Real-time File Protection

[nightshade]

Is the real-time file protection supported in the latest Avast free program?

I ask as I am able to run the eicar test file and Avast free isn't picking it up.

Thought it best to start a thread on this even though I mentioned it on the BSOD thread, sorry.

[nightshade]

For real-time file protection do we need to manually scan the file or should it be picked up when open or run is used?

I've found that if I switch off Web shield and then download the eicar test file from the ssl site directed via avast it let's me run and open it with no prompt pop up message, unlike the zip files as when I attempt to extract a pop up message appears which you expect.

Does this sound like there's a problem?

[bob3160]

For real-time file protection do we need to manually scan the file or should it be picked up when open or run is used?

I've found that if I switch off Web shield and then download the eicar test file from the ssl site directed via avast it let's me run and open it with no prompt pop up message, unlike the zip files as when I attempt to extract a pop up message appears which you expect.

Does this sound like there's a problem?

No problem it works as it should.

[nightshade]

For real-time file protection do we need to manually scan the file or should it be picked up when open or run is used?

I've found that if I switch off Web shield and then download the eicar test file from the ssl site directed via avast it let's me run and open it with no prompt pop up message, unlike the zip files as when I attempt to extract a pop up message appears which you expect.

Does this sound like there's a problem?

No problem it works as it should.

Yeah, but shouldn't the real-time file protection pick up on the fact that I'm trying to open and or run it?

[Pondus]

It is not a executable file, you cant run it

[bob3160]

It is not a executable file, you cant run it

Same as any other test file.

[nightshade]

Fine, but then why was run the only option available when I clicked on open? Plus nothing happened when I clicked on these eicar com files, should they not have been sent to the virus vault automatically especially if there is a real-time file protection.

[Pondus]

Are you saying there was no reaction when you downloaded file from eicar.com  ?

Can somone test  >>  http://www.eicar.org/85-0-Download.html

[nightshade]

Are you saying there was no reaction when you downloaded file from eicar.com  ?

Can somone test  >>  http://www.eicar.org/85-0-Download.html

Yes.

[nightshade]

Btw, I had answered that question longer but it seems someone had it deleted hence my shorter answer this time.

[DavidR]

Btw, I had answered that question longer but it seems someone had it deleted hence my shorter answer this time.

When did you post this, don't say the actual local time (as it would differ from my time and forum time) just say roughly how many minutes of hours ago.

I have had a look back in a moderation log and can't see anything.

The forum has a bit of a habit of eating posts, but it does this when you try to post, it just shows a blank Preview/Reply window. So is that familiar ?

[bob3160]

Btw, I had answered that question longer but it seems someone had it deleted hence my shorter answer this time.

When did you post this, don't say the actual local time (as it would differ from my time and forum time) just say roughly how many minutes of hours ago.

I have had a look back in a moderation log and can't see anything.

The forum has a bit of a habit of eating posts, but it does this when you try to post, it just shows a blank Preview/Reply window. So is that familiar ?

Sounds like he ran into the Avast forum post eating bug that all of us who post on a regular basis have all experienced.
Not nice when it happens. Copying your post before hitting the Post button sometimes helps. Doing a Preview before doing the actual post sometime also prevents this from happening.
No one deleted your post. it's a known forum glitch all of us deal with. 

[nightshade]

Btw, I had answered that question longer but it seems someone had it deleted hence my shorter answer this time.

When did you post this, don't say the actual local time (as it would differ from my time and forum time) just say roughly how many minutes of hours ago.

I have had a look back in a moderation log and can't see anything.

The forum has a bit of a habit of eating posts, but it does this when you try to post, it just shows a blank Preview/Reply window. So is that familiar ?

Nope, and the thing is I always go back in to check it was posted correctly and it had.

I sometimes think that if a post is being sent at the very same time as another, in other words from more than one user at a time then I think that not all go through, not in this case though as I remember seeing it.

[bob3160]

Btw, I had answered that question longer but it seems someone had it deleted hence my shorter answer this time.

When did you post this, don't say the actual local time (as it would differ from my time and forum time) just say roughly how many minutes of hours ago.

I have had a look back in a moderation log and can't see anything.

The forum has a bit of a habit of eating posts, but it does this when you try to post, it just shows a blank Preview/Reply window. So is that familiar ?

Nope, and the thing is I always go back in to check it was posted correctly and it had.

I sometimes think that if a post is being sent at the very same time as another, in other words from more than one user at a time then I think that not all go through, not in this case though as I remember seeing it.

https://forum.avast.com/index.php?topic=199200.msg1379445#msg1379445

[mchain]

For the EICAR file real-time test the test code is copied to notepad and then the file is changed to a .com file and saved.  Double--clicking that .com file will result in detection and quarantine (if set that way).

Change the saved file from .txt to .com and it should work as expected.  As an aside, this type of file will not run on Win 10 machines and an MS alert will pop saying so.