I have Avast free edition v6 fully both the program and the virus definitions fully updated on Windows XP Home SP3 also fully updated with all patches from Microsoft except for IE8, I chose to stay with IE7 because IE8 didn’t render too many sites correctly regardless of whether compatibility mode was on or not.
I also have Steam. (Who doesn’t?) Lately I’ve noticed that I have to temporarily turn off Avast’s real-time shield when Steam needs to update a game so I decided to simply exclude Steam from being scanned by defining “C:\Program Files\Steam*” (minus the quotes) as an exclusion but this doesn’t appear to work, Avast still interferes with Steam unless I turn off real-time scanning.
I’ve seen this problem with earlier versions of Avast as well, There have been times when I found Avast’s real-time scanner would interfere with other programs, so I’d define an exclusion to stop the interference but nothing short of turning off real-time scanning works.
From what I’ve seen the behavior with or without real-time scanning is exactly the same which leads me to believe that Avast’s exclusion system doesn’t work.
There are two areas for exclusions, the avastUI, Settings, Exclusions that are for on-demand scans and the File System Shield, Expert Settings, Exclusions, the latter is the one you need.
Is this the one you did ?
Secondly you should exclude only files rather folders as that leaves a hole in security.
Note: When using the Browse button it only goes down to folder level accept that. Now open the entry in the exclusions and change the * to \file_name.exe where file_name.exe is the file you want to exclude.
Lastly - Anything that you consider a false positive, shouldn’t just be ignored (avira speak) or excluded from scans (avast), that is shooting the messenger rather than treating the problem.
Confirm by examination (virustotal) that it is indeed an FP, if so send the sample for analysis and correction of the detection signature plus inclusion in a signature update. This helps all avast users.
Yes, the file system shield expert settings is where I set the exclusion.
I am not getting a virus alert. What I am getting is that Steam hangs when it tries to update a game and eventually times out with an error. Temporarily turning of the real-time shields resolves the problem. Since it isn’t a single file as far as I can tell, excluding everything in the Steam folder is the most practical way to go.
But whether or not it’s wise to exclude a whole folder isn’t the issue here. The issue is that the exclusion system doesn’t appear to work since adding an exclusion to resolve a conflict has no affect.
That must be a Vista/Windows 7 path, since I am running XP Home, I found the file at:
C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\report\BehaviorShield.txt
Both the BehaviorShield and FileSystemShield reports end with:
*
* avast! Real-time Shield Scan Report
* This file is generated automatically
*
* Started on: Sunday, August 28, 2011 8:08:08 AM
*
8/28/2011 8:08:21 AM Modification of: \REGISTRY\USER\S-1-5-21-1844237615-2147015713-682003330-1004\Control Panel\Desktop\TileWallpaper
By: C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
Via: C:\Program Files\XemiComputers\Active Desktop Calendar\ADC.exe
-> Action allowed
*
* Shield stopped: Sunday, August 28, 2011 5:17:39 PM
* Run-time was 9 hour(s), 9 minute(s), 31 second(s)
*
*
* avast! Real-time Shield Scan Report
* This file is generated automatically
*
* Started on: Sunday, August 28, 2011 5:27:39 PM
*
The last two entries show where I stopped the shields for 10 minutes to allow Steam to update the game after it had already failed even with the exclusion in place.
Unrelated: How do I contact the admins of this forum, I want to change my signature but that feature appears to be hidden, under Profile all I get to change is the Account Related Settings.
I just saw the dreaded Vista in your signature so gave you that path ;D
Unfortunately much of your forum profile (including your signature) is locked until you have 20 posts.
The problem comes from drive by spammers, who having registered put objectionable or commercial links in their profile signature to try and gain link promotion, etc.
There have also been cases of the PM function being abused to spam forum members, so you will notice that you can’t use the PM function either.
Unfortunately because of the actions of others, legitimate members suffer by the actions to prevent this spamming.
Whilst based on the behavior shield log not showing anything blocked, I don’t know if that is what is stopping it; you could try settings the behavior shield to Ask rather than Auto and see if it at least throws up any pop-up. I might be that during the time that it is examining the function the steam connection, etc. fails.
You will have to excuse me as I have zero experience of gaming/steam.
I did some exploring in Avast and found the behavior shield, looking at the expert settings, I decided to add Steam to the approved processes list (which was empty) so it wouldn’t be monitored. Now I just have to wait for the next game update to see if that resolves the problem.
OK, I understand about the 20 post restriction, I administer the forum for my employer so I’ve been on the receiving end of the spammers. I’ve found that most CAPTCHA systems have been hacked so the spammers can get past them, the only real security you can get there is to create your own CAPTCHA. Our forum isn’t as active as most since our market is somewhat vertical so we now require users contact us to request access to the forum.
I’m not going to go on a posting spree to get my 20 posts, so I’ll just have to wait.
Why not? All the empty log means is that Avast didn’t have any detectable problems to log which makes sense since it isn’t Avast but is Steam that is having the problem.
Anyway, it’s now a waiting game for the next game update to see if the behavior shield adjustment helped.
An empty log to me means there was no activity on which the behavior shield made a decision to Allow (these decisions are also recorded) or Block, in which case I believe you would have had a notification.
There was no behavior shield in 4.8, in 5.0 it was introduced but was very basic, slight improvements in 5.1 and major improvements (more rules and filters, etc.) in 6.0.
That is the problem, chicken and egg, if there are no entries in the behavior shield log; then I can’t see how adding an entry for whichever file in the Trusted processes will work.
This is right back to where I said as much in Reply #10, if there is no reference in the behavior shield ever having taken any action on that file, be that block or allow. But it won’t hurt to try it.
I have just read this from one of the avast team in another topic related to Steam, that there have been some changes in the avast beta 6.0.1273 to resolve that, so it would be worth a shot.
I have this same problem just seemingly random happen. I am being asked to update avast, and I’m too busy for a reboot, so I know it’s not caused by an update. All of a sudden the folders I have in the excluded settings, (both File System shield and normal scan settings), are being ignored. It used to work but now (randomly?) it does not. I checked the settings and the folders in question are still listed there, but being completely ignored by the program. Now Avast deletes my files whenever i use them, saying virus (which its not even BTW), and deleting my files. NOT cool… I’ve used Avast since a company I used to work for thought it was decent enough… (5 Years now), and if this problem cant be resolved I’ll be switching to something else.
