I haven’t made any changes to my system but it doesn’t seem to be scanning too much, if I start a program, it will scan it, the first time it starts then it won’t scan it if I start again, I don’t pay much attention to the Avast Behavior Shield and I don’t notice anything odd running on my system. Avast and Malware Byte Scans come back with nothing odd.
I could be wrong on this, but it doesn’t seem to be scanning as much as it should, it might just be simple paranoia though as I don’t know how the shield works all that well.
On my XP Pro system the Behavior Shield doesn’t scan that much, but I have also made some changes in the behavior shield, I have unchecked the ‘Monitor the system for unauthorised modifications’ option as my firewall and WinPatrol Plus monitors that.
So that would reduce my overall activity, I have just rebooted after a beta version update and I only have 2/0 shown.
Ah yes, I am using Windows XP SP3 and I haven’t made any changes and it has about 176 scans after about running for an hour, but most of those came from me starting up various programs to see if they would scan, so maybe things are okay and I just haven’t payed any attention to it before. I just could of swore if I used command prompt and then pinged google it would show up as a scanned process on the Behavior shield but that was quite awhile ago.
For some reason XP has generally had a lower rate that say win7, but 176 is quite a lot as it isn’t going to be anywhere close to the other shields file system shield, which is scanning virtually all executable/modified/creation activity or the Script Shield, which is going to be scanning virtually all script activity. It is only recently that we (read, me) have started to see any activity by the script shield on XP.
Sometimes I see the file: asfsipc.dll inside system32 being scanned, I don’t know what it is and it’s hard to find information on it online, does anyone here know?
Well VirusTotal said nothing about it when I uploaded it to be scanned, so I think I’m fine.
For me the behavior shield is still sat on 2/0, but that doesn’t bother me, given I have unchecked what is likely to give the most checks.
You are highly unlikely to find anything on virustotal for files that the behavior shield scans as it isn’t looking at conventional signature detections, like the other scans and I don’t know if the behavior shield function could be replicated on virustotal.
If it were infected then the likelihood is that the file system shield would have alerted.