RDaleBarrow 0 Posted May 13, 2013 Share Posted May 13, 2013 I have received zip file email attachments from known malware distributors (DHS email scam) that I have saved and then scanned using ESET Smart Security 6. The files scan as being clean. I don't have the cojones to actually *open* the file to see what happens. At what point does ESET detect malware in a zip file? Link to comment Share on other sites More sharing options...
Janus 210 Posted May 13, 2013 Share Posted May 13, 2013 (edited) Hello RDaleBarrow Zip files are (archives) not scanned by real-time file protection, because files in archives will not be, or pose any risk before there are extracted, and when they are extracted the real time protection will catch them. You know, delete- block -clean or quarantine. Regards, Janus Edited May 14, 2013 by Janus Link to comment Share on other sites More sharing options...
siljaline 57 Posted May 14, 2013 Share Posted May 14, 2013 (edited) Please submit your file to hxxp://kb.eset.com/esetkb/index?page=content&id=SOLN141&ref=esf'>ESET for analysis. Edited May 14, 2013 by siljaline Link to comment Share on other sites More sharing options...
Former ESET Employees AlexJ 9 Posted May 14, 2013 Former ESET Employees Share Posted May 14, 2013 (edited) If you right clicked the zipped file and chose 'Scan with ESET Smart Security' it would have found any known variants that were inside. The log created would have looked like the screen shot attached. Ensure you have the latest virus signature database before scanning. Edited May 14, 2013 by Alex Jones Link to comment Share on other sites More sharing options...
gerardwil 1 Posted May 14, 2013 Share Posted May 14, 2013 Yes..rightclick scan works. My first post, try out. Gerard Link to comment Share on other sites More sharing options...
Administrators Marcos 5,071 Posted May 14, 2013 Administrators Share Posted May 14, 2013 Please submit the file to ESET as per the instructions here. Yes..rightclick scan works. My first post, try out. Gerard Link to comment Share on other sites More sharing options...
RDaleBarrow 0 Posted May 14, 2013 Author Share Posted May 14, 2013 Please submit the file to ESET as per the instructions here. Yes..rightclick scan works. My first post, try out. Gerard I deleted the file. Sorry. Link to comment Share on other sites More sharing options...
gerardwil 1 Posted May 14, 2013 Share Posted May 14, 2013 Please submit the file to ESET as per the instructions here. Yes..rightclick scan works. My first post, try out. Gerard These files are clean, so why to sent them? Link to comment Share on other sites More sharing options...
Former ESET Employees AlexJ 9 Posted May 14, 2013 Former ESET Employees Share Posted May 14, 2013 (edited) It is always good to submit any suspicious files even if a scan of them shows up clean. That way the labs can see if the file does anything malicious. Who knows it could be a new infection no one is catching yet. Edited May 14, 2013 by Alex Jones Link to comment Share on other sites More sharing options...
ESET Moderators Aryeh Goretsky 378 Posted May 15, 2013 ESET Moderators Share Posted May 15, 2013 Hello, As Alex Jones pointed out, you can always submit suspicious emails and attachments to ESET for analysis by our threat researchers. To do so, follow the instructions in ESET Knowledgebase Article 141, "How to submit virus or potential false positive samples to ESET's labs." Regards, Aryeh Goretsky Link to comment Share on other sites More sharing options...
Recommended Posts