Author Topic: Advice on Behavior Shield Expert Setting.  (Read 12522 times)

0 Members and 1 Guest are viewing this topic.

goldentequila

  • Guest
Re: Advice on Behavior Shield Expert Setting.
« Reply #15 on: April 22, 2011, 02:17:22 AM »
By the way,

For everyone who has been giving me helpful tips, thank you. I got caught up in the immature argument of you know who and let myself neglect the nice people I should be talking to instead.

I've reported him to the moderator, so I think he'll be gone from my thread soon (I hope).

Anyhow, I'm going to try some of the suggestions and see if I can get this to work. Thanks again  :)

GT

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37509
  • Not a avast user
Re: Advice on Behavior Shield Expert Setting.
« Reply #16 on: April 22, 2011, 02:20:31 AM »
I smelled Diesel fumes that seemed so familliar..............

Snuff snuff ???

Yeah, I smell it too now ;D

Greetz, Red.
yea...2 hours after the ban this registered....suspicous   ;)

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: Advice on Behavior Shield Expert Setting.
« Reply #17 on: April 22, 2011, 02:22:38 AM »
Ah almost didn't recognise you there Dieselman Rednose with your new avatar ;D

Hard to cover your tracks.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

JeffreyCole

  • Guest
Re: Advice on Behavior Shield Expert Setting.
« Reply #18 on: April 22, 2011, 02:48:12 AM »
Hello Everyone. :)

I'm one of the developers of Ad Muncher.

I was told about this thread by goldentequila and he wanted my to chime in
on some of the differences between Ad Muncher and Adblock Plus.

I will but only if it's acceptable to the moderators.

May I? :)

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: Advice on Behavior Shield Expert Setting.
« Reply #19 on: April 22, 2011, 03:07:02 AM »
Whilst I'm not a moderator, if it helps in resolving goldentequila's problem I don't see it being a problem as we have had input from other software developers in relation to any issues in the past, whilst not attempting to promote a product, just resolve a problem.

You can perhaps clarify my assumption that Ad Muncher uses a proxy to achieve its Ad filtering.

If not then any other files, etc. that might be involved in the ad muncher filtering, that the behavior shield might block.

Essentially we do need goldentequila to check out the behaviorshield.txt file question I asked in this post Reply #12 on page 1 http://forum.avast.com/index.php?topic=76805.msg635823#msg635823.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

JeffreyCole

  • Guest
Re: Advice on Behavior Shield Expert Setting.
« Reply #20 on: April 22, 2011, 03:43:08 AM »
Ad Muncher is not a proxy.

It hooks and patches winsock calls for the filtered application.

An Avast dev will need to install the latest version to see why Avast is blocking Ad Muncher.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: Advice on Behavior Shield Expert Setting.
« Reply #21 on: April 22, 2011, 04:21:06 AM »
OK, I will try and point someone of the mods/devs at this topic.

Edit: Is there a driver other than the executable files that have been mentioned by goldentequil - AdMunch.exe - Admunch64.exe, which could be added to the behavior shield trusted processes ?

« Last Edit: April 22, 2011, 04:32:32 AM by DavidR »
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

JeffreyCole

  • Guest
Re: Advice on Behavior Shield Expert Setting.
« Reply #22 on: April 22, 2011, 04:47:33 AM »
There are no drivers for Ad Muncher.

Everything runs in user space.

All files are in the Ad Muncher folder.


Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: Advice on Behavior Shield Expert Setting.
« Reply #23 on: April 22, 2011, 05:11:16 AM »
It's strange then that having added the two executables (presumably one of those is responsible for that hooking and patching of winsock. Which again we need input from goldentequil about the contents of the behaviorshield.txt file.

Thinking again about the hooking of winsock, I wonder if one of the settings in the behavior shield might be more geared up to stop this, 'Monitor the system for unauthorised modifications' see image.

So goldentequil could uncheck this option in the Behavior Shield and see if that resolves the problem, if not Set the Action to take to Ask so he can at least see any intervention and authorise it or not.

Well that's me for the night, 4:10am here, hopefully one of the mods/devs can pick up on this later.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: Advice on Behavior Shield Expert Setting.
« Reply #24 on: April 22, 2011, 07:37:27 PM »
OK, I got something back from one of the developers and a suggestion to try adding iexplore.exe to the trusted processes.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

JeffreyCole

  • Guest
Re: Advice on Behavior Shield Expert Setting.
« Reply #25 on: April 22, 2011, 07:42:19 PM »
Wouldn't that have to be done for every program a user wanted Ad Muncher to filter?

It filters over 200 applications by default.

Including virtually every browser made in the past 10 years and all IM applications with ads and a myriad of other applications.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: Advice on Behavior Shield Expert Setting.
« Reply #26 on: April 22, 2011, 07:54:27 PM »
I honestly don't know, I'm just an avast user not developer, but it rather depends on how the hooking of winsock is done if via iexplore.exe then probably not.

But the start point would be having goldentequil try it and or my other suggestions. Unfortunately he hasn't been back to the topic to answer the questions (behaviorshield.txt content) or try any of the suggestions I made.

So we really are going to have to wait for his return/input.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

JeffreyCole

  • Guest
Re: Advice on Behavior Shield Expert Setting.
« Reply #27 on: April 22, 2011, 10:19:22 PM »
Is there no one else who can just install Ad Muncher and test this?

http://www.admuncher.com/download.shtml

It's a lot easier to install Ad Muncher than to install a new Anti-Virus. ;p

It's just a 523KB download.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Advice on Behavior Shield Expert Setting.
« Reply #28 on: April 22, 2011, 10:25:41 PM »
Downloaded on win 7 64 bit - what would you like me to try ?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Advice on Behavior Shield Expert Setting.
« Reply #29 on: April 22, 2011, 10:49:27 PM »
Running both 32 and 64 bit IE9

Results for 64 bit
Quote
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/e/e0/Google%E2%80%99s_First_Production_Server.jpg/130px-Google%E2%80%99s_First_Production_Server.jpg]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/9/94/Symbol_support_vote.svg/14px-Symbol_support_vote.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/f/fa/Wikibooks-logo.svg/25px-Wikibooks-logo.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/4/4c/Wikisource-logo.svg/24px-Wikisource-logo.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/f/fa/Wikiquote-logo.svg/21px-Wikiquote-logo.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/2/24/Wikinews-logo.svg/25px-Wikinews-logo.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/1/1b/Wikiversity-logo-en.svg/25px-Wikiversity-logo-en.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/f/f8/Wiktionary-logo-en.svg/23px-Wiktionary-logo-en.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/b/b6/Factory_1b.svg/32px-Factory_1b.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/d/da/SF_From_Marin_Highlands3.jpg/32px-SF_From_Marin_Highlands3.jpg]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/6/69/Schmidt-Brin-Page-20080520.jpg/220px-Schmidt-Brin-Page-20080520.jpg]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/en/thumb/9/96/Google_web_search.png/220px-Google_web_search.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/e/ef/Googleplexsouthsidesecondangle.jpg/220px-Googleplexsouthsidesecondangle.jpg]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/a/a2/Noogler.png/130px-Noogler.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/en/thumb/b/b7/Google1998.png/220px-Google1998.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/b/b0/Increase2.svg/11px-Increase2.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/f/fc/Padlock-silver.svg/20px-Padlock-silver.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/3/30/Googlelogo.png/200px-Googlelogo.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://en.wikipedia.org/wiki/Google]
Default filter match - Block retrieval of URL: .google-analytics.*.js [http://www.google-analytics.com/ga.js]
Default filter match - Block retrieval of URL: /stats.wordpress. [http://stats.wordpress.com/g.gif?host=www.geekstogo.com&rand=0.21602336613775352&blog=1092593&v=ext&post=0&ref=http://www.google.co.uk/search?hl=en&q=geekstogo&meta=&rlz=]
Default filter match - Block retrieval of URL: /stats.wordpress. [http://stats.wordpress.com/e-201116.js]
Default filter match - Block retrieval of URL: /show_ads.js [http://pagead2.googlesyndication.com/pagead/show_ads.js]
Resutlts 32 bit
Quote
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/f/fd/Portal-puzzle.svg/16px-Portal-puzzle.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/4/48/Folder_Hexagonal_Icon.svg/16px-Folder_Hexagonal_Icon.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/8/89/Symbol_book_class2.svg/16px-Symbol_book_class2.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://en.wikipedia.org/wiki/Google_Chrome]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/4/4a/Commons-logo.svg/30px-Commons-logo.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/2/24/Wikinews-logo.svg/40px-Wikinews-logo.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/2/22/Browser_usage_on_wikimedia_pie_chart.png/300px-Browser_usage_on_wikimedia_pie_chart.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/f/fd/Portal-puzzle.svg/32px-Portal-puzzle.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/7/71/Usage_share_of_web_browsers_(Source_Stat_Counter).svg/300px-Usage_share_of_web_browsers_(Source_Stat_Counter).svg.png]
Default filter match - Don't match against keyword: .google.com/group/*? [http://en.wikipedia.org/wiki/Google_Chrome]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/en/thumb/6/69/Google_Chrome_-_Wikipedia,_the_free_encyclopedia.png/220px-Google_Chrome_-_Wikipedia,_the_free_encyclopedia.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/en/thumb/d/d0/Chrome_Logo.svg/100px-Chrome_Logo.svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/a/ab/Acid3-Chrome4Dev.PNG/220px-Acid3-Chrome4Dev.PNG]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/en/thumb/1/1d/Screenshot-Wikipedia,_the_free_encyclopedia_-_Google_Chrome.png/300px-Screenshot-Wikipedia,_the_free_encyclopedia_-_Google_Chrome.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/d/db/Usage_share_of_alternative_web_browsers_(Source_Stat_Counter).svg/320px-Usage_share_of_alternative_web_browsers_(Source_Stat_Counter).svg.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/commons/thumb/6/67/File-Chromium-Linux-Alpha.png/200px-File-Chromium-Linux-Alpha.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://upload.wikimedia.org/wikipedia/en/0/0a/Google_Chrome_2011_Wrodmark_Logo.png]
Default filter match - Don't match against keyword: .org/wikipedia/ [http://en.wikipedia.org/wiki/Google]