yes, SSL webshield scanning is not currently supported, lukor should implement it in avast7; all those two eicars should be scanned by webshield firstly (filesystem scans it when it's already stored on hard drive; it's usually scanned later when you're going to execute it - and then it's blocked). On-write scan is turned off by default, because it's not so necessary.