Author Topic: Can avast cope with datastreams ?  (Read 4800 times)

0 Members and 1 Guest are viewing this topic.

Waldo

  • Guest
Can avast cope with datastreams ?
« on: December 07, 2003, 12:47:10 PM »
Hi,

I'm wondering,

Does Avast home & pro scans for alternate data streams on NTFS based systems (Xp) ?

I have read somewere that these streams could transfer hidden virusses that go undetected with conventional signature scanning.

If it does not scan these streams, will this mean a potentional security breach ?

Kind regards,

Waldo

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11849
    • AVAST Software
Re:Can avast cope with datastreams ?
« Reply #1 on: December 07, 2003, 01:32:39 PM »
NTFS Streams are supported; they're considered a special type of "archive" (in Pro version, you can check in the "Packers" settings).

Offline .: Mac :.

  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5093
Re:Can avast cope with datastreams ?
« Reply #2 on: December 07, 2003, 05:25:07 PM »
so does the home version scan these?
"People who are really serious about software should make their own hardware." - Alan Kay

Waldo

  • Guest
Re:Can avast cope with datastreams ?
« Reply #3 on: December 07, 2003, 05:38:37 PM »
so does the home version scan these?

I'm afraid not Mac :( Looking at Igors answer :

NTFS Streams are supported; they're considered a special type of "archive" (in Pro version, you can check in the "Packers" settings).

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11849
    • AVAST Software
Re:Can avast cope with datastreams ?
« Reply #4 on: December 07, 2003, 05:49:23 PM »
Oh no, that's not what I was trying to say :)
I just meant that in Pro version, you can configure the packers to be used one-by-one - and therefore you can see which ones are supported.
In the Home version, you can only turn all the archives on and off - so I believe NTFS streams are scanned as well when "Archive" scanning is on.

Waldo

  • Guest
Re:Can avast cope with datastreams ?
« Reply #5 on: December 07, 2003, 05:54:36 PM »
Thanks for clearing this up Igor.