Threat blocked popup

system · 2017-05-23T11:47:23.000Z

I got a Threat Blocked popup, but cannot find any info about what it did.
I grepped around the avast directory in Program Data and didn’t find anything, nothing in virus chest.

Asyn · 2017-05-23T11:49:53.000Z

Post a screenshot.

system · 2017-05-23T11:56:35.000Z

I didn’t see anything in the post buttons to upload a jpg, found it now.

(and hasn’t anyone told the forums people that machine are way better at reading those stupid letter obfuscation pictures than many people are?)

Asyn · 2017-05-23T11:59:36.000Z

chris706 post:3:

…reading those stupid letter obfuscation pictures than many people are?

Only needed for your first 3 posts. (Spam protection)

Eddy · 2017-05-23T14:03:35.000Z

https://forum.avast.com/index.php?topic=194892.0

system · 2017-05-23T22:54:33.000Z

So, program does something but doesn’t record it?
Or doesn’t do anything, but tells you it did, and provides no way to check?

Eddy · 2017-05-24T07:46:22.000Z

It detected something and handled it, told you what it did and also recorded it (log).

system · 2017-05-24T11:18:37.000Z

Eddy post:7:

It detected something and handled it, told you what it did and also recorded it (log).

No it didn’t, as far as I can tell.
That is the whole reason for this thread.

Eddy · 2017-05-24T13:12:30.000Z

Yes it did, look at the image you posted and read what is on it.
It clearly says DETECTED and BLOCKED.

system · 2017-05-25T01:44:12.000Z

and it is clearly hiding something that I want to know, and THERE IS NO LOG

p.s. I DON’T CARE WHAT IT SAYS, I want to see what it did.

Eddy · 2017-05-25T06:16:36.000Z

The text on the image very clearly is telling you what it did.
avast blocked a thread, there isn’t anything more to see.

There is a log unless you disabled the creation of log files.

DavidR · 2017-05-25T07:58:11.000Z

@ Eddy
Given that the attached image is showing an IDP.ALEXA.51 detection, I would suspect that the IDP. part would indicate that this is the Behaviour Shield at work.

There are very few settings for the Behaviour Shield (attached image) and none indicating the Generation of a Report File (log), unlike the settings in File System Shield that has a Report File section in its settings.

system · 2017-05-25T15:31:09.000Z

Eddy post:11:

The text on the image very clearly is telling you what it did.
avast blocked a thread, there isn’t anything more to see.

There is a log unless you disabled the creation of log files.

The text very clearly says c:.… which is not a valid path, so no, it is not telling me AT ALL what it did, only giving a vague idea that something happened, somewhere.

Eddy · 2017-05-25T15:35:24.000Z

You can see more in the log file.

system · 2017-05-26T11:23:21.000Z

chris706 post:1:

I got a Threat Blocked popup, but cannot find any info about what it did.
I grepped around the avast directory in Program Data and didn’t find anything, nothing in virus chest.

Really? as everyone can see I already said that I looked for it.
Care to explain what magical hidden file that would be Eddy?

DavidR · 2017-05-26T12:58:05.000Z

chris706 post:15:

chris706 post:1:

I got a Threat Blocked popup, but cannot find any info about what it did.
I grepped around the avast directory in Program Data and didn’t find anything, nothing in virus chest.

Really? as everyone can see I already said that I looked for it.
Care to explain what magical hidden file that would be Eddy?

@ chris706
If this is as I believe a behaviour shield alert then there may not be log for detections. But we don’t have any clear indication that this is the behaviour shield at work.

As I mentioned in Reply #11, there is no option to generate a log (but one appears to have been created).
That said there is this file C:\ProgramData\AVAST Software\Avast\report\BehaviorShield.txt, but for me all that records for me is the started and stopped times for the behaviour shield. This could well be that I have not had a behaviour shield alert on this win10 laptop, but the Report folder is generally where the generated file is saved.

system · 2017-05-27T14:03:46.000Z

DavidR post:16:

chris706 post:15:

chris706 post:1:

I got a Threat Blocked popup, but cannot find any info about what it did.
I grepped around the avast directory in Program Data and didn’t find anything, nothing in virus chest.

Really? as everyone can see I already said that I looked for it.
Care to explain what magical hidden file that would be Eddy?

@ chris706
If this is as I believe a behaviour shield alert then there may not be log for detections. But we don’t have any clear indication that this is the behaviour shield at work.

As I mentioned in Reply #11, there is no option to generate a log (but one appears to have been created).
That said there is this file C:\ProgramData\AVAST Software\Avast\report\BehaviorShield.txt, but for me all that records for me is the started and stopped times for the behaviour shield. This could well be that I have not had a behaviour shield alert on this win10 laptop, but the Report folder is generally where the generated file is saved.

Right, thanks. That was my take on that file too, start and stop times, nothing useful.
I was hoping someone knew more.

DavidR · 2017-05-27T15:39:33.000Z

You’re welcome, I’m only sorry that this wasn’t more productive.

Alikhan · 2017-05-27T17:25:07.000Z

IDP detections come from the Behaviour Shield. However, what it is blocking isn’t very clear since the path can not be clearly seen.

If there’s nothing in the logs, I doubt you will find out what it is.

Announcements