App Review Avast's Behavior Blocker (Tested IDP Only) against ransomware

[erreale]

I was sure that he would do very well. But something went wrong.

 

[Av Gurus]

You should put in title that is only Avast IDP tested, others layers are off.

 

[erreale]

You should put in title that is only Avast IDP tested, others layers are off.

Ok, I follow your advice.

 

[Captain Awesome]

Thanks for the test.Avast hardened mode is useless if you put off file system shield.Also avast CC not working because avast hardened mode is on.

 

[Evjl's Rain]

IDP/behavior shield has no protection against petya.
You tested petya too soon so avast failed quite early

I perfomed a similar test and left petya at the end of the video and obviously it couldn't protect

someone posted my avast IDP video on avast forum and they smashed me because I disabled the other modules, the test was invalid, not a bypassed, those 3 modules had a link to each other and should not be disabled... bla bla bla

 

[jamescv7]

Avast components are likely connected to each other and if you disable one of them, hence will turn into soft protection only.

e.g Hardening Mode must be enable as it can determine quickly if the file is unrecognized regardless if no internet connection to retrieve immediate information.

 

[Evjl's Rain]

Avast components are likely connected to each other and if you disable one of them, hence will turn into soft protection only.

e.g Hardening Mode must be enable as it can determine quickly if the file is unrecognized regardless if no internet connection to retrieve immediate information.

even though they are connected to each other, which is not verified, the avast dev. didn't say it clearly, avast IDP in malware hub test perform similarly to itself testing alone.

I dont really see any connection here

 

[RejZoR]

IDP/behavior shield has no protection against petya.
You tested petya too soon so avast failed quite early

I perfomed a similar test and left petya at the end of the video and obviously it couldn't protect

someone posted my avast IDP video on avast forum and they smashed me because I disabled the other modules, the test was invalid, not a bypassed, those 3 modules had a link to each other and should not be disabled... bla bla bla

This is not true. It protects against Petya (seen it myself, IDP only). I'm just not sure what was the case here.

 

[Evjl's Rain]

This is not true. It protects against Petya (seen it myself, IDP only). I'm just not sure what was the case here.

not for me. I have tested it several times but it always failed
perhaps you tested with a different sample/variant which could be blocked

by the way I have seen the same samples blocked by AVG's IDP but missed by avast's IDP and opposite in malware hub. It was inconsistent

 

[RejZoR]

You should contact avast! team. Or, if you can pack the Petya sample and drop a link to my PM (or at least the hash so I have a reference point). I'll talk to the guy in charge for IDP now that we have direct contact with the avast! guys I can poke them why this is happening.

 

[erreale]

You should contact avast! team. Or, if you can pack the Petya sample and drop a link to my PM (or at least the hash so I have a reference point). I'll talk to the guy in charge for IDP now that we have direct contact with the avast! guys I can poke them why this is happening.

I could send you via PM the link to download the sample Petya I used.

 

[erreale]

RejZor you have a MP!