Author Topic: Eicar test file  (Read 17358 times)

0 Members and 1 Guest are viewing this topic.

Omik

  • Guest
Eicar test file
« on: May 17, 2003, 10:09:42 PM »
Hi again
Shouldnt the eicar test file be nuked at once by the resident scanner. ???
Im allowed to download it to the desktop, and only when i open it, Avast comes to life.
But its okay too i guess, as long it nicks the bad boys before they run.
Isnt that correct?
Regds.
Omik


Offline raman

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 1062
Re:Eicar test file
« Reply #1 on: May 17, 2003, 10:26:21 PM »
I do not use the Resident Protection from Avast, but if i remembere correctly you can change the behave of the scanner in the settings.
MfG Ralf

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:Eicar test file
« Reply #2 on: May 17, 2003, 10:29:00 PM »
raman is right, you can just change the settings of the resident protection.

You can either set the protection level to High, or fine-tune the settings by changing individual properties of the "Standard Shield". To access these settings, click on the a-ball icon, push the 'Details' button and double click on Standard Shield icon.

Hope this helps,
Vlk
If at first you don't succeed, then skydiving's not for you.

Omik

  • Guest
Re:Eicar test file
« Reply #3 on: May 17, 2003, 10:41:17 PM »
Hi & THX for your answere.
But my concern was, shouldnt the eicar file be stopped at once, and not be allowed to download to the desktop.
I run the resident shield on high.
Regds.
Omik :)

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:Eicar test file
« Reply #4 on: May 17, 2003, 10:43:25 PM »
Hey, you run it on high? In this case, it should have been stopped... >:(
Were you running it on high when you were performing the test??

Anyway, what OS are you using?

Vlk
If at first you don't succeed, then skydiving's not for you.

Omik

  • Guest
Re:Eicar test file
« Reply #5 on: May 17, 2003, 10:46:20 PM »
Hi vlk.
Im running Win Me.
The resident shield was on high when i did the test.
Regds.
Omik :)

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:Eicar test file
« Reply #6 on: May 17, 2003, 10:51:31 PM »
Too bad :(.

I'll tell our QA guys to test it (and if it shows up, fix it!) - on Monday!

Thanks
Vlk
If at first you don't succeed, then skydiving's not for you.

Omik

  • Guest
Re:Eicar test file
« Reply #7 on: May 17, 2003, 11:02:46 PM »
Thx Vlk.
I cant be the only one then.
Havent any of the others mentioned it before.?
Anyway , Avast does get it when i open the file, so it does work, in a non resident way ;D ;D, if one can use these words.
We will see on monday.
Regds.
Omik

Omik

  • Guest
Re:Eicar test file
« Reply #8 on: May 18, 2003, 04:48:36 PM »
Vlk.
Just to let you know.
Tried uninstall & reinstall.
Still the same.
Now this is the harmless eicar test virus, but i trust that the resident shield will nick a real virus.
I can see its working, and see the number of files its checked, so there seems to be no probs.
Just wont detect that ..... eicar virus ;D
Regds.
Omik

Omik

  • Guest
Re:Eicar test file
« Reply #9 on: May 19, 2003, 03:29:09 PM »
Hi Vlk.
Just curious.
Any news from the tech guys.
Omik :)

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:Eicar test file
« Reply #10 on: May 20, 2003, 06:01:08 PM »
It was really a bug. Has been fixed today. It only affects Win9x-based machines. The fix will be included in the next update... ;)

Thanks for hammering this bug down,
Vlk
If at first you don't succeed, then skydiving's not for you.

Omik

  • Guest
Re:Eicar test file
« Reply #11 on: May 20, 2003, 07:14:11 PM »
Hi Vlk.
Great 8)
Glad you found out & and thanks for your quick action on this issue :D :D
Regards
Omik

Artisan

  • Guest
Re:Eicar test file
« Reply #12 on: May 27, 2003, 10:07:19 PM »
When will the new program build come out?   :)

techie101

  • Guest
Re:Eicar test file
« Reply #13 on: May 28, 2003, 03:39:06 AM »
 8)
Hey Omik,

I know I come in on this late, but want to comment.
The Eicar virus test is designed to test the ability of an anti-virus to protect your system from embedded viruses that infect a system when OPENED...  hence, Avast stoped it right where it is suppossed to.
If the Avast team said it was a bug and it will be fixed, I guess think that they will modify Avast to stop it at an earlier point.
I have used other anti-virus products against Eicar and they also stop it when an attempt is made to OPEN the file.

Hope this helps add something to the explanation given by the Avast team.

AVAST IS THE BEST !!!

Good luck.

Omik

  • Guest
Re:Eicar test file
« Reply #14 on: May 28, 2003, 05:05:33 PM »
Hi tec 101.
It does :)
Regards
Omik