Does a "Full System Scan" in 5.0 check archives?

Avast Free Antivirus / Premium Security
1

Does a “Full System Scan” in 5.0 check archives?

I ask because there is no setting to select which archive/packer types to scan as there is with RealTime scanning or scanning with the Explorer add-on.

2

Not so sure… the help file is inconclusive in this point.

3

no it doesn’t, would take ages :wink: just watch the scan while it’s on areas where you know archives are located, or add to the report “skipped items” = items skipped because of the scan settings (as opposed to soft errors = items skipped because files in use). You can see more about the full scan settings in avast5.ini : it doesn’t have any “scanpackers” line.

4

Thanks for the confirmation.

That’s quite a big oversight. Not really a “Full System Scan”, is it? I’d like to see the explanation for this “feature”, and speedy run-time doesn’t cut it.

At least a work-around is available via “Select Folder to Scan”, and selecting the entire computer, making sure first to check the appropriate setting to scan all archives. Unfortunately, I doubt that most people will notice this, and blithely assume that “Full System Scan” is giving them a clean bill of health.

5

Why not create a custom scan, here you can set the areas, packers and a slew of other settings.

Archive (zip, rar, etc.) files are by their nature are inert, you need to extract the files and then you have to run them to be a threat. Long before that happens avast’s File System Shield should have scanned them and before an executable is run that is scanned.

6

True all that, but when I first install Avast on a machine, I like to actually scan the entire thing without going through hoops (you know, like going to the forums to ask if full=full) . That’s a pretty standard AV function.

Thanks for pointing me to the Custom Scan.

7

You’re welcome.

8

Hi :slight_smile:

I’m pretty sure… Avast 5 - Does Scan The Archive :wink:

Coz Vlk Said This…

The Full Scan in v5 has archive unpacking enabled (you may disable it in the scan's settings).

Here: http://forum.avast.com/index.php?topic=56587.0

Hally

9

@ Hally: it probably just scans the default packer list, and nothing else, so no RAR, no ZIP etc…

10

I am also interested in the answer to this question. It appears nobody here knows the answer, it’s all just guessing. It would be nice if somebody from the alwil crew could answer this one for us. I will notify them and hopefully they will reply soon.

11

look there’s a way to know for sure: put a ZIP or RAR file anywhere in your program files folder, or in your windows folder, have this archive contain an EICAR file, and launch a full scan… see what happens :wink: … won’t be detected, I’m absolutely sure about that…as well as I’m sure that the default packers list is scanned in full scan (preset), otherwise the option to extract wouldn’t make sense. You can also generate a report containing “OK” and “skipped” files etc…and see if any other archive was scanned at all. “skipped” meaning files not scanned because of the module settings, “soft errors” because file is in use. Have fun :wink:

12

Again, all we can do is guess over here. A nice technical explanation from the alwil staff(that we can quote to other users when they ask the same question) is what i would like. Exactly what does and does not get scanned in the Full System Scan. The help files are a bit vague.

13
Again, all we can do is guess over here
no, it wouldn't be just guessing if you tried what I suggested, why the need of an official comment when you can go check yourself ???
14

Logos I CANNOT ! i’m in linux doing some work and won’t be booting back into windows for quite awhile.

15

Ok, that’s your problem, but don’t say we’re left with just guessing. And as long as you’re in Linux, a full scan with avast 5 isn’t a real issue :wink:

16

The option to extract files from archive or not is enabled in all predefined scans.

17

@Logos: Do you work for alwil ? You have some permission to speak in their name ? Was i asking you ? A big NO to all of these questions. STOP REPLYING TO ME, I AM NOT INTERESTED IN YOUR OPINION ! Is that clear enough ?

18

so stop commenting in this thread if you don’t want people to answer you, especially when you don’t have much to say do you, is that clear too? :smiley: ;D

http://www.disneylandpostcards.com/images/Mickey-Mouse.png

19

If you would’ve read my post you would actually see that i was asking for some alwil input, not yours. What happened is you started replying(to me) instead of them. I explained nicely that i want to hear from someone at alwil what the full system scan scans in a bit more detail. Which is something you cannot do as you are not in the alwil crew and all you do is guess guess guess and the re-edit your posts to appear all-knowing. And now you want to drag me into some sort of an useless arguement like you frequently do with others(even people from alwil). Grow up ! I will wait for someone from alwil to come in this thread and simply ignore you from now on.

@someone from alwil: Is archive scanning enabled in a full scan ? If YES then is it the whole lot of packers or just the ones that are enabled in the file system shield ?

EDIT: That pic you just posted only proves my point.

20

I proved you wrong a few times already, I won’t waste more time, you’re completely ridiculous ::slight_smile: