Hi Allie, On Tue, 4 Jun 2002 21:07:08 -0500, you wrote: > Funnily, if you make NOD32 scan the archive it *will* detect the > virus. However, the system real-time scanner will ignore it, even when > you open the archive to examine the contents. It's when you attempt to > extract the infected file that the system real-time scanner kicks in.
I've not used NOD32, but have heard about it. Chances are, it has the capabilities of reading inside zip files. Most real-time scanners aren't too bothered by this because of the system resouces it'd waste trying to read the zip, then extract the zip, then read each file... *every* time you tried to move it (depending on the settings of course). And you're not going to get yourself infected by looking in a zip (unless the zip is a virus, in which case your scanner should have picked it up), so there is no need to scan it until it starts either being executed, or copied (extracted) to another part of your system. -- Jonathan Angliss ([EMAIL PROTECTED]) ________________________________________________________ Current Ver: 1.60m FAQ : http://faq.thebat.dutaint.com Unsubscribe: mailto:[EMAIL PROTECTED] Archives : http://tbudl.thebat.dutaint.com Moderators : mailto:[EMAIL PROTECTED] TBTech List: mailto:[EMAIL PROTECTED] Bug Reports: https://bt.ritlabs.com
