eScan - Antivirus & Content Security Forum

When you run mwav it use to create pinfect.zip file at three locations

1. Personal folder
2. Infected folder
3. %temp% folder

Personal folder = HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellFolders/Personal

Infected folder = program files\escan\infected

It might contain infected or suspicious file which would be easier for a end user to attach and send to support for further analysis. In normal scenario, end user does not know how to remove attributes from a file and how to add it in a zip file. Hence this is the easiest method provided by MWAV. To add suspicious files in one compressed format and should be password protected.

Viewing and extracting the contents of Pinfect.zip is upto users discretion.

The default password provided to the zipped file is infected.

Thanks Vikas .... fast work