Packed Executables - KAPERSKY ANTI-VIRUS - FOR FREEBSD-OPENBSD-BSDI MAIL SERVER User Manual

This parameter corresponds to the command line switch -
XF=filemasks, where filemasks must be substituted with the file masks
to be excluded from the check.
3. In the ExcludeDir line define directories to be excluded from
the check and separate them by commas or spaces.
This parameter corresponds to the command line switch
-XD=directories, where directories must be substituted with the directo-
ries to be excluded from the check. The directories defined in the In-
fectedFolder, SuspiciousFolder and CorruptedFolder lines of the profile
(see subchapter 5.4.3) are automatically ignored during the check.
If you suspect that your computer is infected it's advisable to type
Yes for all the objects-to-be-scanned parameters, and 2 in the File-
Mask line. For daily preventative checks type Yes in the Sectors and
Files lines and 0 in the FileMask line, and disable archives and packed
executables scanning tools.
5.3.2.4.
Scanner can check for viruses in packed executable files that are unpacked
by the special engine.
Packed executable files contain special unpacking modules. When such a
file is started, the module unpacks the program to RAM and then runs it.
Packing utilities can pack infected files along with clean ones. If these are
scanned by a conventional anti-virus scanner, the infected file would be
passed as virus-free, because the virus body was packed together with the
program code.
To enable the unpacking engine,
type Yes in the Packed line of the profile. After this, your Scanner will be
able to check and delete viruses from packed executable files.
This parameter corresponds to the command line switch -U[-]. The
switch -U disables and the switch -U- enables the unpacking engine.

Packed executables

D E F I N I N G
45
S E T T I N G S