Nevis , Mar 12, Joined: May 31, Posts: 6, They always have to be unpacked first where real-time protection catches them. They usually extract and execute directly from memory. But then again, all half decent antiviruses have unpacking engines for these buggers. Plus, the end user doesn't really have much control over these as they work very transparently and you can't really see if the file is packed or not unless you analyze it's structure. This way you can inspect the content before actually extracting the stuff.
Often malware is packed in these and then another filetype icon is attached to it to give impression of being something else than it actually is. Upon clicking, the content is unpacked and usually executed by the SFX archive.
These are a bit more dangerous than archives without the extraction engine integrated and if your AV doesn't catch it it will run right away where with normal archive you can still decide if you really want to run it based on the looks of the file after extraction name alone, icon, extension, whitespace, size, digital signature etc.
RejZoR , Mar 13, Thanks for your replies. This forum is amazing! Joined: Aug 26, Posts: Very nice explanation there RejZor.
But you have to set them to scan archives. Show Ignored Content. Your username or email address: Do you already have an account? No, create an account now. Yes, my password is: Forgot your password?
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register. By continuing to use this site, you are consenting to our use of cookies. Accept Learn More As long as you have the latest versions of Firefox, Chrome, Edge, etc. However, there is only a slight possibility that whatever downloading software that you use, such as ie6, that on download, the code can be executed using an exploit.
HTML may contain ads and other annoying popups using javascript, but modern browsers help protect you with those problems, especially malicious sites which may trick you into thinking that your computer has a 'virus' using a phishing antivirus page.
One of the oldest tricks used was to use a popup that told you that you needed the latest version of flash to view content and would download a virus called 'setup.
Sign up to join this community. The best answers are voted up and rise to the top. Stack Overflow for Teams — Collaborate and share knowledge with a private group. Create a free Team What is Teams? Learn more. Is it risky to download but not use a zip file? Ask Question. Asked 1 year, 11 months ago. Active 1 year, 10 months ago. Viewed 3k times. Is there any possibility of malware infection in Windows 10 for the following three situations: When you download a zipped file, but do not use it you do not open it?
When you download a ". Improve this question. Anders Those are three different questions with different answers. It would be better to separate them into three questions perhaps the first two could be a single question — Conor Mancone.
If that. Add a comment. Active Oldest Votes. There are different classes of attacks. Improve this answer. Serge Ballesta Serge Ballesta For decompression tool exploits, how about WinRAR? EterniaLogic EterniaLogic 1 1 1 bronze badge. This doesn't really answer the question.
The question is not about preventing the download, but the risks if the file exists on your local drive. Sign up or log in Sign up using Google. Sign up using Facebook.
0コメント