hallo,
I just upgradet to 5.1.889 from 5.0. I dont remember if 5.0 did have option to change settings in behavior shield, but I changed the setting there to always ask about intrusted applications.
after that I got notification from Behavior shield (see attachment). Target is Registry\Machine}system\Controlset001\services\TrustedInstaller\start
Is this normal? Which action to take?
Why services.exe is not trusted?
Allow and add to trusted processess.
This is normal process that you can safely allow 
AFAIK, I think the main point is avast! is picking up on the changing of the reg key, causing the alert.
This is why avast! have elected to have the behavior shield in a “passive” mode for a while so that the lists can be populated and the shield can be calibrated better.
I myself would just leave the setting’s of the BhS on allow untill the shield is fully working in version 6, that way alot more of the system program’s will have been added to the white list’s.
What spg SCOTT said ;D
I leave mine set to allow. Even when the behavior shield is fully functional I think I will keep it on allow unless there are any strange problems on my computer. I would have to get comfortable with it first.
This is interesting from pk in another post regarding the internal workings of the behavior shield.
You want to change it back to allow? (and not get the alerts?)
Open avast! → ‘Real Time Shields’ tab → ‘Behavior Shield’ tab → ‘Expert Settings’ Button → Main Settings → Change the action to ‘allow’
Scott
you mean change to “allow”
Yep, sorry about that