Not so sure about Avast anymore...

  • Thread starter Thread starter JW
  • Start date Start date
I use SlimBrowser, which is a shell that runs on top of IE. I recently
installed Avast 4.5 Home. Ran the test, Avast caught the phony virus.
 
I use SlimBrowser, which is a shell that runs on top of IE. I recently
installed Avast 4.5 Home. Ran the test, Avast caught the phony virus.
Click to expand...

I use AntiVir and Avant. It got busted there.

Trying IE: busted again.

http://www.free-av.com/

I switched from AVG after getting a worm AVG could detect, but not
fix. AntiVir removed it. Superb imo.
 
Michael Rainey said:
I use SlimBrowser, which is a shell that runs on top of IE. I recently
installed Avast 4.5 Home. Ran the test, Avast caught the phony virus.
Click to expand...

Interesting. I just deinstalled Avast and installed AVG, and that DID detect
eicar with IE.

jw
 
Came across this thread on Firefox forum:

http://forums.mozillazine.org/viewtopic.php?t=165996

From the discussion, it doesn't seem like the eicar test at
http://www.pandasoftware.com/virus_info/work/eicar1.htm
is valid for Firefox. So I fired up IE and ran the test.
Click to expand...

This is NOT a valid test. If your AV detects this link it is a false
alarm.

Read http://www.eicar.org/anti_virus_test_file.htm which specifies EXACTLY
under what circumstances the eicar test file should be detected. Buried in
a javascript pop up is NOT a vaild use of the eicar test file and Panda
deserve a damned good kicking. They should know better.

Regards
Gordon
 
REM said:
I use AntiVir and Avant. It got busted there.

Trying IE: busted again.

http://www.free-av.com/

I switched from AVG after getting a worm AVG could detect, but not
fix. AntiVir removed it. Superb imo.
Click to expand...

AntiVir has saved my bacon many times. Most recently - Yesterday! Run
AntiVir, Kerio and IESpyAd and turn off "Install on demand." I think this
will make you "pretty" safe. Of course, AdAware or SpyBot, along with
HiJackThis and CWShredder to clean up any nasties that manage to get
through.
 
I use SlimBrowser, which is a shell that runs on top of IE. I recently
installed Avast 4.5 Home. Ran the test, Avast caught the phony virus.
Click to expand...

Same positive result with Maxthon (+IE6 in W2000)

Simone
_______________________________________________________
"Try not! Do, or do not. There is no try."
by Yoda, Jedi Master (from anonymous poster)
( remove/togli 'FalselinK' to reply/per rispondere )
 
Gordon Darling said:
This is NOT a valid test. If your AV detects this link it is a false
alarm.

Read http://www.eicar.org/anti_virus_test_file.htm which specifies EXACTLY
under what circumstances the eicar test file should be detected. Buried in
a javascript pop up is NOT a vaild use of the eicar test file and Panda
deserve a damned good kicking. They should know better.

Regards
Gordon
Click to expand...

I read that eicar.org page and they DON'T "specify exactly under what
circumstances the eicar test file should be detected". They just tell you how to
use it and not whether a javascript pop up is or is not a valid method of
propagating a virus (and therefore whether this is or is not a valid eicar
test.)

jw
 
snip


I read that eicar.org page and they DON'T "specify exactly under what
circumstances the eicar test file should be detected". They just tell
you how to use it and not whether a javascript pop up is or is not a
valid method of propagating a virus (and therefore whether this is or is
not a valid eicar test.)
Click to expand...

This keeps coming up again and again and is a major bone of contention in
Anti-virus circles.

"In order to facilitate various scenarios, we provide 4 files for
download. The first, eicar.com, contains the ASCII string as described
above. The second file, eicar.com.txt, is a copy of this file with a
different filename. Some readers reported problems when downloading the
first file, which can be circumvented when using the second version. Just
download and rename the file to "eicar.com". That will do the trick. The
third version contains the test file inside a zip archive. A good
anti-virus scanner will spot a 'virus' inside an archive. The last version
is a zip archive containing the third file. This file can be used to see
whether the virus scanner checks archives more than only one level deep."

NO other uses are valid. FULL STOP.

Eicar is NOT a virus and is intended only to test that an AV solution is
actually functioning (in on-demand or on-access mode as appropriate) in
the specifically listed circumstances ONLY.

Regards
Gordon
 
Back
Top