Author Topic: EICAR Web test has strange results  (Read 2881 times)

0 Members and 1 Guest are viewing this topic.

MossyRock

  • Guest
EICAR Web test has strange results
« on: August 02, 2010, 06:31:10 PM »
I have Avast Internet Security on all of my systems and when I test them by trying to download some of the files at http://www.eicar.org/anti_virus_test_file.htm, such as eicar.com, my browser says "the connection was reset" but I don't always get an Avast pop-up saying "Malware Blocked".

I get the pop-up sometimes on my Windows 7 system, but never on my XP system, but on both the browser connections are reset.

On both systems, the web shield options is to "abort connection" and to "Show a notification window when action is taken".

What's going on?  Thanks!
« Last Edit: August 02, 2010, 07:19:29 PM by MossyRock »

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: EICAR Web test has strange results
« Reply #1 on: August 02, 2010, 07:24:26 PM »
I get the pop-up sometimes on my Windows 7 system, but never on my XP system, but on both the browser connections are reset.

Works here on XP...!
Is there anything installed that could block it before avast..??
asyn
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

MossyRock

  • Guest
Re: EICAR Web test has strange results
« Reply #2 on: August 02, 2010, 07:28:40 PM »
Thanks for your post.  I just found the problem.  It is Avast's sandbox feature which I'm running my browsers in!

I tested again, running outside of the sandbox, and now I always get the pop-up notification on both systems when I hit the EICAR signatures.

This behavior sounds like a bug to me, since the A/V engine should still notify regardless of whether a browser is running in or out of a sandbox, especially since it is apparent that it is finding the "malware" as evidenced by resetting the browser connection.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: EICAR Web test has strange results
« Reply #3 on: August 02, 2010, 07:34:59 PM »
Thanks for your post.

You're welcome..!
asyn
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0