Author Topic: Remember your users' history  (Read 1543 times)

0 Members and 1 Guest are viewing this topic.

Offline Kwartet!

  • Full Member
  • ***
  • Posts: 175
Remember your users' history
« on: April 18, 2012, 07:18:32 PM »
Considering this thread https://forum.avast.com/index.php?topic=97343.0

It would be wise for avast to remember that some programs have been running reliably for years (no malware/virus etc.). Yes, I understand that an update to said program could be a reason for distrust. But an update to avast is not a sufficient reason after running said program (unchanged) for a year. Three months? One month?

Regards,
Theo Peterbroers
Athlon64x2, 2GB, XPProSP3, 32 bit | Windows Firewall | FF15 sandboxed by Avast, NoScript, TrafficLight, WOT | AIS7.0.1466, EMET, USB-set | MBAM (on-demand)

Offline DavidR

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 84912
  • No support PMs thanks
Re: Remember your users' history
« Reply #1 on: April 18, 2012, 07:42:17 PM »
How do you suggest that avast 'remember' what has been running 'reliably' for years ?
The fact that it might not have been infected for years (and the autosandbox isn't saying it is infected), doesn't mean it can't be infected.

So I would suggest reading my reply in that topic, http://forum.avast.com/index.php?topic=97343.msg776809#msg776809.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.3.2459 (build 21.3.6164.561) UI 1.0.609/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Kwartet!

  • Full Member
  • ***
  • Posts: 175
Re: Remember your users' history
« Reply #2 on: April 18, 2012, 11:06:40 PM »
Hi DavidR, thanks for your reply.

IF a program has not been detected as containing malware for a certain amount of time (one year, three months, one month, whatever) AND did not undergo a recent update or change, THEN avast might consider a new detection in this program as caused by its own update. Recent effect implies recent cause. Programs that are seldom updated do exist.

Of course the program might be recently infected, but this would count as a change. Does avast not remember some hash digit of executables?

Regards,
Theo Peterbroers
Athlon64x2, 2GB, XPProSP3, 32 bit | Windows Firewall | FF15 sandboxed by Avast, NoScript, TrafficLight, WOT | AIS7.0.1466, EMET, USB-set | MBAM (on-demand)

Offline DavidR

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 84912
  • No support PMs thanks
Re: Remember your users' history
« Reply #3 on: April 19, 2012, 12:32:57 AM »
But as has been said the autosandbox notice (which is what the topic you linked to is all about) isn't one of containing malware.

There is as far as I'm aware no recording of hashes, etc. this would be a very large overhead and would have to be created/maintained and constantly referenced. For any such checks there would be a resulting performance hit.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.3.2459 (build 21.3.6164.561) UI 1.0.609/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security