Avast community forum
Home
Help
Search
Login
Register
Avast WEBforum
»
Consumer Products
»
Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier)
(Moderators:
hectic-mmv
,
LudekS
,
chytil2
) »
Avast misses detection of virus being copied?
« previous
next »
Print
Pages: [
1
]
Go Down
Author
Topic: Avast misses detection of virus being copied? (Read 5784 times)
0 Members and 1 Guest are viewing this topic.
sowen
Guest
Avast misses detection of virus being copied?
«
on:
December 29, 2003, 08:59:55 PM »
I have a copy of the harmless eicar test virus (downloadable from
http://www.eicar.org
). I have the Avast standard shield set on 'high'.
Now, I right-mouse-click on 'eicar.com' and select 'copy'. On an empty space in the folder I right-mouse-click again, and select 'paste'.
Avast
only
detects the file being pasted as a virus, not the one I'm copying from. I would expect the original to also be detected, since Explorer is opening and reading the file in order to make a copy.
Hmmm... what's going on here,
does anybody know?
Logged
.: Mac :.
Avast Überevangelist
Ultra Poster
Posts: 5087
Re:Avast misses detection of virus being copied?
«
Reply #1 on:
December 29, 2003, 09:03:13 PM »
is avast resident set to high?
did avast detect it as you downloaded it?
I tried the same test now and I could not even download it with out a warning
Logged
"People who are really serious about software should make their own hardware." - Alan Kay
sowen
Guest
Re:Avast misses detection of virus being copied?
«
Reply #2 on:
December 29, 2003, 09:06:45 PM »
As I wrote in my original posting, the shield was set to 'high'.
(Of course Avast detects it when you download it, which is why I select the option of allowing it when Avast asks. I download the file a few days ago, because I need to run various tests on Avast and my mailserver setup.)
Logged
.: Mac :.
Avast Überevangelist
Ultra Poster
Posts: 5087
Re:Avast misses detection of virus being copied?
«
Reply #3 on:
December 29, 2003, 09:10:24 PM »
oops I overlooked that. Lets see what The ALWIL team has to say.
Logged
"People who are really serious about software should make their own hardware." - Alan Kay
Vlk
Avast CEO
Serious Graphoman
Posts: 11652
Please don't send me IM's. Email only. Thx.
Re:Avast misses detection of virus being copied?
«
Reply #4 on:
December 29, 2003, 09:45:05 PM »
That's because it's a COM file (not recognizable by a header). To make avast scan these files on open, just add COM to the list of extensions to be scanned on open in Standard Shield (2nd page).
Vlk
Logged
If at first you don't succeed, then skydiving's not for you.
sowen
Guest
Re:Avast misses detection of virus being copied?
«
Reply #5 on:
December 29, 2003, 11:13:55 PM »
Yup, that did it!
Odd though, since I thought '.com' files would fall under the category of 'MS-DOS based programs'.
Are there any other typical executable-type files like that (i.e. which aren't detected by header, and I might want to add to the list of extensions)?
«
Last Edit: December 29, 2003, 11:29:01 PM by sowen
»
Logged
igor
Avast team
Serious Graphoman
Posts: 11873
Re:Avast misses detection of virus being copied?
«
Reply #6 on:
December 29, 2003, 11:31:05 PM »
The "MS-DOS based programs" configuration concerns execution, not simple reading - that's what the second page is for (scanning on open).
Logged
Lisandro
Avast team
Certainly Bot
Posts: 67183
Re:Avast misses detection of virus being copied?
«
Reply #7 on:
December 30, 2003, 01:39:23 AM »
Sowen, if it helps, I suggest you add:
ACE,ARC,ARJ,BZIP2,CAB,COM,GZIP,PST,RAR,TAR,ZIP,ZOO,ECE
to the aditional extensions list and
WS?,VBS,VBE,JS,JSE,HTA,WSF,WSH,SHS,SHB,HTM*
to be scanned on open (besides the WSH script).
«
Last Edit: December 30, 2003, 12:48:49 PM by Technical
»
Logged
The best things in life are free.
Print
Pages: [
1
]
Go Up
« previous
next »
Avast WEBforum
»
Consumer Products
»
Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier)
(Moderators:
hectic-mmv
,
LudekS
,
chytil2
) »
Avast misses detection of virus being copied?