Author Topic: Avast and Eicar  (Read 6048 times)

0 Members and 1 Guest are viewing this topic.

Offline Jomm

  • Newbie
  • *
  • Posts: 13
Avast and Eicar
« on: February 09, 2015, 11:54:56 AM »
Hi.

I was testing Avast with the http://www.amtso.org/check-desktop site and when trying to download one of the files Avast showed an alert (blocked a harmful webpage or file) but I could still download the file to my desktop.


Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31305
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Avast and Eicar
« Reply #1 on: February 09, 2015, 06:13:40 PM »
PUP is not malware.
It is potentially unwanted.
avast is telling you this if you have pup detection enabled, but it still is your choice if you want to download/install it.

Offline Jomm

  • Newbie
  • *
  • Posts: 13
Re: Avast and Eicar
« Reply #2 on: February 09, 2015, 06:27:15 PM »
It also happens with the cloud test file.


Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31305
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Avast and Eicar
« Reply #3 on: February 09, 2015, 06:32:22 PM »
And what is your question/problem ?

Offline Jomm

  • Newbie
  • *
  • Posts: 13
Re: Avast and Eicar
« Reply #4 on: February 09, 2015, 07:33:30 PM »
And what is your question/problem ?

Why is the file allowed to download?  ::)

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31305
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Avast and Eicar
« Reply #5 on: February 09, 2015, 07:36:25 PM »
I already told you.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37027
Re: Avast and Eicar
« Reply #6 on: February 09, 2015, 07:39:42 PM »
Maybe why ..... filerepmalware = file with low reputation / new file / few users ...... not confirmed malicious


Offline L3

  • Jr. Member
  • **
  • Posts: 69
Re: Avast and Eicar
« Reply #7 on: February 09, 2015, 07:42:49 PM »
Avast UI -> Settings -> Active Protection -> Web Shield (Customize) -> Actions -> PUP

Try to change these settings.
Maybe it can affect the behavior of Avast in the desired direction.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40627
  • Dragons by Sasha
    • Malware fixes
Re: Avast and Eicar
« Reply #8 on: February 09, 2015, 07:52:16 PM »
With PUP settings enabled this is the result.  No file downloaded


Offline Jomm

  • Newbie
  • *
  • Posts: 13
Re: Avast and Eicar
« Reply #9 on: February 09, 2015, 08:16:38 PM »
With PUP settings enabled this is the result.  No file downloaded

I had PUP enabled but I see you're using IE (I'm using Palemoon).
So I tried it with IE and like in your screenshot the file couldn't be downloaded... this is strange.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 85069
  • No support PMs thanks
Re: Avast and Eicar
« Reply #10 on: February 09, 2015, 08:42:52 PM »
As far as I'm aware the Palemoon browser isn't supported (64bit version of based on Mozilla Firefox).
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.4.2464 (build 21.4.6266.561) UI 1.0.639/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Jomm

  • Newbie
  • *
  • Posts: 13
Re: Avast and Eicar
« Reply #11 on: February 09, 2015, 10:07:37 PM »
As far as I'm aware the Palemoon browser isn't supported (64bit version of based on Mozilla Firefox).

It's a 32 bit FF based.
But what do you mean "not supported". Is the download blocking dependant on the browser?

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 85069
  • No support PMs thanks
Re: Avast and Eicar
« Reply #12 on: February 09, 2015, 11:05:44 PM »
Not supported in that the web shield can't monitor the web traffic - hence it gets downloaded as you found, instead of being intercepted early in the download.

So the download is browser and web shield dependant - e.g. currently the PaleMoon is unsupported by the web shield.

It might be 32bit firefox based, but PaleMoon is 64bit.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.4.2464 (build 21.4.6266.561) UI 1.0.639/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Jomm

  • Newbie
  • *
  • Posts: 13
Re: Avast and Eicar
« Reply #13 on: February 09, 2015, 11:44:48 PM »
Not supported in that the web shield can't monitor the web traffic - hence it gets downloaded as you found, instead of being intercepted early in the download.
I see... I think.

It might be 32bit firefox based, but PaleMoon is 64bit.
Nope, although there's a x64 version.

Offline abruptum

  • Super Poster
  • ***
  • Posts: 2262
Re: Avast and Eicar
« Reply #14 on: February 09, 2015, 11:46:29 PM »
Guys,I don't know what you are talking about.
I'm using Pale Moon (x86) as default browser and Web Shield is working flawlessly.
If I remember correctly File Shield is not working with Pale Moon.It works with FF,Chrome and IE.