  • **
  • Posts: 78
Re: The behavior shield and the ransomware shield need improvement.
« Reply #12 on: July 22, 2017, 04:11:00 PM »
Avast BB needs to be more sensitive. My opinion.

Offline Alikhan

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2220
Re: The behavior shield and the ransomware shield need improvement.
« Reply #13 on: July 22, 2017, 04:27:06 PM »
Actually the behaviour shield is linked with the File Shield in some aspects. I can't go into much detail but I'll give an example. Most of the time zero day malware is already classified in the cloud (old malware is also classified in the cloud). Now here comes the important bit, malware is executed and IDP (behaviour shield) checks the cloud and gets a result that the file is classified as malicious but IDP does this check "asynchronously". This means that the behaviour shield would not block the malware immediately since the File Shield which does the check "synchronously" would have already removed the threat before IDP got involved.  File Shield does this query synchronously, e.g. it will block the malware process creation immediately while the query result gets back from the cloud. This is why sometimes some files get encrypted by ransomware before IDP reacts.

Another example would be CyberCapture being linked to the Web Shield.

I'll need to see why the Ransomware Shield didn't react, did the person making the video reboot after enabling the ransomware shield? The default mode for Ransomware Shield is "smart" mode so any trusted applications which are trusted via the cloud will be allowed to make changes such as Word etc. Any unknown programs will require user intervention.
Windows 10 Home 64-bit • Avast Free (latest stable version) •  Malwarebytes 4 Premium (On-Demand) • Windows Firewall Control • Google Chrome • LastPass • CCleaner • O&O ShutUp10 •

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9406
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re: The behavior shield and the ransomware shield need improvement.
« Reply #14 on: July 22, 2017, 08:30:21 PM »
To avast!'s defense, he didn't actually have the folder he was testing in protected. Of course avast! failed to prevent encryption if it wasn't even designated to protect that folder.

To the defense of the tester however, the way how avast! protects folders is nothing short of idiotic. It just randomly picks some folders with an excuse of "performance costs". Protect the whole damn Music, Pictures, Documents and Videos folders. No buts or excuses. It's absurd to expect regular Joe's to protect the folders themselves because avast! has a bad mechanism for doing that automatically.
Visit my webpage Angry Sheep Blog