Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 813416" data-attributes="member: 32260">There is a difference when AV uses caching.Suppose that you have downloaded a malicious file a few days ago, without opening the Download folder, so you have not been infected. The file was not detected, but It could be detected today if you would try to execute it. Now,&nbsp; if AV uses the old cache, you can still be infected today when you will open the Download folder without executing anything from that folder. Yes, it is possible (and happened in the wild) if malware can exploit Explorer.This is not an issue for the home users who update Windows regularly, but does matter in organizations and Enterprises. <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite130" alt="(y)" title="Thumbs up&nbsp; &nbsp; (y)" loading="lazy" data-shortname="(y)" /></blockquote>

[QUOTE="Andy Ful, post: 813416, member: 32260"] There is a difference when AV uses caching. Suppose that you have downloaded a malicious file a few days ago, without opening the Download folder, so you have not been infected. The file was not detected, but It could be detected today if you would try to execute it. Now, if AV uses the old cache, you can still be infected today when you will open the Download folder [COLOR=rgb(184, 49, 47)][B]without executing anything[/B][/COLOR] from that folder. Yes, it is possible (and happened in the wild) if malware can exploit Explorer. This is not an issue for the home users who update Windows regularly, but does matter in organizations and Enterprises. (y) [/QUOTE]

Verification