Author Topic: Avast and Eicar  (Read 8118 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Avast and Eicar
« on: February 09, 2015, 11:54:56 AM »
Hi.

I was testing Avast with the http://www.amtso.org/check-desktop site and when trying to download one of the files Avast showed an alert (blocked a harmful webpage or file) but I could still download the file to my desktop.


Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Avast and Eicar
« Reply #1 on: February 09, 2015, 06:13:40 PM »
PUP is not malware.
It is potentially unwanted.
avast is telling you this if you have pup detection enabled, but it still is your choice if you want to download/install it.

REDACTED

  • Guest
Re: Avast and Eicar
« Reply #2 on: February 09, 2015, 06:27:15 PM »
It also happens with the cloud test file.


Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Avast and Eicar
« Reply #3 on: February 09, 2015, 06:32:22 PM »
And what is your question/problem ?

REDACTED

  • Guest
Re: Avast and Eicar
« Reply #4 on: February 09, 2015, 07:33:30 PM »
And what is your question/problem ?

Why is the file allowed to download?  ::)

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Avast and Eicar
« Reply #5 on: February 09, 2015, 07:36:25 PM »
I already told you.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37504
  • Not a avast user
Re: Avast and Eicar
« Reply #6 on: February 09, 2015, 07:39:42 PM »
Maybe why ..... filerepmalware = file with low reputation / new file / few users ...... not confirmed malicious


REDACTED

  • Guest
Re: Avast and Eicar
« Reply #7 on: February 09, 2015, 07:42:49 PM »
Avast UI -> Settings -> Active Protection -> Web Shield (Customize) -> Actions -> PUP

Try to change these settings.
Maybe it can affect the behavior of Avast in the desired direction.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Avast and Eicar
« Reply #8 on: February 09, 2015, 07:52:16 PM »
With PUP settings enabled this is the result.  No file downloaded


REDACTED

  • Guest
Re: Avast and Eicar
« Reply #9 on: February 09, 2015, 08:16:38 PM »
With PUP settings enabled this is the result.  No file downloaded

I had PUP enabled but I see you're using IE (I'm using Palemoon).
So I tried it with IE and like in your screenshot the file couldn't be downloaded... this is strange.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88895
  • No support PMs thanks
Re: Avast and Eicar
« Reply #10 on: February 09, 2015, 08:42:52 PM »
As far as I'm aware the Palemoon browser isn't supported (64bit version of based on Mozilla Firefox).
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

REDACTED

  • Guest
Re: Avast and Eicar
« Reply #11 on: February 09, 2015, 10:07:37 PM »
As far as I'm aware the Palemoon browser isn't supported (64bit version of based on Mozilla Firefox).

It's a 32 bit FF based.
But what do you mean "not supported". Is the download blocking dependant on the browser?

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88895
  • No support PMs thanks
Re: Avast and Eicar
« Reply #12 on: February 09, 2015, 11:05:44 PM »
Not supported in that the web shield can't monitor the web traffic - hence it gets downloaded as you found, instead of being intercepted early in the download.

So the download is browser and web shield dependant - e.g. currently the PaleMoon is unsupported by the web shield.

It might be 32bit firefox based, but PaleMoon is 64bit.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

REDACTED

  • Guest
Re: Avast and Eicar
« Reply #13 on: February 09, 2015, 11:44:48 PM »
Not supported in that the web shield can't monitor the web traffic - hence it gets downloaded as you found, instead of being intercepted early in the download.
I see... I think.

It might be 32bit firefox based, but PaleMoon is 64bit.
Nope, although there's a x64 version.

Offline abruptum

  • Massive Poster
  • ****
  • Posts: 2460
Re: Avast and Eicar
« Reply #14 on: February 09, 2015, 11:46:29 PM »
Guys,I don't know what you are talking about.
I'm using Pale Moon (x86) as default browser and Web Shield is working flawlessly.
If I remember correctly File Shield is not working with Pale Moon.It works with FF,Chrome and IE.