My first experience with Avast! 5

Nice review, ky331!

Does avast! 5 still have the option to enable/disable that booming audible "Warning! Warning!" when it detects something, as 4.8 did?  (I still recall being almost knocked from my chair the first time I heard it!  :emotion-3: )

ky331:emotion-1:

I want my blue ball back:emotion-2: no, just kidding.

Almost a carbon copy on my part, but no glitches. I had been, since early mid afternoon, playing around with Avast Free 5.0.377.

I had rebooted my PC several times and always Avast icon shows the triangle for "your sys not secure" for one second or less. I suppose it takes a while to load. The only thing I do not like up to now. 

My full scan took 32.25 minutes to test about 29 GB (83,598 files).

Also I had to purge old Avast 4 settings from Comodo.

One question though?

In Performance and I use Avast manual:

"Persistent cache:

On this screen, you can configure the persistent cache settings. avast! can store information about files that are verified as clean (e.g. they contain a valid digital signature), and this information can then be used to speed up future scans. This information is stored in the "persistent cache".

• Speed up scanning by using the persistent cache. If this is checked, avast! will check the persistent cache for information about files which have been verified as clean and these files will not be scanned again.

• Store data about scanned files in the persistent cache. If this box is checked, information about any new verified clean files detected by avast! during the scan will be added to the persistent cache. This will slow down the current scan, but may increase the speed of future scans, if the first checkbox is checked."

I do not really know the math on how a specific virus or worm would go about infecting other files or registry keys in a PC, but wouldn't this method to make the scan faster jump over files that could be infected? or because it checks a valid digital signature, malwares can not duplicate a signature?

Another nice thing is you can schedule sweeps.

And to Joe, no more scare boom atomic warnings:emotion-2: 

All in all Avast has been behaving well in my sys (signature).

Regards.

I forgot. My sys is running about 100 MB of ram less than Avast 4.8. My CPU is normal. 

Thanks very much for the detailed  review. I am going to download it to the XP computer this weekend after the server traffic slows down. I have been pleased with Version 4.8...updated automatically, and then I can go in later in the day and manually update anything else that was ready. Does version 5 have that? Was never impressed with the old interface, hope the new one  is simple and easy to use.

Speaking of easy to use...have MSE in use on the Vista computer and have been happy with it also. Easy to use and keep updated. :emotion-1:

I appreciate all the inforamtion. I run AVAST on two machines and will be updating this weekend.  Annie

For anyone who read my post/review earlier, please be advised that I've edited it, adding the following information:

Firewall permissions:   If Comodo is any "standard of measure" for other [outgoing] firewalls, one needs to grant internet access to avast.setup , AvastSvc.exe (both IN and OUT), and AvastUI.exe .   [As best an I can tell, my glitches (above) were the result of my not giving (or accidentally removing) permission for AvastUI.exe ]

Avast 5 introduces a “persistent cache”:  an area where it stores information on all the files it scans.   By (optionally) accessing its cache on a subsequent scan, it can distinguish between those files that have changed (and therefore must be scanned again) vs. those files that haven’t changed (and so don’t need to be re-scanned).  To enable this feature, open avast, click on SCAN COMPUTER, select the desired type of scan (e.g., full system), click on Settings, then Performance.   Under the Persistent Cache settings, check the box for Speed up scanning using the persistent cache, and then click OK.   After doing so, a second Full scan of the same system was reduced to only 19 ¾ minutes!  (testing 20.35 gigs)

Scanning for PUPS (Potentially Unwanted Programs) is another scan option.   By default, this is OFF.   Easy enough to turn on, if you wish.   My third Full scan, this time including PUPS, dropped to only 16 1/2 minutes [due to the persistent cache].

Nice work, ky331! :emotion-21:

Joe:   Sounds are optional, and very easily controlled, in avast 5.   Open avast, go to SETTINGS, then SOUNDS.   You can enable (the default) or disable sounds, in general;  and choose only specific events ( threats / suspicious items / PUPs / scan concluded / update ) for audible notification ; and opt for "the voiceover" when available.   On the EICAR web-shield block, it was simply  three beeps, followed by a calm voice stating that "threat has been detected".   No sirens, no flashing strobe lights.

-------------

Hernan:   Yes, I also took note of the yellow warning triangle with exclamation point, in the avast ball each time the system was booting up, indicating that my system was not (yet) fully protected.   And in my case, I'd say it lasted for several seconds :emotion-6:.   Perhaps it may be because of the time it takes my wireless card to link up to my router... but that's just speculation on my part.   However, if that's the cause, I should be okay, as I don't believe I can get an "online" infection before my PC "connects" to the internet.

I was researching and testing the "persistent cache" feature, and prepared my edit before reading your post.   Your quotes supply good information as well.   I don't have the "math details" either, but I have to assume that avast knows what it's doing when it uses terms like "valid digital signature" and "verified clean".   Can malware tamper with "digital signatures"? --- I'll leave that to Bugbatter to ponder and reply.   If you have any doubts/fears, you don't have to enable the persistent cache.   Or you can do like I did:   perform an initial full scan without the persistent cache, and then, since (I believe) any malware-implemented changes to system files should (theoretically) be intercepted by the resident shield, rely on the persistent cache option in future scans.  

I did not take note of changes in RAM usage from 4.8 to 5.0   So I really appreciate your comment that it went down by about 100 MB :emotion-1:

--------------

Dale:   As with 4.8, avast 5 automatically looks for database updates every time you turn-on your PC, as well as every 4 hours thereafter.   Under SETTINGS, go to UPDATES.  I see that my avast is set for AUTOMATIC database updates, but to ASK me when a program update is available.   I'm not sure if these are actually the defaults... or if avast 5 carried-over these settings which I may have customized in avast 4.8.  You can check the box to indicate whether you only connect when on a dial-up modem, or if you're "permanently" connected to the internet.   By expanding the DETAILS section, you can specify how often to automatically update.   The default is every 240 minutes (i.e., 4 hours).   I haven't tested to see how much lower it will let you go.   But with an auto-update every 4 hours, I don't believe there should be any need for additional manual checking.

As for the user interface, the "media player" appearance is completely gone.    Of course, for those used to it, it means having to learn where everything is located in the new version.

Here's another neat new feature of avast 5, enabled by default [and which can be accessed in avast, under REAL TIME SHIELDS, select a particular shield, then EXPERT SETTINGS, and finally SENSITIVITY]:

Avast 5 now offers "code emulation": 

If the box "use code emulation" is checked and avast! detects some suspicious code in a file, it will attempt to run the code in a virtual environment to determine how it behaves. If potential malicious behavior is detected, it will be reported as a virus. Running the code in this virtual environment means that if the code is malicious it will not be able to cause damage to your computer.

I was going to ask about Windows Defender, but it sounds like it works fine with Avast 5. Ever since I got fed up with A Squared Free and its ponderous updates I have been using Threatfire 4.7.0.17. which seems to be a real time program. It apparently  works by behavioral analysis rather than by matching a definition, so perhaps these two methods don't conflict, as least none have appeared to me. As for now, Avast 5 appears to be a new and improved product.

Dale,

As noted above, I am using Windows Defender and SpyBot's TeaTimer, both of which offer some degree of realtime protection   --- as well as WInPatrol, which offers what I typically refer to as  "pseudo"-resident protection --- alongside avast.   I  have not encountered any conflicts, nor do I believe I've experienced any significant slowdown, in running all these together.

Whether or not I need all of these, I simply can't say.   I've read several articles/debates, most of which assert that Defender or TeaTimer are "worthless" --- that they don't catch anything (that avast doesn't already find).   Usually, someone comes to their defense, and points out some redeeming value they still have.

I take the perspective that, unless/until I begin to sense a (significant) slowdown in my system, I will continue to use them all.   For example, both Defender and WInPatrol monitor changes in the HOSTS file --- something that avast does NOT look for.   And TeaTimer seems to be more protective of various registry changes than any of the other programs.

Yes, there IS some redundancy/overlap between all these programs... sometimes two or three will all "flag" the same condition.   But I'd rather have some duplicate warnings, than no warning at all (as long as there's no "hard clashing" nor obvious slowdowns) --- but I realize that others may feel differently.

============================

Lest there be any doubt, let explicitly remind everyone of  the "disclaimer" that I insert alongside Spybot's weekly update:

I am also a "fan" of SpyBot's TeaTimer (for XP only; and with at least 1 Meg RAM).   However, TeaTimer requires that the user respond to its occasional prompts to allow or deny various system changes.   Unless the user feels comfortable/confident doing so, it is preferable that a person NOT use TeaTimer, rather than risk using it haphazardly.

-----

In addition, be advised that TeaTimer seems to have grown more "RAM-hungry" over time, which is why I just recently added the stipulation of at least 1 Meg RAM.   I no longer use TeaTimer on my WinME system.

For the record:

Avast! 5 did not get along well with my XP system. I am now a happy and satisfied user of Microsoft Security Essentials. I will give Avast! 5 one more chance on my other XP system tomorrow. Stay tuned....

BB,

Would you be kind enough to elaborate, with as much detail as possible,  as to just how "Avast! 5 did not get along well with [your] XP system" ?    Were there problems during the installation?   Or did it [seem to] install properly, but you then encountered problems running it?

I'm sure everyone here would appreciate any specifics you could offer.   I know there have been MANY issues raised at the avast forum.   And so I waited a few days before trying it myself.   Indeed, I was somewhat leery in attempting it.   And when things went so well for me (aside from my minor [firewall??] glitches), I had to wonder whether they had fixed things, or if I was just lucky??   If there are indeed problems with the program, it would be good to post them here.

P.S.   How would you say that Microsoft Essentials compares to the Avast 4 that you had been using?

ky331, I expected Avast to be an easy install because I already had the previous version.  However, I was so traumatized that I was rather speechless a few hours ago. Now that I have regained my composure I shall share the details. Avast! 5 seemed to install okay.  I reviewed the settings and that went well.  I tried to check for updates.  At that point everything froze, so I had to hit the power button. After dinner, I powered up. The system loaded more slowly than usual. I tried to open my documents and everything froze again. Had to hit the power button again, so I was NOT going for a third try. I rebooted and uninstalled Avast!.

I love MSE!!  The install, update, and my first scan with that one was a piece of cake, and it is very user friendly.

Quite apart from considerations of user-friendliness, simplicity and potential for conflicts, are the questions of effectiveness in protection and impact on system performance.

Just a reminder that avast! Free 5 was evaluated, along with MSE 1.0, in the 3 most recent av-comparatives tests (Dec/09), against the other major paid AVs. http://www.av-comparatives.org/home

This represents a welcome departure from av-c's previous custom of testing only the paid products.

Both avast! 5 and MSE fared extremely (and generally equally) well in:
- having minimal impact on system performance (Performance Tests)
- on-demand scanner detection of adware/spyware/rogue applications (PUA Tests)
- blocking threats at malicious websites in real-time browsing (Dynamic Tests)

Overall, both held their own against the best of the paid AVs and security suites. None of these tests adressed the issue of false positives however.

Those considering switching to a free AV might want to review those tests at the link above. (Those considering AVG Free might be interested to note that both avast! 5 and MSE performed significantly better than AVG Paid in almost every test).

Now if only Avira would submit AntiVir Free for testing, we would have us a horse race!

ky331 and bugbatter, I have some general questions about installing Avast 5 and MSE. 

Bugbatter, When you installed MSE did you first uninstall any programs such as  Malwarebytes, Superantispyware, Spybot, etc.?  When I looked at the directions for installing MSE it was stated to uninstall any other antivirus programs (which I understand the reason why,) and to uninstall other malware/spyware programs first.

Currently on some of my computers I am using AVAST 4.8.  The same question applies. Ky331, did you uninstall any of your malware/spyware programs first when you installed AVAST 5? 

Annie