Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: mantra on July 24, 2003, 08:28:25 PM

Title: scan local disk :
Post by: mantra on July 24, 2003, 08:28:25 PM
can somebody tell me the differents
from

types:
content
and name extension


if i chose "name extension " & on packers "zip archive "
the scan engine will scan into the archive?
Title: Re:scan local disk :
Post by: igor on July 24, 2003, 09:22:06 PM
If you specify "zip archive" in packers, the zip archives will be scanned.

The difference between the "types" options is the way it is determined what file should be scanned.
If you specify "name extension", the files with .exe extension (and many others, it's just an example) will be scanned - i.e. the file notepad.exe will be scanned; however, if you rename it to notepad.jpg, it will not.
If you specify "content", it means that any file will be opened and its type will be analyzed. In our example, even the renamed notepad.jpg will be scanned, since it will be recognized as EXE file by its header.

I'm not sure if the same holds for archives  (i.e. for "name extension" settings, only the files with ZIP extension would be checked inside; for "content", the file content would be analyzed and if it's determined as ZIP, it will be scanned inside). You can try yourself - pack EICAR into zip file, scan, then rename .zip to something else (.txt), and scan again - you'll see if there's any difference between the "type" setting here.
Title: Re:scan local disk :
Post by: mantra on July 25, 2003, 09:05:26 AM
thanks Igor

with the setting name Extension & zip file , avast doesn't check inside the archive
i did a try


Title: Re:scan local disk :
Post by: mantra on July 25, 2003, 09:47:51 AM
ummm

i think there is a bug

i put some virii in a zip file

scan for extension and zip file !
avast scan the zip file , in my report , but NOT INSIDE....,
in the report i can read avast scan the file zip,but not what in the zip file i have stored
Title: Re:scan local disk :
Post by: pk on July 25, 2003, 09:55:31 AM
Quote from: mantra on July 25, 2003, 09:47:51 AM
avast scan the zip file , in my report , but NOT INSIDE....,

Are you really sure you scan ZIP archives ? If all other (!) ZIP archives were scanned except your virii one you can send me it. Although I have doubts there would be a zip bug. Thanks!
Title: Re:scan local disk :
Post by: mantra on July 25, 2003, 10:01:53 AM
TYPES BY CONTENT

*
* avast! Report
* This file is generated automatically
*
* Task 'Copy of Scan: interactive selection' used
* Started on Friday, July 25, 2003 9:54:22 AM
*

C:\trial\virus!.zip\Update.exe [L] Win95:CIH 1.x (0)
C:\trial\virus!.zip
Infected files: 1
Total files: 2
Total folders: 1
Total size: 228.7 k

*
* Task stopped: Friday, July 25, 2003 9:54:24 AM
* Run-time was 2 second(s)
*

By NAME EXTENSION

*
* avast! Report
* This file is generated automatically
*
* Task 'Copy of Scan: interactive selection' used
* Started on Friday, July 25, 2003 9:56:19 AM
*

C:\trial\virus!.zip
Infected files: 0
Total files: 1
Total folders: 1
Total size: 72.2 k

*
* Task stopped: Friday, July 25, 2003 9:56:19 AM
* Run-time was 0 second(s)
*
Title: Re:scan local disk :
Post by: mantra on July 25, 2003, 10:32:09 AM
In the ZIP file there is only one virus!

and i didn't DELETE IT

scan with extension avast checks zip file BUT not inside!

scan with content avast check inside....

look my report!
Title: Re:scan local disk :
Post by: Michal Zrůbecký on July 25, 2003, 11:08:07 AM
I can confirm that it works as mantra wrote. Now someone has to say if it´s a bug or feature.  ::)

Vlk, where are you?  ;D
Title: Re:scan local disk :
Post by: pk on July 25, 2003, 11:23:41 AM
Why should it be a feature if the conditions were clear: .ZIP extension and ZIP packer scanning is ON (than "so called IsItZIPFile" function should be call on every file which match the given extensions).
Title: Re:scan local disk :
Post by: Michal Zrůbecký on July 25, 2003, 11:49:26 AM
You´re right, pk. Once is avast! set to scan packers, the setting shouldn´t be affected by any other task option (except exclusions)...
Title: Re:scan local disk :
Post by: Vlk on July 25, 2003, 12:02:24 PM
It was a bug (already fixed). Occured only if extraction was being done to memory (and not to temp files on disk) - i.e. in case you have lots of RAM.

A fix will be included in the next update.

Thanks for pointing it out, and sorry for this.
Vlk
Title: Re:scan local disk :
Post by: mantra on July 25, 2003, 12:08:45 PM
great  ;D
Title: Re:scan local disk :
Post by: mantra on July 25, 2003, 04:13:36 PM
the standard shield seems to have the same bug or?
Title: Re:scan local disk :
Post by: mantra on July 27, 2003, 10:47:03 PM
Vlk

avast stored every task sessions
even if i uncheck "store results in database for later processing
Title: Re:scan local disk :
Post by: igor on July 28, 2003, 09:17:15 AM
For me, it stores only the "session info" (name, start time, runtime, number of files tested/infected) - not the results themselves (i.e. the infos on the particular files).

The results (for the files) are there until avast! is restarted, but then they disappear.

For you, even the info on infected messages is stored (and appears again when avast! is restarted)?
Title: Re:scan local disk :
Post by: mantra on July 28, 2003, 09:37:08 AM
nope
igor
it's like u
it stored only session info!

sorry