Author Topic: Avast testing,it dont pass!!  (Read 3461 times)

0 Members and 1 Guest are viewing this topic.

Offline superhacker

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 979
  • superhacker != super mario
Avast testing,it dont pass!!
« on: February 15, 2010, 08:20:41 PM »
 i was doing some scripts with python ,but i dont know it come to my mind that testing avast!
1.i restore a virus to c:
2.change avast settings to ask me what to do when a virus is detected
3.i wrote in the python editor"i use active python":
import shutil
shutil.copyfile('c:\\115.exe','d:\\115.exe')
4.avast warn me about the virus so i choose block the virus
5.the virus was in c"normal as i restore it to c"and in d"not normal coz avast block the operation"
6.any word
 :'( :'(
Dreams don't die, they just fall asleep.

Offline superhacker

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 979
  • superhacker != super mario
Re: Avast testing,it dont pass!!
« Reply #1 on: February 15, 2010, 11:43:16 PM »
dont believe?!test it your self and see ;)
Dreams don't die, they just fall asleep.

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11773
    • AVAST Software
Re: Avast testing,it dont pass!!
« Reply #2 on: February 15, 2010, 11:47:11 PM »
I'm not completely sure what you're trying to say, but I think you should check the settings of the File System Shield.

Executable files are not scanned "on read" by default, only "on execute" and "on close" - and scanning on close is done after the file is written to the target location, so if you choose block (and not e.g. delete), it will be there.
So yes, it's normal.

Offline superhacker

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 979
  • superhacker != super mario
Re: Avast testing,it dont pass!!
« Reply #3 on: February 15, 2010, 11:51:34 PM »
but the read and write operation done perfectly so where is the blocking if the virus reach its place?!
edit:avast will delete or move to chest the python file not the virus file
« Last Edit: February 15, 2010, 11:54:50 PM by superhacker »
Dreams don't die, they just fall asleep.

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11773
    • AVAST Software
Re: Avast testing,it dont pass!!
« Reply #4 on: February 15, 2010, 11:56:36 PM »
Blocking "on close" doesn't really do anything... what should it be, anyway?
I don't really understand what you mean by moving the python file... can you maybe post some screenshots of the detections?

Offline superhacker

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 979
  • superhacker != super mario
Re: Avast testing,it dont pass!!
« Reply #5 on: February 16, 2010, 12:07:11 AM »
that is
Dreams don't die, they just fall asleep.

Offline psikofunkster

  • Sr. Member
  • ****
  • Posts: 205
Re: Avast testing,it dont pass!!
« Reply #6 on: February 16, 2010, 12:47:14 AM »
that is

and cuould you please tell me which Internet security suite does?

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11773
    • AVAST Software
Re: Avast testing,it dont pass!!
« Reply #7 on: February 16, 2010, 08:52:20 AM »
avast! doesn't report Python to be infected - it only shows you what process made the request.
However, if you select "Move to Chest", it will be the D:\115.exe file that will be moved... are you saying it's not?