Effectiveness of Scan

Discussion in 'ESET NOD32 Antivirus' started by JConLine, Sep 1, 2011.

Thread Status:
Not open for further replies.
  1. JConLine

    JConLine Registered Member

    Joined:
    Apr 16, 2009
    Posts:
    107
    I have a question about the effectiveness of scanning a downloaded application prior to installation. I try out a lot of software and always scan and check the digital signatures prior to installation but I don't always feel comfortable with the scans.

    So, how effective is scanning a setup file prior to installing the software?

    Jim
     
  2. NoobStick

    NoobStick Guest

    Joined:
    Jun 23, 2011
    Posts:
    0
    Hello Jim
    It is always wise to do a scan before executing a installation file, there could be a possibility, even if it small, that malware is actually bundle with the file you want to execute. How effective it is? that I cannot say, but in my opinion it is a good routine to scan installation files before execution. Better save than sorry you know :)

    All the best

    NoobStick
     
  3. SmackyTheFrog

    SmackyTheFrog Registered Member

    Joined:
    Nov 5, 2007
    Posts:
    767
    Location:
    Lansing, Michigan
    Manually initiating a scan will at best perform the exact same scan that would be run on the files if they were executed. At worst, the manual scan won't know how to unpack the contents of the installer so it won't even know what is in there until the installer is actually writing files to disk which would give you a false negative. So that is to say, if the definitions are going to miss it then all you have accomplished is wasting a small amount of time.
     
  4. toxinon12345

    toxinon12345 Registered Member

    Joined:
    Sep 8, 2010
    Posts:
    1,200
    Location:
    Managua, Nicaragua
    Extracted files will be scanned anyway and that can be a reason why Unpacking is very limited in the realtime scanner and is triggered for newly created files only.

    If you want to scan such files without manually extracting them, you can use additional parameters in the scanner.
     
    Last edited: Sep 3, 2011
Thread Status:
Not open for further replies.