PDA

View Full Version : Real-Time Protection for Archives

stimulator32
June 2nd, 2009, 03:55 PM
Why the real-time protection for archives does not work in both ess and eav?

Many Thanks ..
Cudni
June 2nd, 2009, 04:14 PM
it was disabled? ;)
seriously though does not work how, could you give examples?
stimulator32
June 3rd, 2009, 02:42 AM
-{ Quote: "it was disabled? ;)
seriously though does not work how, could you give examples?" }-

ANY MALICIOUS FILE WHEN YOU ZIPPED IT ,FOR EXAMPLE, IT DOES'NT BE DETECTED BY REALTIME PROTECTION ..

TO BE DETECTED, YOU MUST SCAN IT ON DEMAND ONLY!
pegas
June 3rd, 2009, 03:10 AM
-{ Quote: "ANY MALICIOUS FILE WHEN YOU ZIPPED IT ,FOR EXAMPLE, IT DOES'NT BE DETECTED BY REALTIME PROTECTION ..

TO BE DETECTED, YOU MUST SCAN IT ON DEMAND ONLY!" }-

It's not a problem at all. Any harmful file inside a standalone zip file that is NOT executed, poses no risk. As soon as you try to deal with that zip file (open, extract etc.), ESS scans on the fly and detects all risks. If that zip file is password protected, ESS can't scan this file unless password is logged. However, in any way, you are not exposed to any risks (regardless an archive file is protected or not), ESS will ever scan an archive file.
stimulator32
June 3rd, 2009, 03:30 AM
-{ Quote: "It's not a problem at all. Any harmful file inside a standalone zip file that is NOT executed, poses no risk. As soon as you try to deal with that zip file (open, extract etc.), ESS scans on the fly and detects all risks. If that zip file is password protected, ESS can't scan this file unless password is logged. However, in any way, you are not exposed to any risks (regardless an archive file is protected or not), ESS will ever scan an archive file." }-

This is very good .. but the main question is:

Why ESET put archives' settings in the real-time protection module?

209413

209414
pegas
June 3rd, 2009, 04:25 AM
-{ Quote: "This is very good .. but the main question is:

Why ESET put archives' settings in the real-time protection module?

209413

209414" }-

You should have enabled the default archive settings. Other options can be left intact unless you want to limit the size for archive files to be scanned. It might be convenient only in case you deal (download, open etc.) with very big archives oftenly.
Marcos
June 3rd, 2009, 04:44 AM
Real-time protection can scan sfx archives internally on file create, that's why these settings are there.
stimulator32
June 4th, 2009, 09:46 AM
-{ Quote: "Real-time protection can scan sfx archives internally on file create, that's why these settings are there." }-

Thanks Marcos ..