| Summary |
| Product: | F-PROT Antivirus for Windows |
| Version: | 3 |
Please note that version 6 of F-PROT Antivirus for Windows has been released. We recommend that all Home, Corporate and Mail Server users of version 3 of F-PROT Antivirus for Windows upgrade their program to the newest version as soon as possible.
| Why is F-PROT Antivirus only reporting viruses inside password protected archives as suspicious and not identifying them? |
Password protection prevents antivirus software from using conventional methods of accessing archives in order to scan executables and disinfect any threats. F-PROT Antivirus does not attempt to access such archives and does not, therefore, scan the files inside directly. Instead, F-PROT Antivirus uses heuristics to detect files that match certain profiles and then alerts the user by flagging such files as suspicious.
Not only is this a far more secure method of threat detection in its better-safe-than-sorry approach but it also makes F-PROT Antivirus far better equipped to tackle new variants of known threats as well as entirely new threats that might emerge. In fact, we intend to increase F-PROT Antivirus’s use of this method of threat detection in the future. With this method, malware detection relies less on identity and name recognition, a re-active approach, and more on the pro-active approach of profile and behaviour recognition.
E-mail attachments that contains password protected ZIP archives are usually the virus carrier. Many antivirus vendors have begun scanning the text of e-mails carrying password protected ZIP archives to find the password and open up the archive. However, the newest viruses that spread in this manner contain the password as an image, not as text, and therefore cannot be detected with this approach.
If you think that the password protected archive is infected, please disable the password protection on it and scan the archive with F-PROT Antivirus. For detailed instructions on how to disinfect the infected files within archives, please see How disinfect infected archives?
See also:- The Command-Line Scanner (fpcmd.exe) does not detect suspicious files in archives nested within other archives.
- What is an archive bomb?
- What size of ZIP archive does RealTime Protector scan?
- How to disinfect infected archives?
Feedback | Contact Technical Support | Contact Sales Support |