Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Nod32 MIME is ok - internal scanning not performed


  • Please log in to reply
7 replies to this topic

#1 Romeo29

Romeo29

    Learning To Bleep


  • BC Advisor
  • 3,194 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:127.0.0.1
  • Local time:07:09 PM

Posted 21 August 2010 - 07:33 PM

Hi,

I recently bought a new computer and a got 6 months free of NOD32 with it. When scanning with Nod32, it shows MIME is ok - internal scanning is not performed for many files. Most of the files are saved web pages in form of web archives (MHT files) which it does not scan internally.

What is this and why NOD32 is not scanning these files internally.

Thanks :thumbsup:

BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,969 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:08:09 PM

Posted 21 August 2010 - 09:30 PM

It means that NOD32 encountered an archive, but did not scan the files inside because archives were disabled in the scanner setup.

Post #3: Explanation by Marcos, Eset Moderator
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 Romeo29

Romeo29

    Learning To Bleep

  • Topic Starter

  • BC Advisor
  • 3,194 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:127.0.0.1
  • Local time:07:09 PM

Posted 22 August 2010 - 01:26 AM

Thanks quietman7 for a quick answer but in my context menu scan option, archive scanning is enabled. I checked by putting an eicar sample virus inside a zip file and then scanning it.

#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,969 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:08:09 PM

Posted 22 August 2010 - 07:30 AM

What version of NOD32 was installed on this new computer? When I right click on files/folders, my context menu does not have a scan option that says "archive scanning is enabled".

I have to go into Advanced setup > ThreatSense engine parameter setup to configure scanning of objects like archives.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 Romeo29

Romeo29

    Learning To Bleep

  • Topic Starter

  • BC Advisor
  • 3,194 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:127.0.0.1
  • Local time:07:09 PM

Posted 22 August 2010 - 11:24 AM

Eset Smart Security 4 version 4.2.64.12 is installed on this computer.

I am sorry, I did not mean the option is shown in right click context menu. It is in Advanced Setup -> On demand scan. See this attached image :
Posted Image

In the ThreatSense parameter setup, Archives are selected by default.

This is what happens when I scan some files (specially .MHT) :
Posted Image

Edited by Romeo29, 22 August 2010 - 11:30 AM.


#6 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,969 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:08:09 PM

Posted 22 August 2010 - 12:35 PM

Based on what you describe, I don't think its anything to be concerned about. The files where scanning was not performed are MHT file types. These are primarily associated with 'MHTML' archived Web Pages.

It is not unusual for an anti-virus or anti-malware scanner to be suspicious of some compressed, archived, .cab and packed files because they have difficulty reading what is inside them. These kind of files often trigger alerts by security software using heuristic detection because they are resistant to scanning (difficult to read). This resistance may also result in some scanners to stall (hang) on these particular types of files or just ignore (skip) them.

If you want a more specific explanation about how/why Eset's scanning engine is making these reports on those files, your best bet is to Contact Technical Support & submit question.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#7 Romeo29

Romeo29

    Learning To Bleep

  • Topic Starter

  • BC Advisor
  • 3,194 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:127.0.0.1
  • Local time:07:09 PM

Posted 22 August 2010 - 07:02 PM

I have talked to Eset on phone and they only say its nothing to worry about, without explaining technical details. I have filled that online form, you posted link to which. I hope get better answer than what I got on phone.

Thanks quietman7 :thumbsup:

#8 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,969 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:08:09 PM

Posted 22 August 2010 - 07:34 PM

Not a problem. Let me know what they have to say.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users