Guest User!
You are not Sophos Staff.
This file came through as a IMG file. The user mounted it and contained an .exe malware file. Is it possible to make Sophos scan these as they are currently not detecting it.
Hi nhidalgo,
As correctly pointed out by QC, The IMG FILE is a perfectly safe Disc Image file which cannot infect a machine by its own. Unless there are manual actions taken on it like Mounting and Execution [SAV blocks the execution immediately], there is no point having a detection on this file.
What's of interest is the Executable file inside of it. If you Extract the IMG using 7ZIP, the executable will immediately be quarantined before it could be executed. Hence it depends on different vendors on how they want to tackle/detect/clean this particular IMG file.
Thanks,
Vikas
Hi nhidalgo,
As correctly pointed out by QC, The IMG FILE is a perfectly safe Disc Image file which cannot infect a machine by its own. Unless there are manual actions taken on it like Mounting and Execution [SAV blocks the execution immediately], there is no point having a detection on this file.
What's of interest is the Executable file inside of it. If you Extract the IMG using 7ZIP, the executable will immediately be quarantined before it could be executed. Hence it depends on different vendors on how they want to tackle/detect/clean this particular IMG file.
Thanks,
Vikas
