Is Avast BB a kind of a HIPS?

Discussion in 'other anti-virus software' started by mattdocs12345, Apr 23, 2013.

Thread Status:
Not open for further replies.
  1. mattdocs12345

    mattdocs12345 Registered Member

    Joined:
    Mar 23, 2013
    Posts:
    1,785
    Location:
    US
    Well? Can anybody tell me what exactly is the Avast BB doing? Is it a form of HIPS or something else? I never seen a pop out of any kind. On the AV tests it looks like Avast gets 100% real time protection with few percents being yello/due to user response.
     
  2. RejZoR

    RejZoR Registered Member

    Joined:
    May 31, 2004
    Posts:
    6,426
    That yellow is due to Auto Sandbox and not Behavior Shield. By default, BB is not under user control. It would only be when set to Ask in which case it acts similar to HIPS.
     
  3. spywar

    spywar Registered Member

    Joined:
    Oct 23, 2012
    Posts:
    583
    Location:
    Paris
    Avast's BB is working in "passive mode".
    Every users from the communityIQ are running some sort of sensors on their machines (on BB and Anti Rootkit module). Whenever the Avast BB sees something suspicious on those machines it reports the binary or suspicious actions to virus lab. Like that, they receive about 50 000 / 60 000 + samples every day.
     
  4. Umbra

    Umbra Registered Member

    Joined:
    Feb 10, 2011
    Posts:
    2,204
    Location:
    in a remote land :)

    yep, so nothing related to a true BB (aka Mamutu) or any HIPS; it was my misunderstanding and great disappointment about Avast :D
     
  5. Noob

    Noob Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    6,468
    You can always get OA free if you want a HIPS. :rolleyes:
     
  6. Umbra

    Umbra Registered Member

    Joined:
    Feb 10, 2011
    Posts:
    2,204
    Location:
    in a remote land :)
    i have Emsisoft IS already ^^
     
  7. mattdocs12345

    mattdocs12345 Registered Member

    Joined:
    Mar 23, 2013
    Posts:
    1,785
    Location:
    US
    I decided to go with something a little lighter such as NVT ERP. OA would have been okay if I had a faster processor.
     
Loading...
Thread Status:
Not open for further replies.