ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Why the clamwin cannot recognize an simple EICAR test ?
pesti


Joined: 24 Apr 2006
Posts: 3
Reply with quote
Why the clamwin cannot recognize an simple EICAR test ?
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 1751
Reply with quote
clamwin does recognise eicar test file.

how are you testing?
Are you scahnning a file or trying to execute it (clamwin does not have a realtime monitor)?
Are you scanning a plain com file or inside an archive?
Did you download the database files after installing?
View user's profileSend private message
clamwin does recognise eicar test file.
pesti


Joined: 24 Apr 2006
Posts: 3
Reply with quote
Hi,

>how are you testing?
I put the eicar.com file in a separated directory, and scan it.

>Are you scahnning a file or trying to execute it (clamwin does not have a realtime monitor)?
I know.

>Are you scanning a plain com file or inside an archive?
It is a plain .com file.

>Did you download the database files after installing?
Yes of course. I am holding my scanner timely.

Regards,

Janos Pesti
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 1751
Reply with quote
what happens if you try to scan this file online at:
http://www.virustotal.com

(I am trying to eliminate a bad eicar.com file possibility)
View user's profileSend private message
pesti


Joined: 24 Apr 2006
Posts: 3
Reply with quote
Hi,

It is very funny, because the pervious clamwin db version could not detect this test signature but the currently recognized it .

Regards,

Janos Pesti
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 1751
Reply with quote
there must have been something wrong with your downloaded virus database. I think eicar would be one of the first entries in the database
View user's profileSend private message
Torme


Joined: 26 Apr 2006
Posts: 2
Reply with quote
Scan started: Wed Apr 26 22:47:01 2006

ERROR: Can't open file C:\Documents and Settings\Tormod\Skrivebord\eicar.com

-- summary --
Known viruses: 53081
Engine version: 0.88.1
Scanned directories: 0
Scanned files: 1
Infected files: 0

Data scanned: 0.00 MB
Time: 1.453 sec (0 m 1 s)
-------------------
Completed
-------------------
Infected files: 0
Data scanned: 0.00 MB
Time: 1.453 sec (0 m 1 s)


What do I do with this? Having files that ClamWin cannot scan because of an error is a security risk!
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 1751
Reply with quote
Torme wrote:
Scan started: Wed Apr 26 22:47:01 2006

ERROR: Can't open file C:\Documents and Settings\Tormod\Skrivebord\eicar.com

What do I do with this? Having files that ClamWin cannot scan because of an error is a security risk!


Check the file system security permissions on your eicar.com. If the security permissions do not allow the file to be opened then no other program including an antivirus will not be able to open it. That's how Windows File System permissions work.
View user's profileSend private message
notorp


Joined: 27 Apr 2006
Posts: 3
Reply with quote
Do you have any other virus scanning software running that has realtime scanning? This could be blocking access to clamwin?
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 1751
Reply with quote
notorp wrote:
Do you have any other virus scanning software running that has realtime scanning? This could be blocking access to clamwin?


good thinking! I forgot about that one...
View user's profileSend private message
Torme


Joined: 26 Apr 2006
Posts: 2
Reply with quote
Yes, i got AVG free edition running constantly. But heres the strange thing: It doesn't happen to all files!
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 1751
Reply with quote
Torme wrote:
Yes, i got AVG free edition running constantly. But heres the strange thing: It doesn't happen to all files!


eicar is a test virus definition file and AVG blocks it. Disable AVG realtime monitor and you should be able to scan it with clamwin
View user's profileSend private message
Why the clamwin cannot recognize an simple EICAR test ?
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic