can somebody tell me the differents
from
types:
content
and name extension
if i chose "name extension " & on packers "zip archive "
the scan engine will scan into the archive?
If you specify “zip archive” in packers, the zip archives will be scanned.
The difference between the “types” options is the way it is determined what file should be scanned.
If you specify “name extension”, the files with .exe extension (and many others, it’s just an example) will be scanned - i.e. the file notepad.exe will be scanned; however, if you rename it to notepad.jpg, it will not.
If you specify “content”, it means that any file will be opened and its type will be analyzed. In our example, even the renamed notepad.jpg will be scanned, since it will be recognized as EXE file by its header.
I’m not sure if the same holds for archives (i.e. for “name extension” settings, only the files with ZIP extension would be checked inside; for “content”, the file content would be analyzed and if it’s determined as ZIP, it will be scanned inside). You can try yourself - pack EICAR into zip file, scan, then rename .zip to something else (.txt), and scan again - you’ll see if there’s any difference between the “type” setting here.
thanks Igor
with the setting name Extension & zip file , avast doesn’t check inside the archive
i did a try
ummm
i think there is a bug
i put some virii in a zip file
scan for extension and zip file !
avast scan the zip file , in my report , but NOT INSIDE…,
in the report i can read avast scan the file zip,but not what in the zip file i have stored
Are you really sure you scan ZIP archives ? If all other (!) ZIP archives were scanned except your virii one you can send me it. Although I have doubts there would be a zip bug. Thanks!
TYPES BY CONTENT
- avast! Report
- This file is generated automatically
- Task ‘Copy of Scan: interactive selection’ used
- Started on Friday, July 25, 2003 9:54:22 AM
C:\trial\virus!.zip\Update.exe [L] Win95:CIH 1.x (0)
C:\trial\virus!.zip [+] is OK
Infected files: 1
Total files: 2
Total folders: 1
Total size: 228.7 k
- Task stopped: Friday, July 25, 2003 9:54:24 AM
- Run-time was 2 second(s)
By NAME EXTENSION
- avast! Report
- This file is generated automatically
- Task ‘Copy of Scan: interactive selection’ used
- Started on Friday, July 25, 2003 9:56:19 AM
C:\trial\virus!.zip [+] is OK
Infected files: 0
Total files: 1
Total folders: 1
Total size: 72.2 k
- Task stopped: Friday, July 25, 2003 9:56:19 AM
- Run-time was 0 second(s)
In the ZIP file there is only one virus!
and i didn’t DELETE IT
scan with extension avast checks zip file BUT not inside!
scan with content avast check inside…
look my report!
I can confirm that it works as mantra wrote. Now someone has to say if it´s a bug or feature. :
Vlk, where are you? ;D
Why should it be a feature if the conditions were clear: .ZIP extension and ZIP packer scanning is ON (than “so called IsItZIPFile” function should be call on every file which match the given extensions).
You´re right, pk. Once is avast! set to scan packers, the setting shouldn´t be affected by any other task option (except exclusions)…
It was a bug (already fixed). Occured only if extraction was being done to memory (and not to temp files on disk) - i.e. in case you have lots of RAM.
A fix will be included in the next update.
Thanks for pointing it out, and sorry for this.
Vlk
great ;D
the standard shield seems to have the same bug or?
Vlk
avast stored every task sessions
even if i uncheck "store results in database for later processing
For me, it stores only the “session info” (name, start time, runtime, number of files tested/infected) - not the results themselves (i.e. the infos on the particular files).
The results (for the files) are there until avast! is restarted, but then they disappear.
For you, even the info on infected messages is stored (and appears again when avast! is restarted)?
nope
igor
it’s like u
it stored only session info!
sorry