Author Topic: Avast! Free 5.0 and last access timestamps  (Read 4148 times)

0 Members and 1 Guest are viewing this topic.

poutnik

  • Guest
Avast! Free 5.0 and last access timestamps
« on: May 02, 2010, 03:49:34 PM »
Hello,

Could you, please, confirm, if Avast 5 still keeps Last access timestamp intact or not ?

I had for last years feelings that Avast! 4.x does not modify Last Access Timestamps of scanned files, what is expected behavior from well-written scanning software.  We can see it in Avast! History log:   Version 4.0.183 - March 17, 2003 - .......... last-access-time of scanned files is not being updated anymore  

Few weeks ago I upgraded to Avast 5.0, and yesterday I have performed complete AV scan.

I am used to defragment/optimize my disks by great free script based MyDefrag by Jeroen Kessel, using for file placement decisions also Last Access timestamps.

When I  launched MyDefrag not long after that AV scan, I have realized practically all files on my system partition have their Last Access timestamps destroyed - updated.
I have never seen such situation on my PC in last years. Note that from 35 GB of system partition files about 80% of them had previously Last Access older than a month, and about 65% had last access more than 4 months ago.

I am not aware about any other broad scanning. Windows Defender has such scan disallowed on my PC, and it does not scan all files, even if it has scheduled scan allowed.
« Last Edit: May 02, 2010, 04:46:23 PM by poutnik »

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11851
    • AVAST Software
Re: Avast! Free 5.0 and last access timestamps
« Reply #1 on: May 02, 2010, 06:51:12 PM »
It should.
I'm not saying there can't be a problem somewhere... but my first guess would be the previous WinAPI-based signature verification code... which is now gone.

Right now, I cannot make the last-access time change even when I try to... maybe I've got it disabled, don't know.

poutnik

  • Guest
Re: Avast! Free 5.0 and last access timestamps
« Reply #2 on: May 02, 2010, 07:13:30 PM »
It can depend on OS, .e.g. XP has LA by default ON, Vista has it off, but I have it switched on.  I guess W7 will be like Vista.

poutnik

  • Guest
Re: Avast! Free 5.0 and last access timestamps
« Reply #3 on: May 02, 2010, 07:18:23 PM »
It should.
I'm not saying there can't be a problem somewhere... but my first guess would be the previous WinAPI-based signature verification code... which is now gone.

Right now, I cannot make the last-access time change even when I try to... maybe I've got it disabled, don't know.
It looks like not only files expected to have signatures are affected.
« Last Edit: May 02, 2010, 07:25:36 PM by poutnik »

poutnik

  • Guest
Re: Avast! Free 5.0 and last access timestamps
« Reply #4 on: May 02, 2010, 07:24:22 PM »
Confirmed, that both Context menu testing 
and Avast GUI Selected folder testing ( usage of permanent memory set to ON )

DO change Last access timestamp.
« Last Edit: May 02, 2010, 07:28:11 PM by poutnik »

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11851
    • AVAST Software
Re: Avast! Free 5.0 and last access timestamps
« Reply #5 on: May 03, 2010, 09:48:36 PM »
Should be fixed now.

poutnik

  • Guest
Re: Avast! Free 5.0 and last access timestamps
« Reply #6 on: May 08, 2010, 11:31:41 AM »
Maybe after version 5.0.545  .....
It probably depends on temporary database of already tested files.

After 1st testing of chosen folder from Avast 5.0.545 GUI last access time changed,
after the 2nd testing of the same folder it did not change.
« Last Edit: May 08, 2010, 11:35:27 AM by poutnik »

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11851
    • AVAST Software
Re: Avast! Free 5.0 and last access timestamps
« Reply #7 on: May 08, 2010, 11:50:58 AM »
It doesn't have anything to do with the version of the program, all relevant is contained inside of the virus database.

How did you scan that folder? Explorer context menu, "Interactive selection" task... or a custom one?

poutnik

  • Guest
Re: Avast! Free 5.0 and last access timestamps
« Reply #8 on: May 08, 2010, 11:57:51 AM »
I forgot about common updating of database and core.....  

In first posts I used both Explorer context menu and Interactive Selection, with the same result.
( after previous full scan, when I had discovered the issue.)

This time I used Interactive Selection only.
for review I use file manager from 7-zip, to be sure it is not affecing timestamps.
« Last Edit: May 08, 2010, 12:02:46 PM by poutnik »

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11851
    • AVAST Software
Re: Avast! Free 5.0 and last access timestamps
« Reply #9 on: May 08, 2010, 12:06:47 PM »
I'll try to reproduce that... though it's kinda strange that the first scan would change the timestamps, and the second not.

What folder was it you scanned this? Might make a tiny difference...

I see I'm mixing the task names up with avast! 4.x ;) - it's not called "Interactive selection", but rather "Select folder to scan" now (the whole task, not the particular area to scan)
So, you used this "Select folder to scan" default task - with default settings, or did you change anything?

poutnik

  • Guest
Re: Avast! Free 5.0 and last access timestamps
« Reply #10 on: May 08, 2010, 12:11:34 PM »
It was downloads folders on data partition.
You are right, Select folder to scan - I was just guessing english name, using CZ version  :)
There are no settings, you mean probably general Avast default.

OT: button for reset ( global, local) of settings could be handy.

I know I probably changed few things, but not much.

Funny thing is, I cannot reproduce another timestamps update on other folders..   :)

« Last Edit: May 08, 2010, 01:03:19 PM by poutnik »

poutnik

  • Guest
Re: Avast! Free 5.0 and last access timestamps
« Reply #11 on: May 08, 2010, 12:47:05 PM »
A have tried another folder scan, after PC restart to wipe temporary db, but timestamps seem OK.

I have permanent db ON - probably filled by lot of data from a week old full system scan,
but I guess its scope are not all files, just signed up ones, possibly from trusted vendors.