Avast behavior shield[Need Improvements]

BeSecure · 2017-02-23T09:24:58.000Z

Avast behavior shield bit slow to react on ransomwares.Pls make it more quick by tweaking it.

Lord_Ami · 2017-02-23T09:28:37.000Z

This is general suggestion. It would be more helpful if you share VT results of samples that were faster than Behavior Shield.

That way they can study the samples

DavidR · 2017-02-23T10:13:00.000Z

Be Secure post:1:

Avast behavior shield bit slow to react on ransomwares.Pls make it more quick by tweaking it.

Do you really think that the aren’t always trying to improve detections for any of the scans!

Pondus · 2017-02-23T10:18:16.000Z

DavidR post:3:

Be Secure post:1:

Avast behavior shield bit slow to react on ransomwares.Pls make it more quick by tweaking it.

Do you really think that the aren’t always trying to improve detections for any of the scans!

Naaa they only sit in the lab and drink coffee, and only work on improvments if @Be Secure repeat it over and over again ;D

Rednose · 2017-02-23T11:32:09.000Z

You have to realise that Bahaviour Shield is a very complex technology, that uses the cloud as well :

https://blog.avast.com/behavior-shield-our-newest-behavioral-analysis-technology

Greetz, Red.

Eddy · 2017-02-23T11:37:45.000Z

Coffee ? Pilsen is only +/- 90 Km from Prague ;D

TrueIndian · 2017-02-23T11:51:14.000Z

Be Secure post:1:

Avast behavior shield bit slow to react on ransomwares.Pls make it more quick by tweaking it.

The technology is from avg and its a little new in Avast so give it time.

If you have any specific samples that IDP misses please post virustotal links here so Avast! Team can look and try to respond to your call.

They always work hard to improve the product but just plain suggestions don’t help them when it comes to protection.

BeSecure · 2017-02-23T13:32:32.000Z

Lord_Ami post:2:

This is general suggestion. It would be more helpful if you share VT results of samples that were faster than Behavior Shield.

That way they can study the samples

I have send this sample to viruslab.Btw it is blocked by Filerep.(Now)
TheTrumpLocker
https://www.virustotal.com/en/file/08bd44c06513a5b490595560dc5eefff70f2ececfe72c6b9817310238038ef6c/analysis/
This file earlier encrypted my VM and IDP works after encryption.

BeSecure · 2017-02-23T13:38:52.000Z

DavidR post:3:

Be Secure post:1:

Avast behavior shield bit slow to react on ransomwares.Pls make it more quick by tweaking it.

Do you really think that the aren’t always trying to improve detections for any of the scans!

No i am not saying so.@DavidR
It is a general suggestion.

BeSecure · 2017-02-23T13:40:55.000Z

Rednose post:5:

You have to realise that Bahaviour Shield is a very complex technology, that uses the cloud as well :

https://blog.avast.com/behavior-shield-our-newest-behavioral-analysis-technology

Greetz, Red.

Thnks@Rednose.I regularly read avast blog post.

BeSecure · 2017-02-23T13:42:14.000Z

TrueIndian post:7:

Be Secure post:1:

Avast behavior shield bit slow to react on ransomwares.Pls make it more quick by tweaking it.

The technology is from avg and its a little new in Avast so give it time.

If you have any specific samples that IDP misses please post virustotal links here so Avast! Team can look and try to respond to your call.

They always work hard to improve the product but just plain suggestions don’t help them when it comes to protection.

I knew that.

DavidR · 2017-02-23T14:47:40.000Z

Be Secure post:9:

DavidR post:3:

Be Secure post:1:

Avast behavior shield bit slow to react on ransomwares.Pls make it more quick by tweaking it.

Do you really think that the aren’t always trying to improve detections for any of the scans!

No i am not saying so.@DavidR
It is a general suggestion.

Well Generally that is exactly what they are doing all of the time, so they hardly require a general suggestion to continue what they are doing

TrueIndian · 2017-02-23T17:15:59.000Z

Be Secure post:8:

TheTrumpLocker
https://www.virustotal.com/en/file/08bd44c06513a5b490595560dc5eefff70f2ececfe72c6b9817310238038ef6c/analysis/
This file earlier encrypted my VM and IDP works after encryption.

This is something that I have seen in AVG in the past where it’s too late to detect the threat.I am not sure if this is intended behaviour though…

Announcements