I’m running build 4.6.665 and Windows ME. I’m having a problem (I think) with the behavior blocker. Whenever a “suspicious action” occurs and the “ignore” option is chosen the bb seems to go off completely, that is, I can do anything with any file type without causing an alert. Stopping the standard shield provider and restarting it doesn’t restart it. The only way to turn it back on is to restart the computer. Is this normal? What exactly does the ignore button do anyway? I saw that it is supposed to “stop any similar action,” (or something like that) but what does this mean?
I’m not giving you the answer, as I’m not an expert on Me behavior.
But, Behavior blocker is a feature for ‘very old’ virus… Most users don’t have to botter with it anymore.
What action are you trying to block?
In my understanding, the behavior blocker is supposed to block “virus-like” activities from occurring, namely, opening files for writing and renaming and deleting files. It also blocks your hard disk and floppy disks from being reformatted by a virus.
For example every time I start my isp I have to “OK” the opening for writing and renaming of a .chk file. Similar thing for some .dll’s associated with avast itself once in a while.
I think that’s what the “Ignore” button is supposed to do - ignore given filetype for the rest of the computer runtime (i.e. until restart).
The fact is, however, that the current implementation of the Behavior Blocker is not very useful today. Too many programs open executable files for writing even when they don’t need it (i.e. they intend only to read them) - so, the "Open for writing’ action has way too many false alarms.