Strange exclusion list problem

[RejZoR]

It's EMPTY. Thats the problem. Same for Web Shield. So it's scanning files that should be excluded by default. And they were until someday all the sudden everything was gone from those lists. Now i have to enter those values manually (the ones that DavidR provided).

[Vlk]

Sorry Rej, I was just joking...
It's really a fault in the current version, but the program should work almost the same even without the exceptions...

[RejZoR]

Ok, now i feel better I also hope you'll soon fix the graphic bug in all exclusion lists.

[igor]

Some exceptions are internally applied even when they are not in the list (actually, they are not meant to be on the list anymore) - for example, the last 5 values for the Standard Shield from DavidR's list (so it's not necessary to add them).

[RejZoR]

Why is pagefile using:
*\pagefile.sys

instead:
?:\pagefile.sys

AFAIK, pagefile is always in the root dir regardless of drive used for it.

[RejZoR]

Oh,and since we're talking about exclusions...

Is javaw.exe excluded internally in Internet Mail provider?
Some user was experiencing problems with timeout messages again (he's using Azureus).
Is the OptIn= a correct way to exclude processes or to include them?

[Lisandro]

Is the OptIn= a correct way to exclude processes or to include them?

I think OptIn is to include a process.
The option IgnoreProcess should do the exclusion work.

[lukor]

Oh,and since we're talking about exclusions...

Is javaw.exe excluded internally in Internet Mail provider?
Some user was experiencing problems with timeout messages again (he's using Azureus).
Is the OptIn= a correct way to exclude processes or to include them?

Internet Mail provider does not use the OptIn method. It uses OptOut instead - what that means is: it scans mails from all processes except those listed in the
[MailScanner]
IgnoreProcess=

... and those that are ignored internally. Currently I don't think there is a way to include the process that is excluded in the VPS (internally). Sorry.

[RejZoR]

I need to exclude it.

So, this one is correct one?

[MailScanner]
IgnoreProcess=

Why isn't javaw.exe excluded by default? No mail client uses java for mail communications.

[lukor]

I need to exclude it.

So, this one is correct one?

[MailScanner]
IgnoreProcess=

Why isn't javaw.exe excluded by default? No mail client uses java for mail communications.

If no mail client uses java for mails then why the heck should it be excluded 

[RejZoR]

Thats the exact reason why!

javaw.exe is used by Azureus,a very popular Bittorrent P2P program.
Internet Mail provider doesn't bother if it's really a POP3 connection or not,if it hits port 110 it will try to check it. Now here is the problem.
Some users set ports to be random from 0-65k. So when Azureus gets request through port 110 by javaw.exe, avast! Internet mail will try to check it, but since it's not a real POP3 connection, avast! will display Timeout messages. Thats why it should be excluded from Internet Mail.

[lukor]

Ok, RejZoR, in fact you are right. It's a good reason to exclude azureus if it causes troubles.

But excluding whole JAVA seems a bit too radical to me. It's perfectly ok that the users of Azureus will include IgnoreProcess=javaw.exe into their avast4.ini - if Azureus is so unfriendly that it uses port 110 for other communication protocols than POP3 (and we know it is the purpose not just random choice). By doing this they must also understand that their other JAVA based apps would not be scanned too.

I would agree to include azureus.exe (if there is such executable) into the VPS ignore list, but I don't think we can ignore all apps written in JAVA.

Lukas.

[RejZoR]

Azureus itself does all communications through javaw.exe (runtime module i guess,so azureus.exe doesn't communicate with anything).
It's perfectly safe to exclude javaw.exe in Internet mail i belive.
javaw.exe will be still monitored by Web Shield which doesn't have javaw.exe excluded (if you're concerned about this).
Unless you're worried that some Java based program (malware) would steal local mails and mass mail them through javaw.exe. That could represent as potential risk yes...

But best way would be to somehow identify what kind of traffic(protocol) is going through these providers (Internet Mail and Web Shield). So you won't have to complicate with all these exclusions and making compromises just to make some thing working correctly.