.PNG & .ICO safe to exclude ?

Discussion in 'NOD32 version 2 Forum' started by ChicknDip, Aug 29, 2007.

Thread Status:
Not open for further replies.
  1. ChicknDip

    ChicknDip Registered Member

    Joined:
    Aug 15, 2007
    Posts:
    59
    Hi, since I work with a lot of .PNG & .ICO files, is there any known danger from these files ? Can they safely being excluded in the AMON module ?

    Thanks for the help ! :)
     
  2. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    I don't see any reason for excluding them. It absolutely doesn't slow down the computer.
     
  3. ChicknDip

    ChicknDip Registered Member

    Joined:
    Aug 15, 2007
    Posts:
    59
    EXactly, I tried just for sake, but it indeed didn't make any difference.
     
  4. ASpace

    ASpace Guest

    Well , if you exclude *.exe files you'll definitely make a difference . At first your computer will be a little bit faster , then you'll get infected :D :D :thumb:
     
  5. ChicknDip

    ChicknDip Registered Member

    Joined:
    Aug 15, 2007
    Posts:
    59
    It's weird, but in my 10 years on computer I have yet to get the first virus on my system. ;)
     
  6. Inspector Clouseau

    Inspector Clouseau AV Expert

    Joined:
    Apr 2, 2006
    Posts:
    1,329
    Location:
    Maidenhead, UK
    NOD has a proper filetype engine so all files which are not required to scan will be ignored anyway. The time you save from not reading the file headers to determine the file type is minimalistic and not worth the effort.

    Another thing is that you can rename normal bitmap files to ico and that would represent a possibility of exploit risk if there is a new GDI exploit when you fully ignore this type of files.
     
  7. Proactive Services

    Proactive Services Registered Member

    Joined:
    Jan 10, 2006
    Posts:
    153
    Location:
    Petersfield, Hampshire, UK
    They most defintely can be a threat - the Windows Cursor exploit that hit earlier this year used PNG and ICO file types at some point, I believe. I wouldn't have thought that you would see much performance difference with them excluded anyway.
     
Thread Status:
Not open for further replies.