• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

Scan compressed files option.

Can someone explain how Norton scan a compressed files? I download Eicar test file packed in ZIP archive and Norton don't do anything with it. Only when I extract this file from archive or run a contextual scan it detects it. I think this archive should be scanned after download automatically and Eicar should be removed so that I did not do anything with it manually.

Labels: Virus Scan

Replies

Kudos0

Re: Scan compressed files option.

Did you check your settings here?

Under Settings / Antivirus / Scans and Risks

I set mine to ignore compressed files as such since they are scanned on access.

If not ignored then it can take an immensely long time to do a complete scan since some compressed files (eg .cabs) can contain nested layers.

Hugh
Kudos0

Re: Scan compressed files option.

I use by-default settings so scan compressed files is enabled. Also I don't have any problems with system scan. I want to know why Norton didn't detect Eicar in ZIP file untill I extract it.
Kudos0

Re: Scan compressed files option.

> save eicar zip file to desktop and On-Demand Scan zip file.
http://s13.postimg.org/75vp5ars7/screenshot.png
Filename: eicar.com
Threat name: EICAR Test StringFull Path: c:\users\bjms\desktop\eicar_com.zip
Threat type: Virus. Programs that infect other programs, files, or areas of a computer by inserting themselves or attaching themselves to that medium.
eicar.com Threat name: EICAR Test String
Many Users
Hundreds of thousands of users in the Norton Community have used this file.
Mature
This file was released 7 years 2 months ago.
High
This file risk is high.
Source: External Media
File Actions
eicar.com
[Contained in] c:\users\bjms\desktop\eicar_com.zip Deleted
File Thumbprint - SHA: Not available
http://s13.postimg.org/jukxrurl3/screenshot.png


https://community.norton.com/en/forums/norton-security-should-scan-zip-files-soon-they-are-downloaded

Kudos2 Stats

Re: Scan compressed files option.

I want to know why Norton didn't detect Eicar in ZIP file untill I extract it.

Files in a compressed file, ZIP or other, would only get scanned when accessed, or if you specifically scan them manually. They do not get scanned as they are downloaded.  

Things happen. Export/Backup your Norton Password Manager data.
Kudos0

Re: Scan compressed files option.

Thanks Peter for thinning it down to specifics!

Hugh
Kudos0

Re: Scan compressed files option.

It's strange. In user's manual I saw that Norton scans INSIDE archives to find some viruses. Anyway an option name means that Norton should scan inside archives, but it happens only after extracting. What will change if I disable this option? I thing nothing, Norton still will detect viruses after extracting, so this option is useless I think if it work as you said guys.
Kudos1 Stats

Re: Scan compressed files option.

Vitalik93:  [..] Norton should scan inside archives, but it happens only after extracting. [..]

> On-Demand Scans will scan within container files.
https://community.norton.com/en/comment/7199201#comment-7199201

Mike1776: Norton Security should scan zip files as soon as they are downloaded
https://community.norton.com/en/forums/norton-security-should-scan-zip-files-soon-they-are-downloaded

Kudos0

Re: Scan compressed files option.

I know that on-demand scan do that, but it would be nice if Norton scan compressed files with real-time modules also. I agree with Mike1776 post there... Especially considering that user's manual said that this option should scan a content of compressed files.

Kudos0

Re: Scan compressed files option.

it would be nice if Norton scan compressed files with real-time modules also

I was under the impression that Norton did just that as shown in the [?] under the section of settings I referred to earlier:

Compressed File Scan

Scans and repairs the files inside compressed files.

By default, Compressed File Scan option is turned on. In this case, Norton scans and detects viruses and other security risks in the files within compressed files. When Norton performs such a scan, it extracts a file and then checks for threats inside the file.

Norton does not scan and repair password-protected compressed files.

The other option in this section is configurable only when you turn on the Compressed File Scan option. This setting include:

  • Remove Infected Folders

    When this option is set to Automatic, Norton automatically deletes the infected compressed folders from your computer. Even if one file in a compressed folder is infected, Norton deletes the entire folder and all its contents.

    However, if you set this option to Ask Me, Norton alerts you when it detects an infected compressed folder.

You receive many compressed files that are infected through email messages or through Internet download. Keep this feature turned on to ensure that Norton checks the compressed files that are infected.

By automatically scanning all compressed files, Norton maintains a higher level of security.

What I don't know (amongst many things) is:

 1 -- Whether Norton has changed in the product without the documentation being changed

 2 -- Whether what it says about Compressed files settings applies to Email scanning which is a separate section. 

Hugh
Kudos0

Re: Scan compressed files option.

Be helpful if we could follow the "old post by an employee" posted here
https://community.norton.com/en/forums/norton-security-should-scan-zip-files-soon-they-are-downloaded

Auto-Protect does not scan within compressed files
https://support.symantec.com/en_US/article.TECH99010.html

Kudos0

Re: Scan compressed files option.

Yep, after reading just the same manual I thought that Norton will scan archives in real time also, but it applies only to Full scan, Quick scan and other similar. I wrote to Support yesterday and suggest them to improve this option, so as Norton could scan inside compressed files in real time, so maybe this feature will be released someday.

Kudos0

Re: Scan compressed files option.

Hello

Did you use the Product Suggestions Forum?

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: Scan compressed files option.

Nope, I talked with support agent in Chat.

Kudos0

Re: Scan compressed files option.

Hello

Ok, since you said you wrote to them, I thought you meant you sent them an email, but that wouldn't work since they don't do support by email any more. Having a chat session is ok.

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.

This thread is closed from further comment. Please visit the forum to start a new thread.