Feature Request: An option to treat unsigned files as signed

Avast Free Antivirus / Premium Security
1

Hello,

If you make some minor changes in signed exe files (e.g. change firefox.exe icons with a resource editor), Avast loads tens of extra DLLs when running the file.

  • You can test it by creating a dump file.

I’d like to have an option to white-list that file and make Avast treat it as signed.

Thank you.

2

I don’t think avast will ever treat it in the same way as a signed file as that is quite a big deal in a file being on the white list.

There is nothing to stop you adding it to the exclusions.

3
An option to treat unsigned files as signed
That is like saying treat malware as trusted >:(
4

Hi DavidR,

Thanks for replying. I appreciate it.

If and when you have some free time, could you please test your suggestion?
I currently don’t have Avast installed on my machine, but when I did - excluding the file didn’t make any difference.

Regards.

5

I don’t know what it is you want me to check as I don’t know what your problem is exactly - but I have done many exclusions of a long time for various things and my exclusions have worked (not knowing what shield/function was involved).

What I can’t test is what I don’t know, if you have tried exclusion/s, what was the text of the exclusion and which exclusion was it entered in, e.g. to see if it can be replicated and why it didn’t work.

6

Thanks again David.

So, if it’s not much of a trouble.

  1. Run Firefox.

  2. Create a dump file with your Task Manager (I use Process Hacker - the best TM IMO).

  3. Open the dump file and count the number of Avast DLLs (probably one).

  4. Backup your firefox.exe.

  5. Change anything in firefox.exe (e.g. icon, version etc.) and save the file. (I use Resource Hacker).

  6. Run Firefox.

  7. Create another dump file with your Task Manager.

  8. Open the new dump file and count the number of Avast DLLs (probably over 15).

I simply don’t want Avast to load tens of extra DLLs if I make a minor change in firefox.exe.

I’d really appreciate it.

7

Please post the two lists (i.e. the full names of those DLLs).

8

@ Yaron10
If you look at my signature under my posts you will see that this system is XP Pro SP3 and task manager doesn’t support creation of a dump file.

It would certainly be wise to take advantage of Igor now he has joined the topic and give a list of the DLLs if you can.

9

@David,
Thank you! I appreciate your good will.

@Igor,
Thank you too.

Some months ago I corresponded with an Avast team member (Ticket # DCS-927-82633), sent him the dump files, and the bottom line was he didn’t understand the problem and this is how Avast should work.

I switched back then to another AV, but I’d like to reinstall and use Avast if the problem was fixed.
Would you be kind enough to reproduce and test it yourself?

  • I’d really appreciate it.