Eicar.zip files not detected

[ragnarok]

im concerned about a very important issue, this new version DOES NOT detect eicar.zip neither eicar.zip2 files, very strange cuz version 2.50.16 did detect them, i have configured nod32 to maximun, so whats the problem? i can download them both and when i do a manual scan on them nod32 tells me they are infected and the only option i have available is LEAVE, this is bad, does this tell me that this new version cannot detect .zip or double zip files like before? if anyone wanna try heres tha page, altought these files are harmless, but imagine if a real virus shows up on zip alone or double zip..... http://www.eicar.org/anti_virus_test_file.htm

[hadi]

Hi ragnarok
are you talking about "standard protocol" I mean the first row OR the secured one (2nd row)
I get alerts on all 1st row immediately upon the click without extra settings. because I like to see the real action NOD without any setting apart from "potentially dangerous applications" selected on all setup screens

http://img304.imageshack.us/img304/3078/avv1xt.jpg (http://www.imageshack.us)

[Blackspear]

eicar.com
68 Bytes

[Blackspear]

eicar.com.txt
68 Bytes

[Blackspear]

eicar_com.zip
184 Bytes

[Blackspear]

eicarcom2.zip
308 Bytes

[Blackspear]

Download area using the secure, SSL enabled protocol https
(Note: For the time being we make use of a self-signed certificate. You may be asked by your browser whether you trust this site. Depending on acceptance of this new service we may install a certificate coming from a trusted Certificate Authority at a later point in time.)

eicar.com
68 Bytes

[Blackspear]

Download area using the secure, SSL enabled protocol https
(Note: For the time being we make use of a self-signed certificate. You may be asked by your browser whether you trust this site. Depending on acceptance of this new service we may install a certificate coming from a trusted Certificate Authority at a later point in time.)

eicar.com.txt
68 Bytes

[Blackspear]

Download area using the secure, SSL enabled protocol https
(Note: For the time being we make use of a self-signed certificate. You may be asked by your browser whether you trust this site. Depending on acceptance of this new service we may install a certificate coming from a trusted Certificate Authority at a later point in time.)

eicar_com.zip
184 Bytes

[Blackspear]

Download area using the secure, SSL enabled protocol https
(Note: For the time being we make use of a self-signed certificate. You may be asked by your browser whether you trust this site. Depending on acceptance of this new service we may install a certificate coming from a trusted Certificate Authority at a later point in time.)

eicarcom2.zip
308 Bytes

[NOD32 user]

I agree with you Blackspear - even if EICAR was a real virus, an active infection would not be possible :)

[Brian N]

And don't forget:
http://img349.imageshack.us/img349/8868/nod327rd.gif
;)

[ragnarok]

wow, i really appreciate the inmediate response, so, any suggestions of what could be happening? do i need to perform an uninstall, cuz its kind of strange :P, as i already said my nod32 is all configured to (profile = in depth scan) on all settings and modules, also ive checkmarked all options like potentially dangerous app, scan zip.rar, all of them on all modules and on the setup section, so i cant figure it out what seems to be the real problem ;D :P

[Brian N]

Maybe you forgot to change IMON compatibility?
By default it's always set to 'higher compatibility' - Try changing it to 'higher efficiency'.

Click IMON > Setup > HTTP > Client compatibility > See picture :)

http://img105.imageshack.us/img105/9123/nod328yw.gif

[Blackspear]

{QUOTE-> wow, i really appreciate the inmediate response, so, any suggestions of what could be happening? do i need to perform an uninstall, cuz its kind of strange :P, as i already said my nod32 is all configured to (profile = in depth scan) on all settings and modules, also ive checkmarked all options like potentially dangerous app, scan zip.rar, all of them on all modules and on the setup section, so i cant figure it out what seems to be the real problem ;D :P <-QUOTE}Why don't you take a run through this link. (http://www.wilderssecurity.com/showthread.php?t=37509)

Let us know how you go...

Cheers ;D

[Brian N]

{QUOTE-> Why don't you take a run through this link. (http://www.wilderssecurity.com/showthread.php?t=37509)

Let us know how you go...

Cheers ;D <-QUOTE}

Added to bookmarks, I always forget to mention it :-[

[ragnarok]

i really appreciate the help you ppl gave me, i saw finally that the problem was indeed on my pc, now i did a system restore to the beggining of all :P, and now all is working ok, thx allot really. ;D 8)

[hadi]

{QUOTE-> Maybe you forgot to change IMON compatibility?
By default it's always set to 'higher compatibility' - Try changing it to 'higher efficiency'.

Click IMON > Setup > HTTP > Client compatibility > See picture :)

http://img105.imageshack.us/img105/9123/nod328yw.gif <-QUOTE}
Hi
It should work both ways. at least here it does

[Blackspear]

{QUOTE-> i really appreciate the help you ppl gave me, i saw finally that the problem was indeed on my pc, now i did a system restore to the beggining of all :P, and now all is working ok, thx allot really. ;D 8) <-QUOTE}Good to see, and thank you for letting us know, as we all learn this way...

Cheers ;D