Check for Virus in Single File Including Zip or Other Compression

[dw85745]

If one downloads a file using a browser they receive a download dialog to save or open a file.
Questions:

1) Does Windows Defender check this file for viruses while it is being downloaded?
2) Does this check include compressed formats such as Zip or 7Zip open?
3) Once the file in on my system, is there anyway for me to check that "single" file
for viruses on my system -- ie NOT having to go out to a separate file checker site?

 

[torchwood]

Hi DW,

Most AV's add to the right click context options, - scan with MSE/Malwarebytes/ etc
Once you have >>SAVED<< it to the destination folder or desktop -right click shows ALL options
Its to late if you have run it
(mine shows scan with Bitdefender and Malwarebytes)

AV's dont scan during the download allthough they do advise against dodgy sites, and offer a get me out of here option.
It doesnt matter if its a Zip file or not

note
the right click option is allways available


Roy

 

[dw85745]

Hi Roy:

Since Windows Defender is part of the OS, doesn't give right click option
to run against specific file.

Maybe just third party depending on AV chosen.

 

[samuria]

The problem is a lot of malware comes down as a clean file so av let's it through then when run it downloads the virus or malware

 

[MSClin]

1) Does Windows Defender check this file for viruses while it is being downloaded?

No, but AV software can do that (depending on how good the real-time protection the AV has). I've tested 7 AV's in total for this, but only one of them had this feature.

2) Does this check include compressed formats such as Zip or 7Zip open?

I don't know if you're talking specifically about if Windows Defender can do that, so I answer - Windows Defender can't do that. Windows Defender can't even check the file while it is being downloaded. But again - AV software can do that, although not much AV's can do that.

3) Once the file is on my system, is there anyway for me to check that "single" file for viruses on my system -- ie NOT having to go out to a seperate file checker site?

Yes, use AV software to scan it. Keep in mind that Windows Defender is software for protection against spyware or adware, this is not AV software.

 

[dw85745]

Thanks for all input:
MSClin: Care to share which of the 7 AV's will check while doing download.

 

[Bat 1]

Checking for Malware on an unpacked ISO, RAR or Zip files is for the most part useless. The file really needs to be unpacked. As posted above, checking with MSE/Defender isn't a simple right click option. I put the download into a folder usually named Test either in Downloads or on My Desktop then open the Defender GUI and click on Custom Scan. you'll have to goto C: > Users > Your Name > etc. and find the "Test" folder, then click OK and Defender will scan that folder only. Better options for right click scans are SuperAntiSpyware http://www.superantispyware.com/ and Malwarebytes https://www.malwarebytes.com/ *Always be sure to update Definitions on the Free versions before scanning. Another Good option when dealing with unknown programs is running your PC in a Sandbox. https://www.sandboxie.com/DownloadSandboxie

I was once very active in Warez and torrents Sites so some people who see My Tag and Avy might be surprised that I recommend so strongly Against the use of unauthorized Games and Program Apps. As samurai posted there's some extremely dangerous Malware that can detect if it's being run in a Sandbox or Virtual Machine and may take Days or even Weeks before it starts infecting the OS.

 

[Layback Bear]

Built in Defender is a out date by many years in Window 7.

I would suggested trying Microsoft Security Essentials. I have used it for years on two Windows 7 systems.

If and when you do change to 'MSE' it should turn off Windows 7 Defender.

Free Virus Protection with Microsoft Security Essentials

Jack

 

[dw85745]

Bat 1 and Layback Bear:
Thanks -- good information to have.

IMHO this thread should be a sticky in "Security".

 

[MSClin]

MSClin: Care to share which of the 7 AV's will check while doing download.

"Advanced SystemCare Ultimate", but I don't recommend you installing or trying it, it can mess your system if not used properly. I am saying this because it isn't only AV.

 

[dw85745]

MSClin: Thanks for post and recommendation.
Never heard of it, but use few 3rd party programs.

 

[DonnaB]

If one downloads a file using a browser they receive a download dialog to save or open a file.
Questions:

1) Does Windows Defender check this file for viruses while it is being downloaded?
2) Does this check include compressed formats such as Zip or 7Zip open?
3) Once the file in on my system, is there anyway for me to check that "single" file
for viruses on my system -- ie NOT having to go out to a separate file checker site?

Windows Defender was released with Windows Vista and Windows 7, serving as their built-in antispyware component, so it's purpose is to remove spyware. To get rid of or check for viruses and other malware you will need to download and install an antivirus software product if you don't already have one installed... and if you don't, you should have.

If you would prefer not to upload the downloaded file to a site such as VirusTotal or Jotti's Malware Scanner, you should be able to right click the file and have your resident AV scan the file.

 

[dw85745]

DonnaB: Thanks for your input.
Found this link that goes into little more depth.

https://helpdeskgeek.com/windows-8/windows-defender-vs-security-essentials-vs-safety-scanner/

 

[Snick]

You can upload a file, 32 MB or less to Virus Total. Special considerations are available for files up to 200MB. If hash matches, results are instantaneous, if not, AV engines scan and produce result (takes a few minutes)

You can also download their app which adds option to Right-click context menu Virus Total Add To Context Menu
If program is an executable i.e., (.exe) you will still get popup to run. Click OK and upload etc. will occur without actually running the exe on your machine.

FYI lesser named AV engines sometimes produce a false positive or two.

Don't use & don't recommend IObit Advanced SystemCare (Ultimate or derivatives)