Filtering Files in Archive by Their Extensions |
If you need to detect archives containing files with certain extensions and apply to them actions specified for suspicious objects, you can use the variable: 1.In the hosts and groups tree, select the -> . 2.Set as a value of the variable a list of file extensions in the following format: exe;vbs;scr Firstly, the archive will be checked for infected files. If these files are detected, the action selected for infected objects will be applied to the archive. Otherwise, the archive will be checked for files with the specified extensions. If at least one such file is found, the action selected for suspicious objects will be applied to the archive. |