Monday, February 21, 2011

Using Avast 5 alongside Threatfire issue

PC Tools ThreatFire has been known as a behavioral-based protection anti-malware program that should run along with antivirus software, simply because some/most antivirus programs don't include behavioral-based detection or protection, which means ThreatFire complements the protection offered by antivirus software. To say it in a simple words, PC Tools ThreatFire monitors the computer for signs of suspicious behavior and potential attacks.

Since the launch of The Avast antivirus 5, the program was recently updated by adding a Behavior Shield, which has the same function that ThreatFire is already providing. Avast and ThreatFire problems started when its end-users reported applications such as Firefox, Add or Remove Programs, System Restore, and Thunderbird had stopped working or were not responding.

Most security software vendors and security experts recommend not using security software that provides the same functionality, which is correct and should be followed. Why? Because it can prevent system instability and application crashes. It will also prevent interference in removing malware and scanning the computer.

So, if you are using the new Avast version 5.1.889 or a higher and also using ThreatFire, you will need to adjust the settings or remove one of these programs. I personally still using both of them since I don't want to rely on a single security vendor, so what you should do if you wanted to use both programs like I do is simply Add ThreatFire in Trusted Processes Using Avast :
  1. Open the Avast antivirus program. Click Real-Time Shields at the left pane and select Behavior Shield.
  2. Click Expert Settings button to display the Behavior Shield Settings window.
  3. Click Trusted Processes and click the browse button.
  4. Browse the folder of ThreatFire (C:\Program Files\ThreatFire). Select TFService.exe than click Open.
  5. Click the Add button in the Trusted Processes window of Avast.
  6. Repeat the same steps by adding :
  • TFGui.exe,
  • TFHS.exe,
  • TFNotice.exe,
  • TFRC.exe,
  • TFTray.exe,
  • TFUD.exe,
  • TFUN.exe,
  • TFVS.exe and
  • TFWSC.exe.
And don't forget to add the ThreatFire drivers into the Avast Trusted Processes too
  1. Browse for C:\Windows\System32\drivers folder to add ThreatFire drivers as Trusted Processes by Avast. Just locate the following : TfSysMon.sys, TfNetMon.sys, and TfFsMon.sys in C:\Windows\System32\drivers and add them to be trusted by Avast Behavior Shield, as well. (if you could found it, simply change the Files of type from *.exe into *.*)
  2. Click OK and close the Avast user interface. Avast should now stop monitoring the processes and leave the tasks to ThreatFire. Also, it should stop other applications from hanging or not responding.

No comments:

Post a Comment