Advice Request How to Configure, Protect and Run Programs Blocked by Avast Hardened Mode

Please provide comments and solutions that are helpful to the author of this topic.

Status
Not open for further replies.

Ink

Administrator
Thread author
Verified
Staff Member
Well-known
Jan 8, 2011
22,361
How to Run Programs Blocked by Avast Hardened Mode (for All Users)

Includes:
  • How to Configure avast Hardened mode
  • How to Protect Avast with Protection control
  • How to Run Programs Blocked by Avast
  • Recommendations for inexperienced and experienced users


What is Hardened Mode? - Source

"Hardened Mode is a means of “parental control” for executable files.

When enabled, it is always running in the background and checking every process launched on the machine. The evaluation of files is based on their reputation coming from the cloud (controlled by the VLab).
  • In the Aggressive Hardened Mode, only chosen executable files with known high ratings are allowed; the rest gets prevented from running.
  • On the other hand, the Moderate Hardened Mode blocks only files which have bad ratings (and those which have no ratings at all, due to being new).
This is useful for inexperienced users who do not always know what exactly they are launching."



How to Configure Avast Hardened Mode?


Users of Avast Free Antivirus (including Pro Antivirus, Internet Security and Premier) can all access this setting from the General Settings from the Avast UI. Once enabled, there are 2 settings available to choose from; Moderate or Aggressive - differences are explained above.

Click OK to save changes.

"Use the Avast Hardened mode to further lock down the security of this computer. This is recommended for inexperienced users."
avast-hm-settings.png

Image: avast Settings - Hardened Mode enabled under General settings.



How do I know an App or Program has been Blocked?

Avast will notify you with a pop-up very similar to this, it will be labelled "Program blocked" with further details of the application's filename and location.

Example: C:\Program Files\...\BlockApp.exe

upload_2016-8-2_21-58-11.png

Image: avast Warning - Notification of an Application blocked from running.



How to Lockdown Avast from Misuse, Human Error or Inexperienced Users?

Not only is it important to make sure Avast is running 24/7 and up to date, it's also critical that Settings cannot be tampered deliberately by inexperienced users or disabled by malicious software.

Recommended: All users should use a password to protect core functions.

upload_2016-8-2_23-2-46.png

Image: avast Settings - Protect Avast with a password enabled under General Settings.



How Password Protection Control makes a difference?

Let's say this was a malicious program extracted from a suspicious email download for free bitcoins. The option to Add an Exclusion is still visible, but without the correct password no changes have been made.

upload_2016-8-2_22-47-10.png

Image: avast Warning - Notification of an Application blocked from running.

If the user closes the Authorization window or enters an invalid password, changes are prevented.

"An attempt has been made to enter a protected area of Avast (Protection control). This may be a legitimate action, but could also be the result of a malware attack".
upload_2016-8-2_23-0-23.png

Image: avast Warning - Notification of Authorization required to make changes to protected Avast settings.



How to Run any Blocked Program and View any Exclusions?

For demonstration purposes, here is an example of Hardened mode protecting a user from an application with a low file rating, and how easy it is to add exclusions.

If enabled, Protection control will prompt for a password before being allowed to modify the settings.

fPbCgBs.gif

Image GIF: avast with Hardened mode on Moderate. (2) Ran Messaging app. (3) Blocked by Hardened mode. (4) Clicked on Add an exclusion to allow program to run. (5) Opened Avast Settings to see all exclusions added under Hardened mode.



For the nerds: What actually happened above?

After the Anniversary Update for Windows 10 installed and because I have enabled Hardened mode, many of the new Windows Apps included in this update were being blocked.

Recommendations for All Users


As an Avast users for several years (on and off), I sincerely hope that this has been helpful and consider the following options when using Avast Antivirus:
  • Create an Avast Account for FREE to monitor and manage the status of your PC remotely.
  • Use the Recommendation scheme to protect your friends and families computers.
  • Enable Hardened Mode to bolster your already secure Windows PC.
  • Enable Protection control to prevent unauthorised changes to Avast.
  • Be vigilant before visiting shady websites, downloading suspicious email attachments, executing unknown program or adding exclusion to Avast.
Thanks for reading. :)

Typo alert
Formatting
 
Last edited:

shmu26

Level 85
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Jul 3, 2015
8,150
how does avast hardened mode compare to an anti-exe program, for instance, voodooshield?
for our purposes, let us ignore voodooshield's easy access to Virus Total score and other Ai extras. Let us just focus on the raw power to block malware. I guess what I am asking is: why do people go looking for anti-exe programs, if they can use avast hardened mode?
 

Atlas147

Level 30
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Jul 28, 2014
1,990
Thanks @Huracan ! Personally I think it would be good if users are able to submit exe files for whitelisting so that they can be run in hardened mode in the event that they are blocked initially. Sometimes it's a waiting game with Avast to see when they will whitelist the programme.
 
D

Deleted member 2913

Avast Hardened Mode works like Anti-Executable or HIPS? i.e
Anti-Executable = You execute & HM blocks & you exclude & no further blocks.
HIPS - You execute & HM blocks & you exclude & still further some files may be blocked.

@Huracan
You run Aggressive or Moderate Mode?

Aggressive follows Avast whitelist & blocks rest
Moderate blocks suspicious/low reputation

You mentined AU new windows apps were blocked So I wonder you are running Aggressive or Moderate Mode?
 
Last edited by a moderator:

Itachi Sempai

Level 2
Verified
Sep 20, 2017
93
Let us just focus on the raw power to block malware. I guess what I am asking is: why do people go looking for anti-exe programs, if they can use avast hardened mode
well avast blocks only executables but not bat files java files or other types
 
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top