Author Topic: Why you can't decide what Avast blocks or not?  (Read 8663 times)

0 Members and 1 Guest are viewing this topic.

xdanx

  • Guest
Why you can't decide what Avast blocks or not?
« on: February 12, 2012, 10:36:29 PM »
I have seen for a very long time that Avast! actually blocks whatever it considers a threat, and you CAN'T tell the program that it isn't. There are a lot of cases like this. To mention a really common example, the program sXe Injected, used by Counter Strike players almost always has problems with Avast!. The problem has persisted over the years, and even when people keeps reporting false positives, every new version blocks it again. And there is no way to tell Avast! not to block it, you have to report it every single time and wait again.

Now I wonder why is Avast! programmed to not letting you decide what to block and what to allow. I understand that security is important, but users should be able to decide how they want to use the program, instead of Avast! deciding what to do by itself. This is a great software, but one of the BIGGEST problems it has is the huge lack of real control over its functioning.

And on the top of that, when you have this kind of problems, even disableing every feature in Avast! doesn't solve the problem, making us think that even if you disable it, there are still some hidden processes running in the background, which doesn't sound really good.

It this going to change in the future or people will have to keep reporting this things over and over for life?
« Last Edit: February 12, 2012, 10:38:24 PM by xdanx »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user

xdanx

  • Guest
Re: Why you can't decide what Avast blocks or not?
« Reply #2 on: February 12, 2012, 10:51:39 PM »
installer_sxe_injected.exe
https://www.virustotal.com/file/fc95702872cb560266179bed752dd65c2cc04da10aea8872cde4ca00bf61cc26/analysis/1329083028/
Never heard of that file and that's not the point anyway. It is a general problem, that's just an example. And it is quite funny actually, if Avast blocks something without even detecting what you've posted.


You still can't configure Avast the way you want.
« Last Edit: February 12, 2012, 10:56:32 PM by xdanx »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: Why you can't decide what Avast blocks or not?
« Reply #3 on: February 12, 2012, 11:06:43 PM »
if the file you have is not the same as i found on the net, then take the file you have, upload it to virustotal.com and test it
when you have the result, post the scan link

Hermite15

  • Guest
Re: Why you can't decide what Avast blocks or not?
« Reply #4 on: February 12, 2012, 11:07:55 PM »
there's been a lot of discussion about this on the forums, many here requested what you're asking now already years ago ... but well, Avast doesn't want it ... too dangerous for newbies they think ... probably true, but annoying for the others. Anyway the best thing to do is still to set the file shield to "ask", giving you the opportunity to just block something instead of having it sent to Chest. You can then temporarily deactivate the file shield, set up an exclusion for your file or folder location, re-activate the file shield and you're done.

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33891
  • malware fighter
Re: Why you can't decide what Avast blocks or not?
« Reply #5 on: February 12, 2012, 11:54:36 PM »
Hi xdanx,

We are not here to promote hacks or anti-cheat plug-ins. They usually come with spyware like kontera for instance, etc. So this could never be given as a general advice to users. So the only way forward as I see it,  is trying to get it whitelisted on good grounds. Why don't you give us the download file path, so it can be checked. Take care to make that  link non-click-through like with hxtp or wXw etc.,

polonus

« Last Edit: February 13, 2012, 12:02:05 AM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline pk

  • Avast team
  • Super Poster
  • *
  • Posts: 2078
Re: Why you can't decide what Avast blocks or not?
« Reply #6 on: February 13, 2012, 12:24:21 AM »
@xdanx: sXe conflict with avast should be fixed already in v6. I contacted sXe's author and we fixed it together. If you still have a problem, please send me sXe logfile (it should be created somewhere, or it's displayed on screen) so we can look at it again. Thanks.

Hermite15

  • Guest
Re: Why you can't decide what Avast blocks or not?
« Reply #7 on: February 13, 2012, 12:35:31 AM »
oops ;D getting this from the network shield already while still at search stage in Google.

edit: on a side note I hate cheats and cheaters in games ;)
« Last Edit: February 13, 2012, 12:38:42 AM by logos »

Offline pk

  • Avast team
  • Super Poster
  • *
  • Posts: 2078
Re: Why you can't decide what Avast blocks or not?
« Reply #8 on: February 13, 2012, 12:41:10 AM »
edit: on a side note I hate cheats and cheaters in games ;)

sXe is anticheat app

Offline !Donovan

  • Web Analyst
  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2219
    • The WAR Against Malware
Re: Why you can't decide what Avast blocks or not?
« Reply #9 on: February 13, 2012, 12:45:08 AM »
This germanattention site is really something.

See: http://forums.digitalpoint.com/showthread.php?t=2376302
And: http://www.webhostingtalk.com/showthread.php?t=1116999


urlQuery can't connect here: http://urlquery.net/report.php?id=20813

To even raise more suspicion, the link it was trying to receive was in subfolders. ???
Familiarize Yourself! | Educate Yourself! | Beautify Yourself! | Scan Yourself!
"People who say it cannot be done should not interrupt those who are doing it."

xdanx

  • Guest
Re: Why you can't decide what Avast blocks or not?
« Reply #10 on: February 13, 2012, 01:46:19 AM »
if the file you have is not the same as i found on the net, then take the file you have, upload it to virustotal.com and test it
when you have the result, post the scan link
Hi xdanx,

We are not here to promote hacks or anti-cheat plug-ins. They usually come with spyware like kontera for instance, etc. So this could never be given as a general advice to users. So the only way forward as I see it,  is trying to get it whitelisted on good grounds. Why don't you give us the download file path, so it can be checked. Take care to make that  link non-click-through like with hxtp or wXw etc.,

polonus
Indeed file named isn't the one from the website, but checking that one too, I have found it detects two things too (not the same, though): https://www.virustotal.com/file/e05b37c1cc7fb0cc4602100097dbb4c55d40e340a7788b03d696a9996437b9c0/analysis/1329093769/
Avast itself doesn't detect them, though.


@xdanx: sXe conflict with avast should be fixed already in v6. I contacted sXe's author and we fixed it together. If you still have a problem, please send me sXe logfile (it should be created somewhere, or it's displayed on screen) so we can look at it again. Thanks.
Well that's weird because using the last version I do get problems with that specific program too. Though I must say logs are saved in spanish, because that's how my windows is configured. I could anyway give it a quick  translation to the side-notes if you need, but I've attached the original file.

I have had conflicts with some other programs but I haven't been able to get this one to work.
« Last Edit: February 13, 2012, 01:50:16 AM by xdanx »

Offline pk

  • Avast team
  • Super Poster
  • *
  • Posts: 2078
Re: Why you can't decide what Avast blocks or not?
« Reply #11 on: February 13, 2012, 11:25:17 PM »
@xdanx, thanks for logfile. I contacted sXe's author and he said it seems an app blocked sXe driver from loading. It's quite strange, because avast doesn't block drivers (only if you run CS in the sandbox/autosandbox), mmm.

Your first post is quite general, can you please share your personal experience with CS + sXe + avast? I mean, have you always had a problem with sXe + avast, or e.g. it started with last sXe program update? Can you please try to turn off behavior shield and test it again?

xdanx

  • Guest
Re: Why you can't decide what Avast blocks or not?
« Reply #12 on: February 14, 2012, 02:33:24 AM »
@xdanx, thanks for logfile. I contacted sXe's author and he said it seems an app blocked sXe driver from loading. It's quite strange, because avast doesn't block drivers (only if you run CS in the sandbox/autosandbox), mmm.

Your first post is quite general, can you please share your personal experience with CS + sXe + avast? I mean, have you always had a problem with sXe + avast, or e.g. it started with last sXe program update? Can you please try to turn off behavior shield and test it again?
Thing is that I haven't played the game for a long time, so I haven't used sXe either. Last time I did, I think I had a different product installed, so I don't have a previous experience to compare with. What I have seen so far is that uninstalling avast automatically makes sXe work. In fact, I opened sXe to try and it worked, then I reinstalled Avast! and when I closed and re-opened sXe, it started with the error message (something like "Load error, try again").

That's basically why I don't think it is a different program the one causing the problem.

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48523
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Why you can't decide what Avast blocks or not?
« Reply #13 on: February 14, 2012, 02:44:52 AM »
@xdanx, thanks for logfile. I contacted sXe's author and he said it seems an app blocked sXe driver from loading. It's quite strange, because avast doesn't block drivers (only if you run CS in the sandbox/autosandbox), mmm.

Your first post is quite general, can you please share your personal experience with CS + sXe + avast? I mean, have you always had a problem with sXe + avast, or e.g. it started with last sXe program update? Can you please try to turn off behavior shield and test it again?
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

xdanx

  • Guest
Re: Why you can't decide what Avast blocks or not?
« Reply #14 on: February 14, 2012, 03:07:33 AM »
@xdanx, thanks for logfile. I contacted sXe's author and he said it seems an app blocked sXe driver from loading. It's quite strange, because avast doesn't block drivers (only if you run CS in the sandbox/autosandbox), mmm.

Your first post is quite general, can you please share your personal experience with CS + sXe + avast? I mean, have you always had a problem with sXe + avast, or e.g. it started with last sXe program update? Can you please try to turn off behavior shield and test it again?
I did, as I said in my first post, I completely disabled avast, all the shields, and it didn't change anything. Even tried again now just to be 100% sure, and nothing has changed.
« Last Edit: February 18, 2012, 05:33:38 PM by xdanx »