Does CAV excludes files totally..?

[Avinash]

Hi All,
Yeah I know how to make CAV exclude files.

But a very interesting find by me. Suppose that you have 2 files.

1). XXX.exe which is a clean file is added to the exclusion list.
2). YYY.exe which is detected as virus/malware by CAV (false positive) is not not added to the exclusion list.

Now suppose that XXX.exe is trying to read the file YYY.exe(and not executing it) then CAV reports YYY.exe is virus/malware.

What I mean to say is that CAV doesn’t excludes any file totally. It if it would have then why am I getting the alerts while reading YYY.exe. It means CAV is monitoring XXX.exe but it should not because I have added it to the exclusion list.

I tested the same with Avira Antivir but it excludes the file XXX.exe totally and not even cares what it is doing.

Ah! an exclusion is an exclusion then why have an eye on that ???

Any way to exclude file totally will be appreciated

Thanks.
Avinash

[HeffeD]

No, it means that CAV is monitoring YYY.exe…

Let me see if I understand your example.

XXX.exe is a false positive and is excluded.
YYY.exe is a false positive that isn’t excluded.

XXX.exe attempts to access YYY.exe and you get an alert for YYY.exe. Is this correct?

This is exactly what I would want to see! You’ve excluded XXX.exe, not YYY.exe… 88)

If XXX.exe is trying to access any potentially harmful file, I want my AV to jump on it! :o

I definitely do not think that excluding a file from my AV should allow it free reign to access any other file on my system without giving any regard to the status of that file.