Why the clamwin cannot recognize an simple EICAR test ?

clamwin does recognise eicar test file.

how are you testing?
Are you scahnning a file or trying to execute it (clamwin does not have a realtime monitor)?
Are you scanning a plain com file or inside an archive?
Did you download the database files after installing?

Hi,

>how are you testing?
I put the eicar.com file in a separated directory, and scan it.

>Are you scahnning a file or trying to execute it (clamwin does not have a realtime monitor)?
I know.

>Are you scanning a plain com file or inside an archive?
It is a plain .com file.

>Did you download the database files after installing?
Yes of course. I am holding my scanner timely.

Regards,

Janos Pesti

what happens if you try to scan this file online at:
https://www.virustotal.com

(I am trying to eliminate a bad eicar.com file possibility)

Hi,

It is very funny, because the pervious clamwin db version could not detect this test signature but the currently recognized it .

Regards,

Janos Pesti

there must have been something wrong with your downloaded virus database. I think eicar would be one of the first entries in the database

Scan started: Wed Apr 26 22:47:01 2006

ERROR: Can't open file C:\Documents and Settings\Tormod\Skrivebord\eicar.com

-- summary --
Known viruses: 53081
Engine version: 0.88.1
Scanned directories: 0
Scanned files: 1
Infected files: 0

Data scanned: 0.00 MB
Time: 1.453 sec (0 m 1 s)
-------------------
Completed
-------------------
Infected files: 0
Data scanned: 0.00 MB
Time: 1.453 sec (0 m 1 s)


What do I do with this? Having files that ClamWin cannot scan because of an error is a security risk!

Check the file system security permissions on your eicar.com. If the security permissions do not allow the file to be opened then no other program including an antivirus will not be able to open it. That's how Windows File System permissions work.

Do you have any other virus scanning software running that has realtime scanning? This could be blocking access to clamwin?

good thinking! I forgot about that one...

Yes, i got AVG free edition running constantly. But heres the strange thing: It doesn't happen to all files!

eicar is a test virus definition file and AVG blocks it. Disable AVG realtime monitor and you should be able to scan it with clamwin