Behavior Shield on Ask

[akama1]

the bad thing about when i put on auto-decide is that it can't really block the malicious processes :/ it only starts blocking when i set it to block

[Dch48]

the bad thing about when i put on auto-decide is that it can't really block the malicious processes :/ it only starts blocking when i set it to block

But---has it ever blocked any malicious processes? Or only ones that were safe and had to be allowed? I think having it on auto-decide in conjunction with all the other shields of avast! is pretty safe.

I also have a question for DavidR.  If you tell it not to scan for unauthorized modifications, aren't you effectively turning it off? What else would it scan for other than that?

[DavidR]

No, because that is only one of the areas it is monitoring, check your expert settings and you will see the others areas.

[Tetsuo]

No, because that is only one of the areas it is monitoring

In fact (just for instance) with the "monitor unauthorized modifications" option unchecked, the Behavior Shield still scans plugin-container.exe (Firefox) - as already mentioned by DavidR.

The only relevant downside (apart from the not-monitored areas) could be the Script Shield activity - not zero but almost zero in most cases.

[DavidR]

There are two other areas monitored by the behavior shield, but yes (as has been mentioned in script shield related topics) that would reduce the activity of the script shield. I effectively only get activity if I use IE and there is no way I would be using IE.

[Tetsuo]

I effectively only get activity if I use IE and there is no way I would be using IE.

Funny thing: here (with the "monitor unauthorized modifications" option unchecked) I get one of those rare Script Shield activities if I open the  Microsoft System Information tool (XP)... I guess it's somehow related to IE.

[DavidR]

There are a lot of internal windows functions that use IE for display purposes, this may be one of them.