When I “play” with eicar.com, I create it or download it via SSL, avast! can’t put it into chest. It asks me what to do – I set it to ask when it can’t move the object into the chest --, and when I select delete or move to chest, it asks again. When I choose Block, it calms down. If not, I have to turn on the Silent/Gaming Mode.
The original file disappears - but not avast! what is kill it -, but a .tmp file appears. In some occasions, I can’t delete it from Windows Explorer or from TotalCommander, because it disappears and a new one is created with a new name. And when it get bored, it finishes the play. Then, I can delete the current (the last) temporary files. But sometimes they’re gone by themselves.
By the way, thousands (!) of .tmp files can be created and deleted in about one or two minutes.
In a Hungarian forum, I was suggested to disable Windows Search service - because the process that is made the “game” was SearchProtocolHost.exe according to avast!. I disabled that. But the symptoms are almost the same. The “gamers” are the programs which create or download the eicar.com (according to avast!).
I’m not think it is avast!'s fault, but maybe… But I know that I need some help!
If a malware is on my computer, avast! won’t be able to eliminate it!
Ohh… just one more thing. This occurs not always but almost always…
Mod.: I ran MBAM today after an update. And also I usually run ESET’s online scan.
PS: Again… Sorry for my bad English!