Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: rdsu on April 10, 2006, 12:20:41 AM

Title: Scan extensions on WebShield
Post by: rdsu on April 10, 2006, 12:20:41 AM
Hi,

How can I set the WebShield to only scan the "Default extensions set"?

Thanks
Title: Re: Scan extensions on WebShield
Post by: igor on April 10, 2006, 12:24:07 AM
I don't think it's possible.
Title: Re: Scan extensions on WebShield
Post by: rdsu on April 10, 2006, 12:27:50 AM
Can you add this feature to the next version?
Title: Re: Scan extensions on WebShield
Post by: igor on April 10, 2006, 12:33:36 AM
Honestly, I'm not sure if it's really needed. Why do you think it's so useful?
Title: Re: Scan extensions on WebShield
Post by: rdsu on April 10, 2006, 12:36:21 AM
Honestly, I'm not sure if it's really needed. Why do you think it's so useful?

Because only want that avast! scans extensions that could contain some threat, and not all of them...
This will improve the speed of my browsing...
Title: Re: Scan extensions on WebShield
Post by: Lisandro on April 10, 2006, 12:48:00 AM
I don't think it's possible.
Why is there an option for scanning only specific extensions in WebShield then?
Maybe the only way that is missing is the definition of a standard set of extensions like in Standard Shield...
I'm not seing that imposible as you're saying. But, as you say it's not possible, can you explain the WebShield seetings?
Why do they exist, I mean, the tab Web Scanning into Web Shield settings?
Title: Re: Scan extensions on WebShield
Post by: igor on April 10, 2006, 12:50:16 AM
Because only want that avast! scans extensions that could contain some threat, and not all of them...
This will improve the speed of my browsing...

I don't think so, for 2 reasons:
1. My guess is that the vast majority of the browsing consists of HTM(L), JPG, GIF; you can handle (exlude) these extensions manually, if you want. Excluding some extensions from the small rest will make negligible difference.
2. I may be wrong, but I think that the browser processes the data according to the MIME type, not according to the extension, so it may actually not be safe to exlude additional extensions.
Title: Re: Scan extensions on WebShield
Post by: RejZoR on April 10, 2006, 12:52:22 AM
It's possible, though you have to enter extensions on your own.
Also great range of non infectable files are excluded via MIME. See the Exceptions tab.
Videos and audio are excluded and certain yet uninfectable image formats too (like PNG and GIF).
Title: Re: Scan extensions on WebShield
Post by: igor on April 10, 2006, 12:53:14 AM
Why is there an option for scanning only specific extensions in WebShield then?
Maybe the only way that is missing is the definition of a standard set of extensions like in Standard Shield...
I'm not seing that imposible as you're saying. But, as you say it's not possible, can you explain the WebShield seetings?
Why do they exist, I mean, the tab Web Scanning into Web Shield settings?

I wasn't trying to say that it's impossible to implement such a feature, I just meant that there is no such option in WebShield settings right now; you'd have to enter the extensions manually.
Title: Re: Scan extensions on WebShield
Post by: Lisandro on April 10, 2006, 12:55:30 AM
I wasn't trying to say that it's impossible to implement such a feature, I just meant that there is no such option in WebShield settings right now; you'd have to enter the extensions manually.
I see.
Can't you post a standard, default, suggested set of settings?
I'll thank you for that  8)
Title: Re: Scan extensions on WebShield
Post by: RejZoR on April 10, 2006, 12:59:20 AM
As i said, Web Shield scans everything except excluded MIME types (MIME is a web file type identifier). And excluded are only those necessary which are most often encountered on the web and are not yet known to be infectable.
Title: Re: Scan extensions on WebShield
Post by: rdsu on April 10, 2006, 01:05:07 AM
Because only want that avast! scans extensions that could contain some threat, and not all of them...
This will improve the speed of my browsing...

I don't think so, for 2 reasons:
1. My guess is that the vast majority of the browsing consists of HTM(L), JPG, GIF; you can handle (exlude) these extensions manually, if you want. Excluding some extensions from the small rest will make negligible difference.
2. I may be wrong, but I think that the browser processes the data according to the MIME type, not according to the extension, so it may actually not be safe to exlucde additional extensions.


So, you have to investigate that to improve or not your program... ;)

Why should I want that Web Shield scans a text file?

In NOD32 I can configure this...
Title: Re: Scan extensions on WebShield
Post by: Lisandro on April 10, 2006, 01:08:37 AM
As i said, Web Shield scans everything except excluded MIME types (MIME is a web file type identifier). And excluded are only those necessary which are most often encountered on the web and are not yet known to be infectable.
RejZor, what can we think about a text file like Vampiric said... and there are a lot of other extensions...
Title: Re: Scan extensions on WebShield
Post by: RejZoR on April 10, 2006, 01:23:14 AM
Seriously, how much text in plain-text format do you actually encounter on web?
And that it's so big that you don't want to scan it? None.
I use it on my webpage for descriptions of my apps and they all together weight just few KB. Even slowest dialup can handle that.
I don't see any real (or logical) reason to do that.

MIME types:
http://www.iana.org/assignments/media-types/
Title: Re: Scan extensions on WebShield
Post by: Lisandro on April 10, 2006, 02:38:50 AM
Seriously, how much text in plain-text format do you actually encounter on web?
And that it's so big that you don't want to scan it? None.
I use it on my webpage for descriptions of my apps and they all together weight just few KB. Even slowest dialup can handle that.
I don't see any real (or logical) reason to do that.
MIME types: http://www.iana.org/assignments/media-types/
I apologize... you're right... the http traffic is scanned and I was confusing with Standard Shield.
Some time ago it was posted that UDP traffic cannot be scanned as the way files are transfered cannot be recognized (some fuzzy transfer I suppose). So, ok, just MIME types need to be excluded as they're clean.
Title: Re: Scan extensions on WebShield
Post by: RejZoR on April 10, 2006, 09:58:42 AM
Yeah, it's better to scan everything and exclude only known safe stuff, rather than scan just a limited set of filetypes and exclude everything else.

Otherwise use the mime list i gave few posts back though i don't see any need since default ones are just fine.
If you want to exclude plain-text you use MIME "text/plain" (without quotes).
Title: Re: Scan extensions on WebShield
Post by: rdsu on April 10, 2006, 10:26:18 AM
I would prefer the option that I suggest!
Title: Re: Scan extensions on WebShield
Post by: RejZoR on April 10, 2006, 10:38:16 AM
Well if you turn the stuff up side down you'll notice there is really no need to.
On one hand, Web Shield scans everything, BUT (the big but!) there are certain filetypes excluded.

audio/* and video/* excludes entire range of audio and video filetypes including streamin media. I mean really all audio and video content that has proper MIME header. This means everything from DivX, 3GP, WMV, MOV, RM, MP3, WAV, WMA, OGG etc etc.
Images are exclueded by GIF and PNG. We all know WMF images and JPG images have already fallen under the infectable files. You may add BMP image to exclusion but how often do you really encounter BMP images on internet? No one uses it unless you enocuter some newbie user that just got internet. Very rare situations.
text/css excludes CSS stylesheets. Basically plaintext that acts similar to HTML (creates page layout and other features for web browsers).

I don't understand why you want to scan limited extensions since Alwil guys did the same just from the other end which is also much more safer. Those that are excluded are safe for sure, all others aren't and should be checked.
Title: Re: Scan extensions on WebShield
Post by: greenhatch on April 10, 2006, 11:36:44 AM
Isn't it wiser though to assume that any type of file that is apparently safe today, like MOV, might become an infectable type like say JPG became? After all, we are quick to move the Resident scanner level up to High (from Standard) just to be on the safe side. Incidentally, as an aside, Outlook Express doesn't allow MP3 files to  be saved as an incoming email attachment, presumably as M$ thinks it not completely safe.
Title: Re: Scan extensions on WebShield
Post by: lukor on April 10, 2006, 12:31:50 PM
the MIME type for plain text (.txt files) should be

"text/plain"

you can add this to the list of excluded MIME types.
Title: Re: Scan extensions on WebShield
Post by: Lisandro on April 10, 2006, 03:57:56 PM
Isn't it wiser though to assume that any type of file that is apparently safe today.
This way, just remove the exceptions MIME types in WebShield options...
Title: Re: Scan extensions on WebShield
Post by: rdsu on April 10, 2006, 04:04:17 PM
I just don't understand why this can't have the same logic of the Standard Shield.

Or we have an option to scan all the extensions, or only the dangerous ones...

But you is that knows, since you are the developer... ;)