Author Topic: Manually exiting Avast! without turning off self-protection module  (Read 12242 times)

0 Members and 1 Guest are viewing this topic.

Offline beyondo

  • Newbie
  • *
  • Posts: 12
I can open services, and shut down Avast! manually with the self-protection module on,
provided I respond to the modal dialog it pops up filling the screen.  In this way, I shut down
all 3 Avast! services.

However, it leaves the UI running (AvastUI.exe).  I'm aware I can disable the self-protection module,
and then kill it with task manager, but I don't want to do that.  When I attempt to kill it with task
manager, why doesn't it pop up another modal dialog which I can respond to to let me kill it?

As it stands, if I don't want to muck with the self-protection settings, it appears I have to
install a kernel mode process kill program specifically for this purpose.  It seems silly because
the services (which I can shut down) are the critical pieces of Avast!, not the UI.

Please add this feature, or at least an "exit UI" option on the system tray icon.

(Yeah I'm aware I can hide the icon, but the task is still there, even if it isn't doing anything.)

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 85795
  • No support PMs thanks
Re: Manually exiting Avast! without turning off self-protection module
« Reply #1 on: May 02, 2010, 04:59:46 PM »
Why do you want to do this ?

avast is designed as a 'resident' on-access antivirus and the self-defence module is there to prevent it from being easily shutdown leaving you unprotected.

Given your other post it looks like you want an on-demand scanner which avast wasn't designed to be. Even with the services disabled/stopped the low level drivers will still be there.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.8.2487 (build 21.8.6586.697) UI 1.0.666/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Dch48

  • Massive Poster
  • ****
  • Posts: 3150
Re: Manually exiting Avast! without turning off self-protection module
« Reply #2 on: May 02, 2010, 05:03:28 PM »
I think he's saying that if he can do it manually, then a piece of malware might also be able to do it. He's pointing out that the self protection might not be working as well as it should.
Avatar FX6327X desktop, FX-6300 CPU, RX 470 GPU, 8GB RAM, Windows 10 Home 64 bit
HP dv6-6140us laptop, A8-3500M APU, 8GB RAM, Windows 7 Home Premium 64 bit
RCA W101 v2 10" tablet, Intel Atom Bay Trail Z3735F processor, 2GB RAM, Windows 10 Home 32 bit

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 85795
  • No support PMs thanks
Re: Manually exiting Avast! without turning off self-protection module
« Reply #3 on: May 02, 2010, 05:17:45 PM »
I'm saying nothing of the sort, the main point is why does beyondo need to do this.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.8.2487 (build 21.8.6586.697) UI 1.0.666/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Dch48

  • Massive Poster
  • ****
  • Posts: 3150
Re: Manually exiting Avast! without turning off self-protection module
« Reply #4 on: May 02, 2010, 05:28:33 PM »
I'm saying nothing of the sort, the main point is why does beyondo need to do this.
I didn't say you were saying it, I meant that he was. I don't think he wants to able to do those things , only pointing out that he can do them without the self protection preventing it. Or, if he does actually want to do it for some unknown reason, why is he able to?
« Last Edit: May 02, 2010, 05:30:24 PM by Dch48 »
Avatar FX6327X desktop, FX-6300 CPU, RX 470 GPU, 8GB RAM, Windows 10 Home 64 bit
HP dv6-6140us laptop, A8-3500M APU, 8GB RAM, Windows 7 Home Premium 64 bit
RCA W101 v2 10" tablet, Intel Atom Bay Trail Z3735F processor, 2GB RAM, Windows 10 Home 32 bit

Offline logos

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 9441
Re: Manually exiting Avast! without turning off self-protection module
« Reply #5 on: May 02, 2010, 05:30:14 PM »
my opinion is that avast services shouldn't let you disable them when the self-defense module is on ;) as to the UI, yeah there should be an option to exit, with an avast protection dialog box confirmation, so without having to disable the module in the first place.

 Why would that be needed? doesn't matter, you're running your computer and there can always be circumstances, like conflicts when trying out some other security software etc...

edit: I believe too that Avast services could be very easily disabled by malware, with the current self-protection system. There's just no real anti-termination protection.
w7 - ais7

Offline beyondo

  • Newbie
  • *
  • Posts: 12
Re: Manually exiting Avast! without turning off self-protection module
« Reply #6 on: May 02, 2010, 05:31:21 PM »
Why do you want to do this ?
I only want the virus software running when I choose, not all the time.

avast is designed as a 'resident' on-access antivirus and the self-defence module is there to prevent it from being easily shutdown leaving you unprotected.
I understand the purpose of the self-defense module.

Given your other post it looks like you want an on-demand scanner which avast wasn't designed to be. Even with the services disabled/stopped the low level drivers will still be there.
Actually, I want to use the on access scanning too, but only at certain times...such
as let's say when I'm installing a new program.

I wasn't asking about the low level drivers.  I was wondering why the same "prompt-response"
system couldn't be used to terminate AvastUI.exe as it's used to terminate the services
(with self-protection module active).

Wouldn't that be consistent?  Is the problem that the modal dialogs are run by
the services themselves, so that when they exit nothing is left?

Offline Dch48

  • Massive Poster
  • ****
  • Posts: 3150
Re: Manually exiting Avast! without turning off self-protection module
« Reply #7 on: May 02, 2010, 05:33:01 PM »
my opinion is that avast services shouldn't let you disable them when the self-defense module is on ;)

Exactly-- The question to me is this. even if wants to disable everything, why is he able to when the self protection is active?
Avatar FX6327X desktop, FX-6300 CPU, RX 470 GPU, 8GB RAM, Windows 10 Home 64 bit
HP dv6-6140us laptop, A8-3500M APU, 8GB RAM, Windows 7 Home Premium 64 bit
RCA W101 v2 10" tablet, Intel Atom Bay Trail Z3735F processor, 2GB RAM, Windows 10 Home 32 bit

doktornotor

  • Guest
Re: Manually exiting Avast! without turning off self-protection module
« Reply #8 on: May 02, 2010, 05:36:54 PM »
Eh... geez folks, he just wants an Exit item on tray icon right-click menu (or equivalent on the disable shields prompt). Has nothing to do w/ malware disabling the avast services or whatever similar (which wouldn't really be so easy as it is since it uses alternate desktop requiring a manual action) - plus the AvastUI.exe thing doesn't provide any realtime protection anyway.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 85795
  • No support PMs thanks
Re: Manually exiting Avast! without turning off self-protection module
« Reply #9 on: May 02, 2010, 05:44:06 PM »
@ beyondo
Having it on-access only at times you are installing software is a bit of a waste of time if your virus database is out of date (IMHO) as you are suggesting (updating it every 30 days) in your other post. An out of date security application is a false sense of security.

Trying to cripple what is designed as a resident on-access antivirus if you want am on-demand antivirus use one designed for that use.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.8.2487 (build 21.8.6586.697) UI 1.0.666/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline beyondo

  • Newbie
  • *
  • Posts: 12
Re: Manually exiting Avast! without turning off self-protection module
« Reply #10 on: May 02, 2010, 05:55:56 PM »
I set it to 30 days simply to make sure it wasn't constantly trying to access the internet.
The default is... 4 hours!?  I could certainly choose to update it more often if I wanted.

Avast certainly has a 'scan' function and I don't see why I can't use it for that purpose.
Often, I can verify that an installer (exe) has been out on the internet for some time
(using md5 hash) but don't know much else.  The fact that it dates, say, to 2008, is
enough to ensure it's covered by any recent virus program.

I picked avast because I was sick of McAfee and heard good things about Avast! and
am not aware of any virus program that is designed solely for "on demand" use.  I'm
aware of the risk of 0-day infections if I start downloading random exe's from porn sites.

doktornotor

  • Guest
Re: Manually exiting Avast! without turning off self-protection module
« Reply #11 on: May 02, 2010, 05:59:25 PM »
Well, w/ updating once in 30 days it's kinda pointless to use an AV. Your settings won't be honoured anyway, there's a separate thread about not even 1440 minutes (1 day) being honored. As for the rest, this is NOT designed as on-demand AV, simply because the drivers are loaded anyway even if you disable the realtime protection, so if you install another AV you are calling for a big trouble.

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11805
    • AVAST Software
Re: Manually exiting Avast! without turning off self-protection module
« Reply #12 on: May 02, 2010, 06:24:56 PM »
I'm aware of the risk of 0-day infections if I start downloading random exe's from porn sites.

With the number of ordinary sites compromised every day, any browsing (e.g. reading your favourite magazine) is of a similar risk. It's not true anymore (for a long time) that you have to visit "dangerous" sites to get infected.


If you disable all the services anyway (i.e. stop the resident protection), what's the point of the self-defense (i.e. why do you want to have it enabled)? I see no logic here...

Offline beyondo

  • Newbie
  • *
  • Posts: 12
Re: Manually exiting Avast! without turning off self-protection module
« Reply #13 on: May 02, 2010, 06:33:12 PM »
WRT to update interval, the large IT department at my work has us scheduled for weekly updates,
which they apparently believe is optimal.  Those that reconfigured their machines for daily updates
had the pleasure of having their machines shutdown last week last by McAfee due to netsvc.exe
being deleted (false positive).

With the number of ordinary sites compromised every day, any browsing (e.g. reading your favourite magazine) is of a similar risk. It's not true anymore (for a long time) that you have to visit "dangerous" sites to get infected.
I guess I'm an extraodinary man then.  I've never been infected since I put this computer together in 2000.
And I install a lot of stuff, some questionable, from the web.  I'm just careful about where I get it.  Actually,
I've had more problems from the virus software than from viruses--like the McAfee debacle last week.

If you disable all the services anyway (i.e. stop the resident protection), what's the point of the self-defense (i.e. why do you want to have it enabled)? I see no logic here...

I'm not following you here.  I'm going to have Avast! either on or off, when it's off, I'd like it all off, when it's
on I'd probably just be running the basic file access scanning (not the web scanning).

doktornotor

  • Guest
Re: Manually exiting Avast! without turning off self-protection module
« Reply #14 on: May 02, 2010, 06:35:17 PM »
WRT to update interval, the large IT department at my work has us scheduled for weekly updates,
which they apparently believe is optimal. 

Well, your IT dept. definitely needs a sanity check...  ::) :o