Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 6 subscribers
  • Views 15383 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Manually Scan Downloads

ryanhanau

I'm using Sophos Anti-Virus tool version 9.0.7.

When I download a file from a Web site such as a pdf do I need to manually scan it for viruses (right click and choose form contextual menu to scan) or will Sophos Anti-Virus automatically scan it for me

:1015871


This thread was automatically locked due to age.
  • 0

    If you have the on-access enabled, SAV will scan the file when you open it.

    The right-click menu option is provided so you can scan a file without running it - either as a backup method  to scan a file that you don't recognize and don't want to run, or a file you can't run (i.e., not a PDF document, but some file with possibly a random file extension).

    :1015877
  • 0

    Thanks. I do have On Access enabled. That's pretty cool.

    Question: does that mean with the On Access option enabled all files that downloaded will be scanned automatically by Sophos when they are opened. So, I don't need to manually scan them?

    :1015881
  • 0

    If both options of Web Protection are set to "ON" so that "malicious downloads from websites" are blocked, does that include specific files that the user chooses to download or is that limited to blocking the malicious components of the web page itself?

    :1015933
  • 0

    Both.  The code in the page and the files that have download links and you click them.

    2014-02-25_15-42-36.png

    :1015983
  • 0

    Thank you for the graphic and explanation. Just so that I'm clear, if I download, for example, a program installer or a video, those files will be scanned, as they arrive, by the local AV engine in the same way as if, after the download is finished, I select the file and scan it with SophosAV?

    Also, lately I've been noticing that Verizon is passing through SPAM email that their filters used to stop. E.g., Free Lasik evaluation that the header IP address shows is coming from China or an FHA Reverse Mortgage from South Korea :smileysurprised:. If, instead of just dangerous links, there was malware embedded in the email, would the Malicious Download Blocker catch and block that too? If so, that'd be a remarkably valuable feature which could be a real "selling point."

    :1015987
  • 0
    ZRL1 wrote:

    scanned, as they arrive, by the local AV engine in the same way as if, after the download is finished, I select the file and scan it with SophosAV?

    Sort-of-ish.  Because it's coming via a browser the SophosWebIntelligence hands off to the SophosScanD process.

    ZRL1 wrote:

    would the Malicious Download Blocker catch and block that too?

    No, it's not a web browser.  On-access would detect malware if written to disk - depending on settings.  What you're suggesting is a plugin for email scanner.  More protection, but then again another process taking memory and CPU.  :smileysurprised:

    :1015989
  • 0
    ruckus wrote:
    ZRL1 wrote:

    would the Malicious Download Blocker catch and block that too?

    No, it's not a web browser.  On-access would detect malware if written to disk - depending on settings.  What you're suggesting is a plugin for email scanner.  More protection, but then again another process taking memory and CPU.  :smileysurprised:

    My bad. I should have said that I use Thunderbird as my email client. While it's not a web browser, its internals appear to offer some of the features that Firefox does, if that makes any difference, and the content of the email, good or bad, is written locally.

    ****

    ZRL1 wrote:

    scanned, as they arrive, by the local AV engine in the same way as if, after the download is finished, I select the file and scan it with SophosAV?

    Sort-of-ish.  Because it's coming via a browser the SophosWebIntelligence hands off to the SophosScanD process.

    As long as some component of Sophos is scanning the file, that means I don't have to do it again, which is what I've been doing.:smileyhappy:
    :1015993