Author Topic: Are Vista x64 files whitelisted?  (Read 5538 times)

0 Members and 1 Guest are viewing this topic.

mak77

  • Guest
Are Vista x64 files whitelisted?
« on: May 10, 2007, 12:48:56 PM »
i read that in 4.7 version there is a whitelist of safe system files, to speed up the startup.

In Vista x64 however avast checks about 700 files at the startup, slowing down the system, as it has no whitelist of them, while in XP it check less files (about an hundred? don't remember i have to check), so it is like Vista x64 files are not whitelisted correctly, or is this caused by superfetch?

thank you

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Are Vista x64 files whitelisted?
« Reply #1 on: May 10, 2007, 05:06:08 PM »
That many files on a whitelist will slow the process even more than the scanning.
Rather than that, if that many files are bypassed, when any of them get infected you'll be in hot waters...
I want a better boot/logon speed, but I think you'll be bypassing security acting the way you suggest.
The best things in life are free.

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: Are Vista x64 files whitelisted?
« Reply #2 on: May 10, 2007, 06:43:02 PM »
Mak77, you pretty much guessed it, neither Vista x64 (nor XP x64) binaries are currently "whitelisted". This will happen soon, though.

Cheers
Vlk
If at first you don't succeed, then skydiving's not for you.

mak77

  • Guest
Re: Are Vista x64 files whitelisted?
« Reply #3 on: May 10, 2007, 07:38:13 PM »
Thank you, i'll wait for whitelisting

Quote
if that many files are bypassed, when any of them get infected you'll be in hot waters
i think that whitelist is based on files signature (hash), a modded infected) file has a different signature so it's not bypassed

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Are Vista x64 files whitelisted?
« Reply #4 on: May 10, 2007, 07:47:23 PM »
i think that whitelist is based on files signature (hash), a modded infected file has a different signature so it's not bypassed
I wish a confirmation of that from Alwil team...
The best things in life are free.

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11849
    • AVAST Software
Re: Are Vista x64 files whitelisted?
« Reply #5 on: May 10, 2007, 07:53:27 PM »
Yes, the whitelist is based on file content, not just the filename.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Are Vista x64 files whitelisted?
« Reply #6 on: May 10, 2007, 08:00:38 PM »
Yes, the whitelist is based on file content, not just the filename.
Thanks Igor. So, the Exclusion list won't help in this case...
The best things in life are free.

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: Are Vista x64 files whitelisted?
« Reply #7 on: May 10, 2007, 09:11:25 PM »
Well of course, adding the whole Windows directory to the list of Standard Shield's exclusions would do the trick (i.e. would dramatically decrease the number of files scanned), but security-wise, it's real bad idea... :)
If at first you don't succeed, then skydiving's not for you.

Phant0m``

  • Guest
Re: Are Vista x64 files whitelisted?
« Reply #8 on: May 11, 2007, 12:39:53 PM »
I have recently bought a new Vista-Ready computer, and installed Vista x64, after Avast! install I noticed major disk activity from Avast! for a very lengthy amount of time after startups.

Anything technical that I can do, to help put a more of a rush on resolving the Avast! + Vista x64 problems, don't hesitate to ask.  ;)

mak77

  • Guest
Re: Are Vista x64 files whitelisted?
« Reply #9 on: August 03, 2007, 11:42:49 AM »
neither Vista x64 (nor XP x64) binaries are currently "whitelisted". This will happen soon, though.

This is still an issue,when will we have faster startup time on Vista x64?
While XP64 has a low userbase, Vista x64 is preinstalled and present on a bigger amount of systems

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: Are Vista x64 files whitelisted?
« Reply #10 on: August 03, 2007, 01:00:21 PM »
We can do that next week.

Thanks
Vlk
If at first you don't succeed, then skydiving's not for you.

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9406
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re: Are Vista x64 files whitelisted?
« Reply #11 on: August 03, 2007, 03:28:58 PM »
So 32bit versions of all OS-es (Win2k/XP/Vista) are already included, just not 64bit ones?
Visit my webpage Angry Sheep Blog

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: Are Vista x64 files whitelisted?
« Reply #12 on: August 03, 2007, 04:26:27 PM »
1. The feature is only available on XP and Vista, so Win2K is out of question

2. For XP, the problem is that the binaries are actually different for EACH LANGUAGE VERSION of the OS (sigh). Therefore, we only included files from the top 6 (I think) languages: English, Japanese, German, French, Spanish and Italian (int the case of XP 32-bit).

3. In the case of XP 64-bit, we only do the English version

4. Vista binaries are language independent, and currently, there's only the 32-bit version. 64-bit version will be added.


Cheers
Vlk
If at first you don't succeed, then skydiving's not for you.

mak77

  • Guest
Re: Are Vista x64 files whitelisted?
« Reply #13 on: October 01, 2007, 02:46:48 PM »
are there any news on this issue?
thanks

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: Are Vista x64 files whitelisted?
« Reply #14 on: October 17, 2007, 09:20:06 AM »
They should be finally whitelisted with the latest VPS update (0782-0).

Cheers
Vlk
If at first you don't succeed, then skydiving's not for you.