Forgive me for asking what might seem to you what are stupid questions but here goes.
Where can i find the scan report files? I have run a single file scan since I ran the long overnight one. Does this mean I have overwritten the previous scan report or are they named by date/tiime/incremental no's
What is the daemon?
(the simplest of all logs - that daemon-log, enabled using -m 0xffffffff -s somefile switches to the daemon?)
I don't know what this means - tell me what to type and where and I will do it
I will help in any way I can but you will have to accept I am not a knowledgable MAC user
Regards
Keith
Hallo,
avast for mac = gui stuff + scanning daemon. the daemon is responsible for all the virus recognition, unpacking (and in the forthcomming version also for incremental updates), while the gui does the visualisation for the user (the daemon itself is driven using custom socket-level protocol).
that com.avast.MacAvast.MAD (which was changed in this beta-test), is the mentioned daemon itself. what you see in the gui after scan, is a scan report (usually a veeery narrow subset of the whole information flow, produced by the daemon). what we need, is a detailed logfile. usable logfiles can be produced by both daemon and gui. but, because such files tend to contain plenty of detailed low-level informations and because they tend to grow to hundreds of megabytes, their generation is disabled, by default. some tweaking is necessary here:
1) - have avast! active (VPS 09xxxx-x should be written in the left upper corner)
2) - run terminal (applications, utilities, terminal utility), and type here (one looong line with enter at the end):
ps -laxwww|grep MAD|grep -v grep|tail -n 1|cut -d/ -f2-|(read a b c d e f g i j k l;echo DoQuit;read </dev/tty;/$a -v -m0xffffffff -s ~/avastlog $b "$c $d" $e "$f $g" $h $i $j $k $l)3) if you enter the line correctly (each space is important), "DoQuit" will be printed. now, focus on avast!'s window, quit from menubar both avast and agent, then return to the terminal, and press enter. something like this should appear, otherwise go back to 1) and type the line again, correctly
Version of daemon: 0.0.80-beta
Datapath to 400.vps: '/Users/pavelcimbal/Library/Application Support/com.avast.MacAvast'
Workspace directory: '/private/var/tmp/folders.501/TemporaryItems/com.avast.MacAvast.DAEMONWD'
License file: ''
Packers set: 0x1FFFFFFF
Scan flags: 0x01800000
Recurse depth: 32
Connection timeout: 300s
VPS version: 081217-0 17.12.2008
VPS reload: on request
Scanlog file: '/Users/pavelcimbal/avastlog', mask 0xFFFFFFFF
Running mode: foreground
Listening interfaces: unix:/Users/pavelcimbal/Library/Application Support/com.avast.MacAvast/socket
Engine ready, listening on sockets4) run avast! again, and launch the scan. in the fact, you have spawned your own replacement of the daemon, and gui should adopt it without trying to run its own daemon instance. just have a look to your home directory - file avastlog should be there, and should grow. this is the file we want (compress it using zip or similar tool, to get reasonable size of the log, at least under ~100MB).
You will get rid of this logging later, simply by quitting both avast and daemon (your tweaked instance will be killed, and next time, gui will start its own normal version as usually).
regards,
pc
... i hope, it's simplified enough to be understandable and reproducible
