Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: miscreant on March 24, 2010, 09:37:25 AM
-
Ive set the scan from windows explorer (explorer context menu scan) to highest settings available .When scanning a virus it shows no virus found.However if i execute the file ,avast detects it .Can someone explain how this works?
tia
m
-
Maybe that exe file was packed by unsupported exe-packer, so avast can't detect the virus in that exe file.
But once it extracted to the temp folder, avast can detect the virus and block it.
Unfortunately, I feel avast has less ability to unpack exe files compared to Microsft Security Essentials etc...
(Of course, I like avast very much than MSE ;))
-
Thank you for the explanation , :)
m
-
Thank you for the explanation , :)
m
I think that you got this in mid virus definitions updates.
I saw this coming a mile off when I received a suspect email in my anti-spam software about a change of facebook password and attached file. I knew for a fact this was malware as a) I don't have a facebook account and b) there would be no way it would be notified in this way and attaching an .exe file inside a .zip attachment. So I allowed it through to so I could check.
I unpacked it from the .zip file and no alert from avast and uploaded it to virus total where 22/42 detected it as malicious. So I sent the file to avast from the chest reporting the problem VT detections, but no on system detection. Having started a manual update to ensure the file was submitted and shortly after that avast alerted to the file.
What the h*ll would you want to execute this file for, when it is so obviously dodgy ???
Never click links or open attachments or run the files in attachments in unsolicited emails, your system will tank you for it.
So this time you got very lucky in that avast detected it when you tried to run it, what would have happened if avast didn't detect this variant (almost anything) ?
-
Hi David...
I executed it in shadow mode (i use shadow defender +shadow protect) and also have a backup image of my pc.Its not the first time that the explorer scan hasnt detected similar virus/malware ,but when executed it does detect it.
m