Author Topic: Avast Script Blocker  (Read 15775 times)

0 Members and 1 Guest are viewing this topic.

Sutieday

  • Guest
Avast Script Blocker
« on: May 21, 2009, 05:30:28 AM »
Why is Script blocker not included in all products? Doesn't Avast know that most drive by downloads are from script viruses. Proved at www.remove-malware.com

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11820
    • AVAST Software
Re: Avast Script Blocker
« Reply #1 on: May 21, 2009, 08:54:58 AM »
Erm.... there has to be some difference between the free and paid-for product, right?

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9407
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re: Avast Script Blocker
« Reply #2 on: May 21, 2009, 09:04:31 AM »
Why is Script blocker not included in all products? Doesn't Avast know that most drive by downloads are from script viruses. Proved at www.remove-malware.com

I'm not sure what Remove Malware proved (to be honest he's not exactly conducting scientific tests), but script malware is clearly not the dominating form of malware, not even in drive by downloads. iframes and redirection scripts, but they aren't malicious by themself.
The payload is whats malicious and thats usually in form of Win32 binary (EXE file). Either a trojan/backdoor or a fake AV.
Visit my webpage Angry Sheep Blog

dude2

  • Guest
Re: Avast Script Blocker
« Reply #3 on: May 21, 2009, 05:37:26 PM »
Why is Script blocker not included in all products? Doesn't Avast know that most drive by downloads are from script viruses. Proved at www.remove-malware.com

If you read this: http://www.dslreports.com/forum/r21926093-Blocking-Scripts-with-ScriptSentry-ScriptDefender~start=20
You will find that drive by attack was not that efficient in his tests. The definition of "Script" is the crux of the whole thing. Depending on your target is local script files (VBS, HTA, etc.) or browser scripts (JavaScript, ActiveX), they will have different implications. But, it seems Avast is not ready to elaborate on that.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67235
Re: Avast Script Blocker
« Reply #4 on: May 21, 2009, 05:46:01 PM »
But, it seems Avast is not ready to elaborate on that.
I think you're underestimating the Script Blocker and, specially, the whole functions of avast protection.
The best things in life are free.

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11820
    • AVAST Software
Re: Avast Script Blocker
« Reply #5 on: May 21, 2009, 05:49:38 PM »
If we're talking about IE, then "script" is anything IE sends into the scripting engine. So certainly VBscript and JavaScript, and certainly not ActiveX.

dude2

  • Guest
Re: Avast Script Blocker
« Reply #6 on: May 21, 2009, 07:04:57 PM »
If we're talking about IE, then "script" is anything IE sends into the scripting engine. So certainly VBscript and JavaScript, and certainly not ActiveX.

But, won't those mostly-executed-by-Browser's IE scripts' capability be much more restrained than locally initiated VB script files? I wonder how many types of IE scripts may need Script Blocker's intervene when those IE scripts lost the rein and Web Shield cannot help either. If Web Shield can not stop recognized mal-JavaScript or other IE scripts but only Script Blocker can, then wouldn't Avast Home users need an immediated upgrade to PRO or find an alternative for the Script Blocking function?

Welcome to comment on my research of alternatives for the Script Blocking function:
http://forum.avast.com/index.php?topic=45438.msg380955#msg380955
« Last Edit: May 21, 2009, 07:18:10 PM by dude2 »

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11820
    • AVAST Software
Re: Avast Script Blocker
« Reply #7 on: May 21, 2009, 08:48:53 PM »
I'm afraid I give up... really don't know what you want to hear or ask about.

Offline calcu007

  • Avast Evangelist
  • Poster
  • ***
  • Posts: 482
  • I'm lamma!
Re: Avast Script Blocker
« Reply #8 on: May 22, 2009, 01:50:52 AM »
t help either. If Web Shield can not stop recognized mal-JavaScript or other IE scripts but only Script Blocker can, then wouldn't Avast Home users need an immediated upgrade to PRO or find an alternative for the Script Blocking function?

Welcome to comment on my research of alternatives for the Script Blocking function:
http://forum.avast.com/index.php?topic=45438.msg380955#msg380955

What part you dont understand? If the script is a BAD-javascript or whatever script and it is in the signatures data base then it will be catch by WebShield if you are browsing). If is not detected by Webshield, then is not in the virus database and will not detected by Script blocker. I am talking of IE scripts.
« Last Edit: May 22, 2009, 01:57:18 AM by calcu007 »
Asus Intel i7 8GB RAM , Win 8.1 64 bit, Avast IS

Offline mkis

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1618
Re: Avast Script Blocker
« Reply #9 on: May 22, 2009, 03:38:31 AM »
I've been trialling Avast Pro on one computer, and I like the script blocker function.

All other computers run Avast Home. I have USB wireless modem, only work single computer at a time, no network, so run standalone computers, different internet at different times, all have same web connect, and basically same desktop platform (XP Home or Pro), same exposure and protections, resident Avast shield at startup, add range of anti-malware when want / need, don't go there when warned not to, and no worthwhile false postives to talk about since last year.

No bottom-line difference between Avast Home and Pro to date.

But this may depend on the nature of your workload. If you are professional IT environment, then preferable to work with Pro, which is design for more technical types (record and research and retrieve or reset exposure and protections). Some IT wont load Avast Home only because they need be protected from adverse user behavioral, so Pro with after-sales service is good option for them. But yet to find one that says Avast Home is any lesser effective.

My rule is for home user who is worried about whether their workload means too big exposure for Home to cover, then they should go Pro. Also, if they can afford Pro, then go Pro. That said, my workload and exposure is big and yet I find Avast Home ideal. Granted I also protect against host file intrusion and protect against spyware and the like. All the protections I use can be found in Avast forum.

By running Avast Home I can keep abreast of what picture my people see on their screen and understand what problem they are talking about. Some know Avast, others can barely use MSWord, one only uses the web to bet electronically on the horse races. None of them get viruses anymore, not since they brought their infected PCs around to be fixed. I believe I have had a few brushes with malware, that might have led to infection, but then you would expect that with my exposure.

Trial time is up soon, and I might buy Pro this time around. Since there is work being lined up which may require more depth IT monitor and maintain. With larger external party, extra conditions to consider.

But otherwise, Avast Home seems adequate for computer user.
   
« Last Edit: May 22, 2009, 04:21:17 AM by mkis »
Avast7 Free, MBAM (on demand), MVPS Hosts

Intel DG41TY, Windows 7 Ultimate, IE9, Google Chrome, 4 GB ram, Secunia PSI, ccleaner, Foxit Reader, Faststone Image viewer, MWSnap.

dude2

  • Guest
Re: Avast Script Blocker
« Reply #10 on: May 22, 2009, 04:33:04 AM »
I'm afraid I give up... really don't know what you want to hear or ask about.
What part you dont understand? If the script is a BAD-javascript or whatever script and it is in the signatures data base then it will be catch by WebShield if you are browsing). If is not detected by Webshield, then is not in the virus database and will not detected by Script blocker. I am talking of IE scripts.

See it for yourself:
http://www.avast.com/eng/avast-4-professional-antivirus-antispyware.html
It said,
>>
The resident protection of the Professional Edition includes an additional module, not contained in the Home Edition, called Script Blocker. This module watches all scripts being executed in the operating system (so-called WSH scripts - Windows Scripting Host), and scans all the scripts run as a part of a web page within your web browser (Internet Explorer, Netscape Navigator and Mozilla).
<<

WSH scripts(e.g., VBScript) is clear to everyone as Script Blocker's targets. But, which brower scripts(e.g., advanced JavaScript) can only be scanned and detected by Script Blocker but not by the ordinary Web Shield is part of the mystery.

For WSH scripts protection, does anyone have a comment on Script Blocker alternatives for those Avast! Home users as the second best choice? http://forum.avast.com/index.php?topic=45438.msg380955#msg380955
« Last Edit: May 22, 2009, 06:16:33 AM by dude2 »

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9407
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re: Avast Script Blocker
« Reply #11 on: May 22, 2009, 06:50:36 AM »
To be honest, you're complicating way too much around Script Blocker provider. It's there, it's designed to check scripts and thats it.
Visit my webpage Angry Sheep Blog

Mr.Agent

  • Guest
Re: Avast Script Blocker
« Reply #12 on: May 22, 2009, 12:52:33 PM »
Script Blocker with PUSH Update is already a big update with the other that inclued on Pro.

Offline mkis

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1618
Re: Avast Script Blocker
« Reply #13 on: May 22, 2009, 05:35:50 PM »
Silly. Silly. Forgot to mention about media access point - USB plugin is not able to carry malware.   :)
Avast7 Free, MBAM (on demand), MVPS Hosts

Intel DG41TY, Windows 7 Ultimate, IE9, Google Chrome, 4 GB ram, Secunia PSI, ccleaner, Foxit Reader, Faststone Image viewer, MWSnap.

Offline calcu007

  • Avast Evangelist
  • Poster
  • ***
  • Posts: 482
  • I'm lamma!
Re: Avast Script Blocker
« Reply #14 on: May 22, 2009, 07:53:33 PM »

WSH scripts(e.g., VBScript) is clear to everyone as Script Blocker's targets. But, which brower scripts(e.g., advanced JavaScript) can only be scanned and detected by Script Blocker but not by the ordinary Web Shield is part of the mystery.

For WSH scripts protection, does anyone have a comment on Script Blocker alternatives for those Avast! Home users as the second best choice? http://forum.avast.com/index.php?topic=45438.msg380955#msg380955

It is not a a mystery. Script Blocker scan EVERYYYYYYYYYYYYY  browser scripts and WSH scripts. The Webshield scan the javascript and any script that pass through your browser. If the script if in your computer already then it is scanned by ScripBlocker, because the WEbshield scan http traffic ONLY. What part you dont understand? Do you need a map?

READ AGAIN EVERY RESPONSE THAT YOU RECEIVED.
Asus Intel i7 8GB RAM , Win 8.1 64 bit, Avast IS