For real-time file protection do we need to manually scan the file or should it be picked up when open or run is used?
I’ve found that if I switch off Web shield and then download the eicar test file from the ssl site directed via avast it let’s me run and open it with no prompt pop up message, unlike the zip files as when I attempt to extract a pop up message appears which you expect.
Fine, but then why was run the only option available when I clicked on open? Plus nothing happened when I clicked on these eicar com files, should they not have been sent to the virus vault automatically especially if there is a real-time file protection.
When did you post this, don’t say the actual local time (as it would differ from my time and forum time) just say roughly how many minutes of hours ago.
I have had a look back in a moderation log and can’t see anything.
The forum has a bit of a habit of eating posts, but it does this when you try to post, it just shows a blank Preview/Reply window. So is that familiar ?
Sounds like he ran into the Avast forum post eating bug that all of us who post on a regular basis have all experienced.
Not nice when it happens. Copying your post before hitting the Post button sometimes helps. Doing a Preview before doing the actual post sometime also prevents this from happening.
No one deleted your post. it’s a known forum glitch all of us deal with.
Nope, and the thing is I always go back in to check it was posted correctly and it had.
I sometimes think that if a post is being sent at the very same time as another, in other words from more than one user at a time then I think that not all go through, not in this case though as I remember seeing it.
For the EICAR file real-time test the test code is copied to notepad and then the file is changed to a .com file and saved. Double–clicking that .com file will result in detection and quarantine (if set that way).
Change the saved file from .txt to .com and it should work as expected. As an aside, this type of file will not run on Win 10 machines and an MS alert will pop saying so.