Author Topic: The behavior shield and the ransomware shield need improvement.  (Read 11309 times)

0 Members and 1 Guest are viewing this topic.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: The behavior shield and the ransomware shield need improvement.
« Reply #15 on: July 22, 2017, 09:04:15 PM »
In all short, crippling an AV an run tests on it afterwards is nonsense.
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48524
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: The behavior shield and the ransomware shield need improvement.
« Reply #16 on: July 22, 2017, 10:13:59 PM »
In all short, crippling an AV an run tests on it afterwards is nonsense.
Pretty much what I said in reply #1 but who's counting. :)
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: The behavior shield and the ransomware shield need improvement.
« Reply #17 on: July 22, 2017, 10:24:23 PM »
In all short, crippling an AV and run tests on it afterwards is nonsense.
Pretty much what I said in reply #1 but who's counting. :)
Well, see it as acknowledgement/reassurance. ;)
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

REDACTED

  • Guest
Re: The behavior shield and the ransomware shield need improvement.
« Reply #18 on: July 22, 2017, 11:02:58 PM »
In all short, crippling an AV an run tests on it afterwards is nonsense.

Not necessarily!

A lot of antiviruses would advertise various "shields": Web protection, Exploit protection, Malware protection, Ransomware protection, Behavior blocker, Heuristic, Machine learning , etc and all kind of other gimmicks , in order to inspire confidence.

In fact, 99% of detection is still signature based, and when somebody tries to test a specific shield , the answer is " is nonsense"

To illustrate better, see here :

https://support.emsisoft.com/topic/27503-new-anti-ransom-module/

Emsisoft changed the name of their "behavior blocker" (formerly known as Mamutu" to Anti_Ransomware module strictly for commercial reasons

In fact, that module has nothing to do with ransomware.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: The behavior shield and the ransomware shield need improvement.
« Reply #19 on: July 22, 2017, 11:15:26 PM »
In all short, crippling an AV and run tests on it afterwards is nonsense.
Not necessarily!
Well, feel free to dream on...
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

REDACTED

  • Guest
Re: The behavior shield and the ransomware shield need improvement.
« Reply #20 on: July 22, 2017, 11:30:31 PM »
In all short, crippling an AV and run tests on it afterwards is nonsense.
Not necessarily!
Well, feel free to dream on...

Well... , see here some other opinions (non-evangelists)

http://www.dslreports.com/forum/r31519031-Avast-Antivirus-v17-5-2303-Released


"Avast Antivirus v17.5.2303 Released
Avast Antivirus v17.5.2303
Released 18 July 2017"


"Is this program still bloated? For example having a crazy amount of "shields" along with unnecessary services?"


"I think it does and that is why I just post the updates and don't use it anymore!! good luck bro "
 

 




Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: The behavior shield and the ransomware shield need improvement.
« Reply #21 on: July 22, 2017, 11:33:46 PM »
In all short, crippling an AV and run tests on it afterwards is nonsense.
Not necessarily!
Well, feel free to dream on...
Well... , see here some other opinions (non-evangelists)
1. Your links are OT here.
2. https://www.avast.com/faq.php?article=AVKB96#artTitle (Add/Remove components)
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48524
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: The behavior shield and the ransomware shield need improvement.
« Reply #22 on: July 23, 2017, 12:15:39 AM »
I personally think all this crapp is to simply to continue pushing the nonsense video.
I'm finished with any other responses to this post. Apparently the user isn't willing to listen to reason.


Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

REDACTED

  • Guest
Re: The behavior shield and the ransomware shield need improvement.
« Reply #23 on: July 23, 2017, 06:56:40 AM »
To avast!'s defense, he didn't actually have the folder he was testing in protected. Of course avast! failed to prevent encryption if it wasn't even designated to protect that folder.
When he realized that he added the folder to ransomware shield but even after that the files got encrypted by another ransomware.

Offline stibi

  • Sr. Member
  • ****
  • Posts: 383
Re: The behavior shield and the ransomware shield need improvement.
« Reply #24 on: July 23, 2017, 11:07:58 AM »
To the defense of the tester however, the way how avast! protects folders is nothing short of idiotic. It just randomly picks some folders with an excuse of "performance costs"

What does this mean? Does Avast protect really "randomly some folders"? I cannot believe this...

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9406
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re: The behavior shield and the ransomware shield need improvement.
« Reply #25 on: July 23, 2017, 12:29:31 PM »
From my system, that was exactly the case. I don't know what kind of mechanism they use, but I know it's a garbage one. I have tons of images in Pictures folder. And avast! just selectively picked few folders from it. Not even all the folders or entire Pictures folder. Granted, I have my data folders on drive D: (relocated), but quite frankly, these destinations are variable based, it doesn't matter where user relocates them, Windows is always aware of the path.
Visit my webpage Angry Sheep Blog

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: The behavior shield and the ransomware shield need improvement.
« Reply #26 on: July 23, 2017, 12:31:54 PM »
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline chris..

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2918
Re: The behavior shield and the ransomware shield need improvement.
« Reply #27 on: July 23, 2017, 01:15:08 PM »
Quote
Ransomware Shield secures your personal photos, documents, and other files from being modified, deleted, or encrypted by ransomware attacks. This feature scans for and automatically secures folders which may contain personal data and allows you to specify which other folders you want to protect from untrusted applications. Additionally, you can specify which applications are allowed to modify the files in your folders and which applications are always blocked.
So , if we can protect the files we want, why not protect all the files on the hard drive ?

Offline stibi

  • Sr. Member
  • ****
  • Posts: 383
Re: The behavior shield and the ransomware shield need improvement.
« Reply #28 on: July 23, 2017, 06:10:08 PM »
Ransomware Shield - FAQ: https://www.avast.com/faq.php?article=AVKB50

Ok, but that's unbelievable, until one adds all his personal folders manually. And this may slow the system down ...

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9406
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re: The behavior shield and the ransomware shield need improvement.
« Reply #29 on: July 24, 2017, 10:19:09 AM »
Quote
Ransomware Shield secures your personal photos, documents, and other files from being modified, deleted, or encrypted by ransomware attacks. This feature scans for and automatically secures folders which may contain personal data and allows you to specify which other folders you want to protect from untrusted applications. Additionally, you can specify which applications are allowed to modify the files in your folders and which applications are always blocked.
So , if we can protect the files we want, why not protect all the files on the hard drive ?

They say it's for performance reasons. Though, quite frankly, protecting entire Documents, Pictures, Music and Videos folders shouldn't present too much of a performance hit quite frankly.
Visit my webpage Angry Sheep Blog