cancel
Showing results for 
Search instead for 
Did you mean: 

Regarding ACAD/Medre.A worm, does Endpoint Protection Suite scan AutoCAD files?

I have a client that uses AutoCAD a lot and runs Endpoint Protection Suite. Having read about the ACAD/Medre.A worm running mainly in Peru, I'd like to confirm whether EPS scans AutoCAD files. Thanks.

0 Kudos
1 Reply
finkemch
Level 9

Re: Regarding ACAD/Medre.A worm, does Endpoint Protection Suite scan AutoCAD files?

You should set 'scan all files' by default, because of many vulnerable extenstions ! As an example - years before we excluded *.txt files from scanning,

Hackers do know these security gaps and use it ! Also *.tmp files are used as infection today, every gap is a way into the computer for hackers,

I would recommend to scan all files with on access and use the Virusscan 8.8 with chaching of as 'clean scanned' files.

To use 'Scan default extension' is to dangerous today. I have seen McAfee has an detection :

https://www.virustotal.com/file/79baf616d2701cc26ef328cd9c13682db317932aa47efb8eb079d8af4a49e0a3/ana...

as Performance optimisation there are 'low Risk' and 'high Risk' Processes usable to exclude specific processes and extensions.

see https://community.mcafee.com/thread/4438 for best Practise and the search for the Virusscan 8.8 Best Practise Guide

regards Michael

Nachricht geändert durch finkemch on 25.06.12 21:19:41 MESZ
0 Kudos