Hi igor,

NTFS streams are handled as a "packer" - so when you start a scan that includes the content of "archives", the streams will be scanned as well.

Meaning that the avast Shield won’t scan ADS normally , unless you set/tweak it to scan archives on default… ?
or does “packer” mean EXE-packer rather than “archive” here… ?

??? ???

Hi suntoucher,
one could test avast’s behaviour with different settings by putting eicar.com into a stream (how-to in your link)

:wink: