Author Topic: eicar.com.txt not detected if download via https  (Read 5064 times)

0 Members and 1 Guest are viewing this topic.

webbeing

  • Guest
eicar.com.txt not detected if download via https
« on: February 09, 2010, 07:27:39 PM »
Hello,

I am using avast version 5.0.396 with "scan all files" setting in
webshield and file system shield.  It detect the test virus file
in this link "http://www.eicar.org/download/eicar.com.txt".
However it could NOT detect the same file and open it when
this link "https://secure.eicar.org/eicar.com.txt" is used.
Thanks.

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89057
  • No support PMs thanks
Re: eicar.com.txt not detected if download via https
« Reply #1 on: February 09, 2010, 07:59:34 PM »
As I hope you are aware https connections are secure and encrypted to keep prying eyes out including AVs, so avast doesn't monitor https as it can't decrypt the content to scan it.

Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.3.6108 (build 24.3.8975.762) UI 1.0.801/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

coper

  • Guest
Re: eicar.com.txt not detected if download via https
« Reply #2 on: February 09, 2010, 08:46:04 PM »
As I hope you are aware https connections are secure and encrypted to keep prying eyes out including AVs, so avast doesn't monitor https as it can't decrypt the content to scan it.


why avast hasnt https monitor? pretection via ssl protocol?

Hermite15

  • Guest
Re: eicar.com.txt not detected if download via https
« Reply #3 on: February 09, 2010, 08:49:59 PM »
As I hope you are aware https connections are secure and encrypted to keep prying eyes out including AVs, so avast doesn't monitor https as it can't decrypt the content to scan it.


why avast hasnt https monitor? pretection via ssl protocol?

1 ssl is not a protocol
2 ssl connection means encrypted connection (whatever the protocol is)
3 if Avast could scan that, it would mean that the encryption is "broken"  ;D

sunrisecc

  • Guest
Re: eicar.com.txt not detected if download via https
« Reply #4 on: February 09, 2010, 08:53:13 PM »

ibell63

  • Guest
Re: eicar.com.txt not detected if download via https
« Reply #5 on: February 09, 2010, 09:19:54 PM »
Shouldn't the filesystem shield still get it, eventhough the web shield misses it due to SSL?

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11849
    • AVAST Software
Re: eicar.com.txt not detected if download via https
« Reply #6 on: February 09, 2010, 09:38:00 PM »
I don't think the filesystem shields scan .txt files by default.