btw avast fail on a Ransom trojan when the behavior blocker is on auto-decide (default)
when the behavior blocker is set on to ask it finds it.
mind can someone explain to me why is the avast behavior blocker is on auto-decide (default)
For the majority of users, Ask is too intrusive and worse still they may not be able to make the decision on what to do. Now this could also let things through the door that may otherwise have been locked out.
It is difficult to strike a balance between too strict and not strict enough if set to Auto. Or if set to Ask as the default setting without being too intrusive for the user. Either of these conditions could result in either an FP or something being let in, it isn't easy.
There are many that would like to see the Behavior Shield beefed up on its rule set to catch more, even if it meant an increase in FPs (which could be corrected). The idea for this is that when set to Auto by default the user doesn't have to make the decision, but the protection is more robust, even if it could increase FPs.
However, there aren't many that are lobbying for the Behavior Shield to be set to Ask by default, it really would be too intrusive (I feel). The major point is that the settings are highly configurable for the individual user.