Avast and Eicar

Avast Free Antivirus / Premium Security
1

Hi.

I was testing Avast with the http://www.amtso.org/check-desktop site and when trying to download one of the files Avast showed an alert (blocked a harmful webpage or file) but I could still download the file to my desktop.

2

PUP is not malware.
It is potentially unwanted.
avast is telling you this if you have pup detection enabled, but it still is your choice if you want to download/install it.

3

It also happens with the cloud test file.

4

And what is your question/problem ?

5

Why is the file allowed to download? ::slight_smile:

6

I already told you.

7

Maybe why … filerepmalware = file with low reputation / new file / few users … not confirmed malicious

8

Avast UI → Settings → Active Protection → Web Shield (Customize) → Actions → PUP

Try to change these settings.
Maybe it can affect the behavior of Avast in the desired direction.

9

With PUP settings enabled this is the result. No file downloaded

10

I had PUP enabled but I see you’re using IE (I’m using Palemoon).
So I tried it with IE and like in your screenshot the file couldn’t be downloaded… this is strange.

11

As far as I’m aware the Palemoon browser isn’t supported (64bit version of based on Mozilla Firefox).

12

It’s a 32 bit FF based.
But what do you mean “not supported”. Is the download blocking dependant on the browser?

13

Not supported in that the web shield can’t monitor the web traffic - hence it gets downloaded as you found, instead of being intercepted early in the download.

So the download is browser and web shield dependant - e.g. currently the PaleMoon is unsupported by the web shield.

It might be 32bit firefox based, but PaleMoon is 64bit.

14

I see… I think.

Nope, although there’s a x64 version.

15

Guys,I don’t know what you are talking about.
I’m using Pale Moon (x86) as default browser and Web Shield is working flawlessly.
If I remember correctly File Shield is not working with Pale Moon.It works with FF,Chrome and IE.

16

Could you test with the link in my first post? Particularly the PUA test (number 3).

17

Sorry,YandexDNS Safe is blocking your link.I’ll try it tomorrow with different DNS.
It looks like File Shield is not working since you were able to download the file.
It is past midnight in Croatia and I’m going to bed.

18

Is PaleMoon using https everywhere ??? If so, Avast can’t scan any website.

19

It isn’t.

20

Ok thanks.