Author Topic: Blocking access to infected files....  (Read 2619 times)

0 Members and 1 Guest are viewing this topic.

Cyberspace19

  • Guest
Blocking access to infected files....
« on: August 31, 2012, 02:41:23 PM »
Hi everyone!

I am currently evaluating the avast antivirus for mac.

One thing i am testing is accessing infected files on the filesystem.
To test this i have downloaded / created the eicar.txt and eicar.com file with the eicar test virus. The Webshield found the file and blocked the access to this website as expected. But the fileshield only reports that there was a virus but then i can open the file without any problems.

I thought that if i have an infected file i will not be able to open it until i explicit allow it. But with this behaviour i think the "FileShield" is more or less useless.

You can reproduce this in the following way:
  • Open TextEdit
  • format it as plain text
  • Copy the eicar test string into TextEdit window
  • Save the file to the users documents folder and close TextEdit --> Avast will bring up a virus warning. Just ignore the warning
  • In Finder goto the users documents folder and you will see the newly created file
  • Doubleclick the file and TextEdit will show up the file without a warning from avast

I expected that i cannot save the file and cannot open it.

regards,
Markus

EDIT: i forgot the specs...
avast! Free Antivirus for Mac 7.0 (37431) on Mountain Lion 10.8.1 (german)
« Last Edit: August 31, 2012, 02:50:37 PM by Cyberspace19 »