2 ответов в этой теме

[PiCo]

I scan the whole folder containing the password protected archives and I get 3/5 detections.

[Scan path] E:virus
>E:virusiamavirus.zipiamavirus.mpg - password protected - skipped
>E:viruskilldisk.zipTest.exe - password protected - skipped
>E:virusKraken_botnet.zipmalware.exe infected with Trojan.Packed.560
E:virusKraken_botnet.zip - archive contains infected objects
>E:virusvistacrack.zipvistacrack.exe infected with Trojan.DownLoader.44732
E:virusvistacrack.zip - archive contains infected objects
>E:viruszicar.zipeicar.txt infected with EICAR Test File (NOT a Virus!)
E:viruszicar.zip - archive contains infected objects

----------------------------------------------------------------------------------------------

I scan each password protected archive by right clickng on it and I get 2/5 detections!

[Scan path] E:viruszicar.zip
>E:viruszicar.zipeicar.txt - password protected - skipped

[Scan path] E:virusiamavirus.zip
>E:virusiamavirus.zipiamavirus.mpg - password protected - skipped

[Scan path] E:viruskilldisk.zip
>E:viruskilldisk.zipTest.exe - password protected - skipped

[Scan path] E:virusKraken_botnet.zip
>E:virusKraken_botnet.zipmalware.exe infected with Trojan.Packed.560
E:virusKraken_botnet.zip - archive contains infected objects

[Scan path] E:virusvistacrack.zip
>E:virusvistacrack.zipvistacrack.exe infected with Trojan.DownLoader.44732
E:virusvistacrack.zip - archive contains infected objects

----------------------------------------------------------------------------------------------

As you can see when scanning zicar.zip by right clickng on it, it isn't detected, but if you scan the folder in which it is in, it gets detected!
ALL archives are password protected!

And yes! Another quality topic by me :D

PiCo

[Borka]

>E:virusKraken_botnet.zipmalware.exe infected with Trojan.Packed.560
E:virusKraken_botnet.zip - archive contains infected objects

Are you sure this archive is password protected?

---
С уважением,
Borka.

[PiCo]

Everything is password protected under password "infected", the kraken botnet too :P . I use WinRaR 3.71.

And it's still detected with a scan!

This is not a complaining thread of course, it's just odd some times Dr.WEB comes across a password protected file and skips it as it should and some times it makes a detection on it.

PiCo