This is strange !!

Avast Free Antivirus / Premium Security
1

Today I created the file untitled.com with EICAR test string but the standard shield and on-demand scanner did not detect it ???
When I double-click on it I received the attached error message …
then I tried to scan it with Nod32, it poped-up with an alert that this file infected with EICAR virus so I choosed to rename the file (untitled.Vcom).
Just after renaming the file Avasts4 poped up with the alert that this file is infected with the EICAR virus ??? ??? ??? ???
Avast4 detected it in a .Vcom file and failed to detect it in a .com file ??? ??? … This is strange !!
EDIT: - Avast4: ver 4.1.268
- Virus DB : 0309-3 dtd 23.9.2003
- OS: Winb98se

2

Attached error , sorry ;D ;D

3

Hey, minacross, since nobody answer your question, I´ll use your forum to post another strange thing:
I have send from one e-mail to another an eicar.com file attached from a floppy.
The configuration of SMTP, POP, mail protection, etc. are set to scan e-mail both send and received…
Strange! I could send and receive the e-mail without an avast! warning… :o
What´s up?

4

strange indeed ??? ???

5

Double sorry (quotting myself…).
The attach with eicar.com virus test was send without the attach due to the automactic settings of Internet Mail Provider…
Sorry, avast! is working perfectly :smiley:

6

Vlk, any advice ? ??? ???

7

the problem still exists after yesterdays update (9/26) :‘( :’( :‘( :’( :cry:
N.B.: I downloaded the files:

from eicar.org and Avast4 did not detect the file in them ??? ???

8

BTW, I do not have iNEWS with the splash screen ??? ???
No modifications done to avast4.ini ???

9

avast4.ini ??? :o

10

I really need your help Alwil team… :‘( :’( :‘( :’( :‘( :’( :cry:

11

Hey minacross!
Could you post your settings of avast4.ini and the Resident Shild (extensions being scanned, etc.)?
While avast! team is sleeping let the forum try to help you ;D

12
  • P2P, IM and Outlook/exchange providers are disabled
  • RS is adjusted to scan created/modifued files as well as opened files(default extension set).
  • Avast4.ini is attached to this post .
    Thanx Technical :slight_smile:
13

I reinstalled Win98se from command prompt with the same ssetting, every time I reboot I receive the fillowing error(s): :‘( :’( :cry:

14

then this one…

15

then this one …

16

I fixed the probelm of these errors ;D ;D ;D

  • I removed the mail protection
  • I removed the “Microsoft Family Logon” from Control Panel> Network (win98se) then re-added it again… :wink:
  • I reenabled the mail protection again.
  • It works now ;D ;D ;D
    But the problem of not detecting the eicar file still there ??? ???
17

OK fine let’s focus on the eicar.com problem (and minacross, you’re already senior member, you should know that posting multiple, non-related questions (issues) to the same thread is not ideal… ;)).

The interesting part is that the file is blocked from execution. Someone has to be causing this… If it’s avast, you should at least see the file in the ‘last scanned filed’ entry in the on-access protection dialog. If it’s not avast, it must be something else. I’ve noticed you were saying Nod detected the file - isn’t Nod involved here? I mean, don’t you have Amon activated (it might be activated even if it says it’s inactive…).

Also, don’t you have the ‘Silent mode’ in the Standard Shield’s settings on?

Vlk

18

sorry for that :-[

The interesting part is that the file is blocked from execution. Someone has to be causing this... If it's avast, you should at least see the file in the 'last scanned filed' entry in the on-access protection dialog. If it's not avast, it must be something else. I've noticed you were saying Nod detected the file - isn't Nod involved here? I mean, don't you have Amon activated (it [i]might[/i] be activated even if it says it's inactive...).
yes the file is scanned by the standard shield (see attached pic). I disabled Nod32 by unchecking its modules from the startup menu (I use "Startup Control Panel" from http://www.mlin.net/), not by shutting it down..
Also, don't you have the 'Silent mode' in the Standard Shield's settings on?

Vlk


No I do not have ‘Silent mode’ in the Standard shield’s settings…
I hope this is helpful to you :slight_smile:

19

the attached pic… 8)

20

There are some other foruns - seach for mantra´s post - that relate some troubles with the created/modified files & default extension set.
Sometimes, it´s necessary to repeat all the extensions in the text box. If you want, just copy and paste the following line (even if you checked the default extension set):
{},386,AD?,ASP,ASX,BAS,BAT,BIN,CH?,CLA,CMD,COM,CPL,CRT,CSS,DLL,DO?,EML,EXE,HLP,HT*,INF,INS,ISP,JS*,LNK, MDB,MDE,MS?,NWS,OCX,OV?,PCD,PDF,PIF,PO?,PP?,PRC,PRF,REG,RTF,SCF,SCR,SCT,SHB,SHS,SWF,SYS,URL,VB?,VSD,VXD,WS?,XL?

Maybe you can add:
ACE,ARC,ARJ,BZIP2,CAB,GZIP,HTM*,PST,RAR,TAR,ZIP,ZOO

I´ll take a look at your avast.ini file lather :wink: