Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Axel Foley on October 19, 2003, 02:57:34 PM
-
Hello everybody. :)
I found avast while googlin' around and I have a quick question before trying it:
- Is a plugin for The Bat! in the works?
I know I can already configure it to work by using the POP3/SMTP configuration integration but I don't like that, so I'm in search of good AV products that integrate natively with TB.
Right now I'm using AVG and I've tried DrWeb, they both integrate very well by providing their specific plugins and I wanted to check avast but before trying it I wanted to know if a TB plugin will be developed.
Thanks for the information and I wanted to tell you that having a support forum like this is a great advantage over the competitors' products. Companies tend to forget that "support" is an important requisite for customers, for me it is fundamental like the technical capabilities of the product, so way to go guys. I'll stick around this community....:)
-
The Bat! plugin is on the way (almost ready). Actually, it'd be quite helpful for us if you could do some beta-testing of it for us.
If you're interested, just say so and I can have a pre-release version sent to you shortly. Otherwise wait approx. 2 weeks - by this time, the plugin should be officially released. :)
-
I am Bat! user. If you wish I can test it for you guys. I told pavel allready (I tried to help him on the bat forum), but had no reply yet.
Peter
-
Here I am...ready to beta-test....:)
And thank you for being so user-driven, this is the key to the success...;)
I'll wait for the preview plugin, in the meanwhile I'll uninstall AVG and install avast...:)
-
OK guys, as promised I have the pre-release version of the avast TheBat! plugin ready for you.
Grab it from http://cat.asw.cz/~vlk/AvBatEx.bav and save it to your TheBat! directory. Then select the avast plugin in Bat's Antivirus settings, and you're ready to go!
Good luck, and please keep us informed!
Thanks
Vlk
-
got it, installed it, now going to try to mail myself virusses. Which, I might add, is not that easy with avast running 8)
Peter
-
Well, the plugin just quaratined two messages with the eicar virus in it. And the plugin keeps it protected, because it blocks access to the attachment when clickin on it ;D So far so good !
Peter
-
Excuse me guy's,
This is definately 'off-topic' (my apologies admin). But could you tell me what you think of 'TheBat', I've never tried it, but always open to a good e-mail client.
Thanks,
Walker.
-
Pesonally I like it. It's a highly customisable (hope that is the correct spelling ??? ) amail client capable of supporting different accounts. The thing I don't like about it is the fact you have to set up your filters per account. There is no way of setting a global set of filters that filters all accounts. Allthough it is rather easy to copy filters from one account to the other.
I have tried my share of email clients over the years and at the moment this is my favorite one. If you use an IMAP email system, you should beware. There appears to be some problem with that still.
Peter
-
Pesonally I like it. It's a highly customisable
Thanks for the info Peter.
I've used Pegasus for so many years that I have an original stone copy of the 10 commandments in the inbox.
E-mail clients are the one piece of software that I can't get something that I'm totally happy with. The Bat sounds a little like Pegasus... does it have the facility to create/send custom MHTML stationary?. This is the one thing that sends me over to Outlook every once in a while.
Walker.
-
I try to stay as far away as possible from html, so I can't answer that. But it has a very good plugin to fight virusses ;D also a great spamplugin.
Peter
-
Oh no not more A-V writers ;D ;D ;D
Thanks Peter. :)
-
Ok BTB.
I see that the The Bat! plugin can be set to scan outging mail, but in that case the adding of the notification that the message is beiing scanned is not added to the message. Also there is no notification on suspected attachments like a .exe I just mailed to someone. I cope with this by sending my mail through scanning proxy.
What is exactly the difference in functionality between the plugin and the resident program???
Peter
-
I installed the plugin...All ok here! I hope for be noticed when final plugin version is ready! Thx! :o
-
What is exactly the difference in functionality between the plugin and the resident program???
A big difference, actually. It's not associated with any resident provider, it's just a module that internally uses the avast engine to scan the traffic. In other words, its implementation is independent of the avast on-access scanner framework.
Vlk
-
What is exactly the difference in functionality between the plugin and the resident program???
A big difference, actually. It's not associated with any resident provider, it's just a module that internally uses the avast engine to scan the traffic. In other words, its implementation is independent of the avast on-access scanner framework.
Vlk
...and it's very, very, better!!!!! ::)
-
Hmm, I wouldn't say so, why do you think, joanlui?
-
because it can scan many providers and not only one! :P
-
What is exactly the difference in functionality between the plugin and the resident program???
A big difference, actually. It's not associated with any resident provider, it's just a module that internally uses the avast engine to scan the traffic. In other words, its implementation is independent of the avast on-access scanner framework.
Vlk
Does it use any of the installed avast software? If not, how about iavs updates ?
Peter
-
Hehe, of course it's using the avast core libraries / virus database.
You didn't think the whole engine could fit to the < 100K file, did you? ;) :)
Once the plug-in is officially released, it will become part of the avast installation and therefore will automatically take advantage if features like incremental updates...
Vlk
-
You didn't think the whole engine could fit to the < 100K file, did you? ;) :)
That would be some piece of work indeed. I was just wondering what parts it used.
Peter
-
Vlk,
Is there some way the plugin can provide some feedback on what it did? Maybe the adding of the "message scanned by,blablablabla" thing the engine does. Also entires in the log of the bat telling me it scanned and found nothing/anything woudl be nice. Maybe it could provide macros that can be used in the bat! messages? Just some things that come to mind...
Peter
-
Unfortunately, modification of the message in any way is not supported by the Bat's plugin interface... There's nothing we can do about that, except to bug the authors of Bat to add it into some of the future builds...
But you're probably right that the log should be more informative...
Vlk
-
the authors of Bat to add it into some of the future builds...
Mmmm, when does hell freeze over ? ;D
But you're probably right that the log should be more informative...
Yes please. The plugin is doing it's work now dark, deep and silent. Too silent for my well being... :D
Peter
-
But you do know that you can turn on generation of a (somewhat technical) log in the plugin, right? It's in the plugin's properties window, accessible in the Bat! GUI.
-
Yes, it's on. But I believe it only logs something if a virus is found. I am one of those over suspicious people that had the engine add the "incoming message clean" part to my messages... Possible options for that loggin might be: "none", "infected messages only", "infected and clean messages"
But hey, it's still beta. And keeping virusses away is the most important task for it.
Peter
-
Sorry for being so late...I have been sick lately and could only turn on my notebook today.
I just downloaded the plugin, installed it and configured it and it's working fine.
The log should be a bit more detailed, here's my current log:
10/27/03 13:35:29: BAV_Uninitialize: avast! plug-in uninitialized successfully
10/27/03 14:32:19: BAV_Initialize: avast! plug-in initialized successfully
10/27/03 14:32:30: BAV_Uninitialize: avast! plug-in uninitialized successfully
10/27/03 14:45:09: BAV_Initialize: avast! plug-in initialized successfully
10/27/03 15:17:50: x_ScanFile: Virus found! file: e:\temp\BAT652.tmp; virus message: Virus EICAR Test-NOT virus!! detected
10/27/03 15:21:25: x_ScanFile: Virus found! file: e:\temp\BAT666.tmp; virus message: Virus EICAR Test-NOT virus!! detected
10/27/03 15:22:17: x_ScanFile: Virus found! file: e:\temp\bat\2AE129EE.zip; virus message: Virus EICAR Test-NOT virus!! detected
10/27/03 15:23:44: BAV_Uninitialize: avast! plug-in uninitialized successfully
Thanks again for the plugin VLK...it's working fine.
Regarding the <100k size, well the plugin is a software interface that lets TheBat! call (via specific APIs exported by some AV specific processes) the antivirus functions in order to scan msgs via temporary files. I didn't expect anything >100k....;)
Anyway great job...I'll evaluate avast a little more and if it satisfies me I'll buy a license. :)
-
Could the plugin also make some sort of macro available to the bat! with the version number of the database. In that case we can add the scanned with version xxx in our templates. %AVVER or something like that?
Peter
-
Could the plugin also make some sort of macro available to the bat! with the version number of the database. In that case we can add the scanned with version xxx in our templates. %AVVER or something like that?
Peter
Great idea...I would say 3 values:
%AVASTVER (avast! version number)
%AVASTDBVER (avast! DB version number)
%AVASTPLUGINVER (avast! plugin version number)
-
I am using avast Home Edition on my XP machine with TB! and am quite happy with it. Why would I install the plugin? What does it do for me? What's the advantage?
Thanks for a nice FREE virusscanner!
-
The Stroumpf,
Protection from e-mail comes in two forms, protection from infected attachments and protection from malicious scripts, applets, and other objects embedded within an HTML formatted message (for example a reference to a malicious web site) that will automatically be processed when the message is read. Generally speaking, a resident e-mail scanner intercepts the message as it's being downloaded and prevents the message, or parts of it, from being saved on your computer, and an on-access scanner scans an infected attachment, script, etc. when you attempt to execute it.
Moving from generalities to specifics about avast! 4, the Internet Mail provider has some advanced features that provide additional protection such as checking for multiple extensions or extensions hidden by intervening white space, verifying that a file's type and extension match, and examining message partitions for suspicious properties, to name a few. It also provides extra protections for outgoing mail to prevent worms from spreading by using mass mailing techniques.
The Standared Shield provider can be configured to scan an infected attachment, script, etc. when you attempt to execute it, write it to disk, or even read it from disk. Since it supports scanning e-mail files, message files (.eml files for example), as opposed to message stores (.dbx files), it will also scan a message when you save it.
Basically, it's a matter of preventing malware from making it to your computer as opposed to preventing it from functioning after it's there and/or going through the hassle of removing it. While there is overlap in the functionality, some consider using an e-mail scanner along with an on-access scanner to be redundant; others consider it a good practice by using a layered defense. I fall in the latter category. The advanced features in the e-mail scanner can protect your computer from becoming infected with malware by alerting you to an e-mail's suspicous characteristics. Some of that malware may not be detected by the on-access scanner if no signature for it is present in the virus database. Hope you find this information useful in deciding what to do. :D
Regards,
Hornus
-
First the DISadvantages of the plugin versus the emailservice:
- no fancy gui when something is detected
- no extras, like the adding of "message clean/infected" text to messages
The difference between avast emailservice and the plugin is, that the service is a separate program that acts as a mini mail server. You have to get your email from that. That demands some configuration. Also, If you use an other program that way to detect spam, you have to chain them together, that demands some more configuration. I have been struggeling with those two for a while, but fanally got it running (thanks to this forum btw). When checking mail, the bat! accesses avast-mail-service, passing a very difficult string as server, to handle all following software. the mail-service breaks down that string so it can use it and then accesses spamweasel, passing a stripped down serrver string to controll spamweasel. Spamweasel then breaks down that string finally accessing my mail server on the internet. The mail is send back to spamweasel, which after checking passes it back to avast, which after checking, sends it back to the bat! With large attachments you will get timeout problems. Setting the timeout high can cause trouble when the internet connection goes wacky. The plugin is just a little program that is controlled by the bat! and no configuration is nescessary.
No the Advantages (as I see them) of the plugin:
- you can kill the email sevice and thus saving memory and cpu
- the configuration with another spam program is more easy (there are also spam plugins)
- no problems with more accounts on different mail servers (with the service that is still a bit tricky)
If you are happy with the way things are. Don't change it. I am testing the plugin, because I think it is a fancy extra with the software, saves me the trouble with my spam proxy and enhances performance in my case.
Peter
-
Peter and Hornus,
thanks for those long explanations! So in other words, I stick to the full version (sounds better to me), BUT I can *also* install the PlugIn, which gives me an extra layer, not just plain redundancy? Because if it's more protection, then I think I will install the Plugin, too.
-
The plugin uses the same engine and databases as the avast mail service. I think that just makes it redundant and not provides an extra layer. It just scans the same thing the same way again...
Peter
-
Hi guys,
Any news on the enhancement request for the The Bat! plugin:
Possible options for that loggin might be: "none", "infected messages only", "infected and clean messages"
Great idea...I would say 3 values:
%AVASTVER (avast! version number)
%AVASTDBVER (avast! DB version number)
%AVASTPLUGINVER (avast! plugin version number)
Peter
-
Ok, I am gonna risk that one karma I got... By nagging :-[ ... Please, please, please is there any news on The Bat! plugin... Will the logging possibilities and the macro export be implemented or not (if not, I can stop whining :'( )
The plugin works like a charm btw...
Peter
Hi guys,
Any news on the enhancement request for the The Bat! plugin:
Possible options for that loggin might be: "none", "infected messages only", "infected and clean messages"
Great idea...I would say 3 values:
%AVASTVER (avast! version number)
%AVASTDBVER (avast! DB version number)
%AVASTPLUGINVER (avast! plugin version number)
Peter
-
Logging for sure, but macro export is unsure as we don't really know if it's possible. We're in contact with the Bat guys anyway
-
I know the bayesit anti-spam plugin does export three macros. I dont't know how, but it does.
Peter
-
Like trigger said actually it is possible (at least with the anti-spam plugins).
In the anti-spam plugin list (options->preferences->protection->antispam) you can right click on a plugin and you have a menu with the "Information" item which is a sort of About.
This about is also available if you go into options->preferences->plug-ins (last item in the tree); from there you can see a list of available plugins, you can select one and click on the information button and the about window comes up.
Actually I use BayesIt! plugin and avast! plugin, BayesIt comes up in the global plugin window but avast! doesn't, I don't know if TheBat's Plugin API makes a difference between AV plugins and Anti-Spam plugins, you should ask the devs. I don't think it is correct if TB's API have this limitations on AV plugins.
The same applies to exporting macros.
Anyway the devs could help you on this one, if they don't let me know and we could use TBDEV mailing-list. :)
Keep up the good job.
-
Actually I use BayesIt! plugin and avast! plugin, BayesIt comes up in the global plugin window but avast! doesn't
I noticed that too... But I believ that is a bug introduced with newer beta versions of the bat, because in earlier versions I had them both listed...
Peter
-
Logging for sure, but macro export is unsure as we don't really know if it's possible. We're in contact with the Bat guys anyway
This is a link to the source code of the mymacros plugin for The Bat! That plugin does nothing else but export macros. My programming days are long over, but I think you guys can use the source to figure out how to export the requested macros ;D
Peter
-
Another thing. I found this link on The Bat! forum to test anti-virus products http://www.gfi.com/emailsecuritytest/ It will wreck havoc on your email system to see if and how good you are protected. I must say, only one got through, but only after ignoring three different warnings about attachment that should not be opened and possible mallicious code that would be executed.
Peter
-
This is a link to the source code of the mymacros plugin for The Bat!
This? Maybe you forgot to include it to your message...? ;D
Another thing. I found this link on The Bat! forum to test anti-virus products http://www.gfi.com/emailsecuritytest/ It will wreck havoc on your email system to see if and how good you are protected. I must say, only one got through, but only after ignoring three different warnings about attachment that should not be opened and possible mallicious code that would be executed.
The GFI test.... not really good but anyway (designed so that GFI products pass but other products don't - some of the tests don't make much sense...).
Vlk
-
:-[ :-[ :-[ I was thinking about edditing the post and just act like it allways there, but no...
This should be it http://en.barin.com.ua/soft/mymacros/mymacros.src.zip
Peter
-
If anybody wants to configure Spamihilator and avast! to be used in the same computer, please, see this related forum (http://www.avast.com/forum/index.php?board=2;action=display;threadid=1622).
-
I have tested avast home edition 4.1 with the Bat and it seems to be very good.
It detects many viruses. However there's a website which sends test emails to you for virus cheking .
http://www.gfi.com/emailsecuritytest
Most of the test were passed but there are some which failed. Pls check for yourself and try to improve the security holes in the next updates.
Check also this sites for anti virus software comparation
http://www.hackfix.org/miscfix/icons-av.shtml
Wish you good luck and thanks for the good software you are providing us
-
I confirm! Answer please! ::)
-
Hi all,
if avast! for TheBat! doesn't catch some virus from GFI, it's not problem
of avast!, but problem of TheBat!. avast! plugin scans only attachments that TheBat! found in e-mail. So when TheBat! doesn't recognize the infected part,
avast! cannot catch it! But as Vlk said in some previous reply, GFI test contains some e-mails which have not sense in real world...
pavels
-
OK guys, as promised I have the pre-release version of the avast TheBat! plugin ready for you.
Grab it from http://cat.asw.cz/~vlk/AvBatEx.bav and save it to your TheBat! directory. Then select the avast plugin in Bat's Antivirus settings, and you're ready to go!
Good luck, and please keep us informed!
Thanks
Vlk
I use The Bat! ver 2.01.3 under WinXP pro sp1 and have just finished installing Avast v4.1 Home. I imported your plugin but can't seem to be able to install the plugin in The Bat under Options Preferences and Plugin as it requests the plugin extention to be tbp. I guess I'm missing something in here but can't seem to grasp it...
--
Gilbert
-
I use The Bat! ver 2.01.3 under WinXP pro sp1 and have just finished installing Avast v4.1 Home. I imported your plugin but can't seem to be able to install the plugin in The Bat under Options Preferences and Plugin as it requests the plugin extention to be tbp. I guess I'm missing something in here but can't seem to grasp it...
--
Gilbert
You have to go to options, preferences, warnings, anti-virus and install the avast plugin from there.
Peter
-
I use The Bat! ver 2.01.3 under WinXP pro sp1 and have just finished installing Avast v4.1 Home. I imported your plugin but can't seem to be able to install the plugin in The Bat under Options Preferences and Plugin as it requests the plugin extention to be tbp. I guess I'm missing something in here but can't seem to grasp it...
--
Gilbert
You have to go to options, preferences, warnings, anti-virus and install the avast plugin from there.
Peter
Thanks a lot! It works well and much better than Kaspersky that kept passing everything both in the incoming traffic and scanning saved email msgs untill I wanted to save attached infected files. It was this aspect that made me want to change antivir sw.
I had two infected attachments in my saved email msgs and, while I was not worried about getting really infected, did not like the idea of them stored in there undetected by my av sw.
--
Gilbert