Find Virus ?

Hi,

i have testing a virus from the page www.eicar.com.

  1. test
    Wen i download eicar.com, avast ignor this file.
    Wen i starting the scan, then avast delete this file(eicar.com)

  2. test
    Wen i download eicar.com.txt, avast ignor this file.
    Wen i starting the scan, then avast delete this file(eicar.com)

what that ?

Regards
Christian

Sorry, this topic is for Avast PDA. I have write the comment in the wrong Forum.
http://forum.avast.com/index.php?topic=20037.0

Which is your sensibility level for Standard Shield?
Did you disable (or are not using) the WebShield?

If you have web shield enabled (?) are tests 1 & 2 using https: (secure, encrypted) for download it won’t be scanned by avast’s web shield as it only scans http traffic.

Depending on the standard shield settings and sensitivity level (?) the file might not be scanned, but any executable will be detected if you try to run it or directly scan it.

I’m also trying the eicar test also using Avast Pro latest version just updated and all on access scanners set on high. Silence mode “off”. For some reason, Avast Pro doesn’t not detect any of the eicar files. I downloaded all of them from the website (eicar.com, eicar.txt, eicar_com.zip) saved them to my desktop. Even unzipped the zipped folder. They are still all on my desktop now. Avast Pro says all 8 on access scanners are running. Avast Pro does not detect anything. Even when I right click and scan each selected file, it says no infections were found. How come Avast Pro is not detecting these files?
I tried this test on my other computer with NOD32 and it displays a warning as soon as I try to download the files from the website.

just tried this Avast and sounded the alarm, try unistalling, run a registry editor & reinstall…

Thanks, but I already re-installed it. But checking the log files it appears that Avast Pro cannot scan the files.

Log files: Error

SYSTEM 1292 AAVM- Scanning error:x_AavmCheckFile DirectEx:avfiles ScanReal of “selected eicar files” failed 00000005

Log files: Warning

Same as above but at the end instead of failed it says returning error.

However, when I tried again to download the files from eicar after re-installing Avast Pro, it detected the zipped file and sounded the alarm, but didn’t detect the other files. Still doesn’t detect the files on my desKtop not even the zipped file I downloaded before. It is like something it denying Avast Pro to access it. Could this because of the new Microsoft Update Malious Tool Removal?

Thanks. :slight_smile:

Well the error 0000005 is ‘Access is denied’ to me this could be symptom of a second AV locking a file, so it can scan it before avast can scan it. Do you have any other AV or security based program installed on your system that might cause this interaction/conflict ?

Yes, I have Webroot SpySweeper running and HostMan. I also use Spybot and Ad-Aware but there are not running. Maybe SpySweeper is blocking access?

Thanks. :slight_smile:

Try to disable the other monitor temporarily to see if it helps…

Ok. problem is solved. Somehow one of SpySweeper’s sheilds was denying access to Avast Pro. Closed off SpySweeper and Avast detected all of the eicar files.

Thanks everyone for your help. :slight_smile:

Glad we could help, welcome to the forums.