Have to turn Avast OFF to format virtual drive: Why is there no warning?

I spent hours last night trying to format a virtual drive created by the BestCrypt program. I did multiple installs and removals only to find the trouble was Avast not the program itself.

I tried to put the command line into Avast for the BestCrypt program but it didn’t make any difference, I had to disable Avast to format the virtual drive/container I had made.

While I appreciate the thoroughness of Avast it might be a nice feature when Avast is stopping something from executing to have a warning on the screen indicating that Avast is preventing something from running. As it is now you are in the dark when a program won’t run.

Now I know better and will always look to Avast when something is awry…:frowning:

Another lesson learned… the hard way.

Thanks,

J T

Check the Behavior Shield report file and see if the programs executable (or associated file) is listed in the report as being blocked.

C:\Documents and Settings\All Users\Application Data\AVAST Software\Avast\report\BehaviorShield.txt (XP) C:\ProgramData\AVAST Software\Avast\report\BehaviorShield.txt (Vista, Win7).

If so you can add it to the Behavior Shield, Expert Settings, Trusted processes, see image example.

@Tinsby

I have to admit that I can’t understand your post.

There are 3 possible interpretations, or at least I thought about 3 different situations while reading your post.

A)
If Avast is stopping your program from being executed because Avast considers that program “might” be somehow a security risk, then Avast displays a warning. What exactly happens next, depends on your settings. You need to consider the “default” settings and what type of notifications are allowed (like “silent mode” and others).

B)
You can exclude the “problematic” program, a complete folder or whatever you want. Of course, if you are going to run a program that “acts” on the complete partition/HDD (for example), then it might trigger Avast scans, according to your settings.

C)
You could stop all or part of Avast’s shields. One simple way would be:
-Right-click over the tray icon of Avast;
-Avast shields control;
-Select the option you want.
Or, you could use the main GUI for each shield.

I apologize if all these situations are not related to what you are trying to explain. I just couldn’t understand your post clearly enough.

From what I understood, that’s exactly the problem, he didn’t get any warning, the program was silently blocked.

Thanks for the speedy reply to my question, I’m sorry that I wasn’t clear enough in my explanation for you to understand therefore I will reiterate, hopefully this time it will be more clear.

I use a program called Best Crypt it allows you to create virtual “containers” that can be mounted and dismounted as need be, these containers are password protected and encrypted. I was using Best Crypt to create a new container for sensitive data. In the program you specify the size of the container and the location and the name. The final operation that takes place after the container has been created is to format that container, using of course either NTFS or FAT. When I reached that portion of the container creation I was presented with the Windows pop-up menu that allows you to choose " Quick Format". When I clicked on the option to start that process and machine locked up I was unable to format the newly created container. There was no warning from Avast that the formatting process was being halted, this led me to believe that somehow my Best Crypt program was to blame. So I did multiple uninstalls and reinstalls of that program all to no avail.

My point is simply this and it should not be that hard to understand, if Avast is going to halt a process or a program or an operation it would seem to me, that there would be some sort of a warning letting you know what Avast is doing. I was experiencing the exact same behavior from Avast as I did a number of days ago with my MP3 player which of course Avast prevented from running as well, thinking that somehow or other it was suspicious. It was then I decided to disable the Avast protection, and voila, I was able to format the new container I had made using Best Crypt.

I have looked in Avast for any indicators showing a command line to the formatting process but needless to say there is none, so therefore I have nothing to enter into any portion of the scanner to allow the format to precede the next time I want to do it. Of course now I am wiser and will simply disable Avast do the quick format which only takes about 2 seconds and reenable the program no big deal.

I don’t see any way in avast to enable any sort of warning that it is preventing a process or a program from running.

That’s my story and I’m sticking to it!

Thanks,

J T

Well we don’t know which shield it is and the only one I can think of that might be in there is the behavior shield, that is why I suggested looking in that report file for information, but no answer on that question.

The behavior shield if I remember correctly is set to Auto (so you wouldn’t get an alert), in the Expert Settings, Main Settings, so if that were set to Ask, if it were that shield you would at least get a notification and you can elect to allow and to add to the trusted processes.

Another option you could try is to uncheck the Monitor the system for unauthorised modifications or possibly the Monitor the system for malware-like behavior. However, both od these could have consequences if the changes or behavior is actually malware.

@Tinsby,

Thank you for taking the time to explain.

Adding the processes as trusted and adding to the exclusions lists both folders (where the program itself resides, and the one where the containers are created), maybe could help?

For the processes, DaivdR already explained. For the exclusions, there are 2 lists; one in the general exclusions/exceptions settings, and the other inside the file system shield settings.

And evidently pausing the shields from the tray icon is another choice.

But of course, whichever the method you feel would be easier and safe, go for it.

Thanks again for the clear explanation.