Author Topic: Small problem with Full System Scan  (Read 2492 times)

0 Members and 1 Guest are viewing this topic.

Offline Uh_Clem

  • Jr. Member
  • **
  • Posts: 28
Small problem with Full System Scan
« on: May 03, 2012, 06:23:58 AM »
Ran into a small problem with 7.0(36770) in a Full System Scan on a MacBook Pro with OS X 10.6.8.

My 200GB hard drive has three partitions of approximately 80GB, 80GB and 38GB.  Partitions 1 & 2 are about 70-80% full; partition 3, about 25%.  When I do a full system scan, instead of proceeding straight down the directory through all three volumes, avast! completes Partition1 and Partition2 but then goes back to rescan Partition2 (which is actually a generation(-1) of Partition1 -- not that it should matter) before going to completion.  I can't tell you if it actually scanned Partition3 (which only contains a single disk-image file), since I missed the end (and since it took nearly three hours to get there, I wasn't going to run it again just to find out).

That's it.  Please let me know if there's anything else I can tell you.

Offline zilog

  • Avast team
  • Advanced Poster
  • *
  • Posts: 957
  • or #f0; daa; add a,#a0; adc a,#40
Re: Small problem with Full System Scan
« Reply #1 on: May 03, 2012, 02:48:05 PM »
Hallo,
the easiest way how to test whether a filesystem place was or wasn't scanned is to drop an EICAR.COM test-file there.
So just temporarily disable webshield and fileshield, and download this test file from http://eicar.org/download/eicar.com .
Then, place it to the third partition, and let the full system scan run again. I suppose it would be detected (= partition would be scanned), if not, i'll forward this to Mity.

pc
May's Law: Software efficiency halves every 18 months, compensating Moore's Law. (David May, INMOS)

Offline Uh_Clem

  • Jr. Member
  • **
  • Posts: 28
Re: Small problem with Full System Scan
« Reply #2 on: May 05, 2012, 12:03:42 AM »
Hi zilog.

I've run the test again and have determined that Partition3 is indeed being scanned but I'm really more concerned about the superfluous rescan of Partition2 which just causes an unnecessary 54 minute delay before the next step.
« Last Edit: May 05, 2012, 05:11:49 AM by Uh_Clem »

Offline mity

  • Avast team
  • Full Member
  • *
  • Posts: 149
Re: Small problem with Full System Scan
« Reply #3 on: May 11, 2012, 01:01:50 PM »
Hello Uh_CLem,

could you please type the following commands in the Terminal.app and provide their output?

Code: [Select]
ls -l /Volumes/
mount

Thanks,
Mity
« Last Edit: May 11, 2012, 01:06:53 PM by mity »

Offline Uh_Clem

  • Jr. Member
  • **
  • Posts: 28
Re: Small problem with Full System Scan
« Reply #4 on: May 13, 2012, 05:13:16 AM »
Hi Mity,

Here are the results:

 ls -l /Volumes/
total 8
lrwxr-xr-x   1 root  admin     1 May 12 09:40 MBP HD1 -> /
drwxrwxr-t  42 root  admin  1496 May  4 12:47 MBP HD2
drwxrwxr-x  15 root  admin   578 May  4 15:06 MBP HD3

mount
/dev/disk0s2 on / (hfs, local, journaled)
devfs on /dev (devfs, local, nobrowse)
map -hosts on /net (autofs, nosuid, automounted, nobrowse)
map auto_home on /home (autofs, automounted, nobrowse)
/dev/disk0s3 on /Volumes/MBP HD2 (hfs, local, journaled)
/dev/disk0s4 on /Volumes/MBP HD3 (hfs, local, journaled)