ISA Filter & EICAR Test

Avast Business Avast Server Protection
1

I’m testing an eval of server with the ISA plug-in. On testing the eicar test ‘virus’ at eicar.org (http://www.eicar.org/anti_virus_test_file.htm) The eicar.com is caught but the eicar.com.txt and the eicar contained in archive files(zip) aren’t.

Is there something special I need to set in the config to have txt files and zip files scanned?

Thanks, Mark

2

It will be cought as soon as you unzip it.

Did you set .zip to be scanned in the fileextension list?

3

the zip file contents we not caught. I was completely able to download the zip and extract the contents without being caught.

Where is the fileextension list? I loked but can’t seem to locate it. TIA

Mark

4

I thought it was about the same as in Avast Pro/Home. But I’m not an expert on SE.
So I’ll leave this one to the Alwil people (or someone else with more SE knowledge)

5

Hi markrnaustin, and welcome to the avast forum.

Everything you need to do is configure the ISA provider. To do this, start avast Enhanced Interface (if it starts in the simple (skinned) interface, switch it to the Enhanced UI by using the appropriate menu item), go to the Tasks folder and open Properties of the Resident Protection task.

Scroll to the ISA provider, and customize its settings.
E.g.

  • for the provider to scan even text files, go to the Exceptions page. Text/* is by default excluded from scanning
  • for the unpackers, see the Archives page.

Thanks
Vlk

6

Ok, I made those changes and the text file is now caught. However, I still can’t get the zip files to get captured. I selected all packers. Stopped the services and restarted. What am I missing?

thanks for your help, Mark