Avast! 8 Beta?

Is there a memory leak in the latest beta?

I watch the Avastsvc.exe jump from about 2 megs and climb to almost 23 megs. Then it drops back down to about 632k and slowly back up to 23 megs.

Dunno if this is normal behavior, just something Ive noticed today.

VM running gulp, Windows XP with SP3.

 

They have completely improved 0 day protection with the improvements of FileRep sandbox dynamic analysis and those Evo-Gen detections.

 

When running chrome sandboxed how can i save bookmarks.On emptying sandbox the new bookmarks are gone.I have tried selecting different options in settings and it makes no difference

 

It means that AVAST have improved 0-day protection and not the opposite

 

Yes it sounds normal, at least for Avast. I mean 23MB isn't that much as I would count it as a memory leak IMO. Would it be 200MB then I can understand the concern And as long as it's being released (MB usage goes up and down) then no problem I would say.

 

Roger that. Just bringing it up. But yeah, not to worried about 23MB for sure. I seem to remember another AV having a huge memory leak some time ago.

 

Haha Yes, but not to worry. It will get fixed by a module update ASAP.

 

If you think it's abnormal behavior, report the issue. They are very accurate regarding BSOD's and memory leaks so if there is one, they'll fix it.

 

How does one report it?

Thanks.

 

Watch it
http://www.youtube.com/watch?v=vZHjLncg0hc
Wow those Evo-Gen ....

 

i cant Even have Audio on, becouse of annoying.

 

Interesting review... imbecile reviwer.

 

Guys - someone else mentioned previously that the YT reviewer has a developmental disorder. So let's not be harsh.

 

It's not the same reviewer.

 

he is mean post 190. arent it him?


will avast premier have all benefits like internet security + more?

 

Dont you see it? avast evo-gen is helping detecting samples that generic sigs miss...so how there is no difference watch the videos first!

 

Evo-gen are basically "normal" signatures which are classified and generated by an Ai system. This means that all the gathered samples are much more quickly and fully automatically processed, signatures for them generated and submitted to end users as quickly as possible. This should prevent non-zero hour/day malware to get processed and detected much faster. The rest is left to the Auto Sandbox, Network Shield and FileRep and heuristics which are designed for zeroday stuff.

 

Evo-gen also seems a way to very efficiently describe a family of viruses, so perhaps it also replaces a lot of (heuristic) signatures to save storage space and keep avast lightweight.

 

I wonder how well avast! 8 will do, running alongside Comodo Firewall?

I know that version 7 runs fine with Comodo....running it now.

I'm just asking, since this is a new version and all.

 

Actually i was giving out the wrong info. Malware Similarity Search is sorting out the malware, Evo-Gen is a genetic algorithm that crunchs a large set of data and outputs its description which can then be used to detect large amounts of malware (if i understood the tech correctly).

Both together should result in very high detection with minimal overhead.
But unless someone from avast! team can explain more, then i'd say this is pretty much it.

You can read more about it here:
http://blog.avast.com/2012/12/03/new-toy-research-lab/#more-11102

 

rejzor,Any idea when is MDE heuristics coming...any idea??

So far been totally unable to infect my VM with avast 8 beta 2...nothing is getting through.

 

i did it
malware infect my Vm (protected by Avast 8 B2) and jump to host machine using VM's shared folder
But Comodo dedect and stop it. (on host machine)

 

How detections from Malware Similarity Search look like ?

 

Not sure, but i'm guessing MDE should fire up in the beggining of this year (Vlk commented this on their blog in the news i posted).

The jump in detection is really amazing and mostly because of Evo-Gen. You rarely see such amazing jumps in protection. And since it's a remote thing i think it will be much harder to bypass than a local feature where they just grind the samples against it till it fails to detect them. Or even disassemble the app and see how it works.

I'm really looking forward in the new tests from AV-Test and AV-C.

 

probably nothing will change if it is only on-execute signatures.