Scanning password protected archives

Discussion in 'NOD32 version 2 Forum' started by jlautier, Mar 21, 2007.

Thread Status:
Not open for further replies.
  1. jlautier

    jlautier Registered Member

    Joined:
    Mar 21, 2007
    Posts:
    3
    nod32 says it cannot scan archive file because it is password protected. How can I tell nod32 to scan these type of files pls?
     
    Last edited by a moderator: Mar 23, 2007
  2. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    You want NOD32 to prompt you for a password whenever encounters a protected archive? :doubt:
     
  3. Ocky

    Ocky Registered Member

    Joined:
    May 6, 2006
    Posts:
    2,677
    Location:
    George, S.Africa
    Folders/files encrypted 128 bit etc. will not be scanned ? I suppose they can't be, but please confirm. Probably only way is to decrypt them before scanning. Not important as AMON will protect as and when such files are decrypted and opened.
     
  4. Lollan

    Lollan Registered Member

    Joined:
    Feb 2, 2006
    Posts:
    288
    NOD32 scans on extraction, so if the files are password protected, they will be scanned before the system can be put into any harm. If the password is not provided, the files are essentially locked anyways and cannot do anything.
     
  5. jlautier

    jlautier Registered Member

    Joined:
    Mar 21, 2007
    Posts:
    3
    does nod32 scan within password protected archives (eg rar archives)?
    Thanks
     
  6. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    :eek: It would take ages to guess the password using bruteforce
     
  7. Brian N

    Brian N Registered Member

    Joined:
    Jul 7, 2005
    Posts:
    2,148
    Location:
    Denmark
    rar uses a much stronger encryption than regular zip archives, so it would indeed take ages as Marcos already mentioned.
     
  8. Ocky

    Ocky Registered Member

    Joined:
    May 6, 2006
    Posts:
    2,677
    Location:
    George, S.Africa
    Sorry, back to my post #3. I have folders containing files encrypted, 128 bit blowfish, not archives. NOD32 scans these without any hiccups. Are they scanned 'properly' i.e. in the same way as though they were not encrypted - and would infection be exposed/discovered as reliably as the same folders in a decrypted state ?
     
  9. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,374
    Try it it with the eicar test file and you'll see.
     
  10. Ocky

    Ocky Registered Member

    Joined:
    May 6, 2006
    Posts:
    2,677
    Location:
    George, S.Africa
    Thanks, Marcos. Please set me straight. Are the eicar files/archives all encrypted ?
    ( I suppose they are due to the characters in the ASCII string ?)
    Have tested before, NOD32 pops up immediately (as per my settings) and I terminate.

    BTW. If I choose to save the files to disc, do I r/click > save target as ?
    I ask because when doing this NOD32 pops up, I terminate and am
    then presented with the windows save dialogue box. When clicking
    save will NOD32 allow the download ? I don't want to disable IMON.

    Regards.
     
  11. jlautier

    jlautier Registered Member

    Joined:
    Mar 21, 2007
    Posts:
    3
    nod32 has found this virus "Win32/Keylogger.HotKeysHook.A trojan". I am used to norton where i would click on results and then be able to view info about a virus found and act accordingly. Does nod32 have the same feature anywhere pls? 10x
     
  12. Brian N

    Brian N Registered Member

    Joined:
    Jul 7, 2005
    Posts:
    2,148
    Location:
    Denmark
    If NOD32 found it in a trainer for a game you can just ignore it, it's harmless.
    You can also instruct AMON to ignore it or disable "unsafe applications" in AMON setup.
    -----------
    It hooks a keylogger to your keyboard so it can capture the keys you hit to enable different cheats.
    It ends as soon as you terminate the trainer however. It may be an unwanted application and that's why NOD32 alerts you.
     
    Last edited: Mar 25, 2007
Thread Status:
Not open for further replies.