antivirus

[fosius]

Originally Posted by cupez80

where ? i cant find it

Settings -> Antivirus protection -> Resident protection -> Run editor of extensions -> And Metods..

But I use Slovak version so the translation doesn't have to be the same..

[Alith]

Thanks for the link to Beta MNKid.

[rogervernon]

The anti-virus failed to detect this Eicar test file, sent as an attachment to an email from Panda. The event did not appear in the log files either.
Here is`a screen shot pf part of Panda's email to me, showing the test as a Word document as the attachment. When executed , Word opens & shows a small picture labeled "Eicar"
http://i115.photobucket.com/albums/n.../EicarTest.jpg

[cupez80]

Originally Posted by fosius

Settings -> Antivirus protection -> Resident protection -> Run editor of extensions -> And Metods..

But I use Slovak version so the translation doesn't have to be the same..

that not what i mean. in version 2.x even you activated Advanced Heuristic it wont scan file on-execution. what im asking is AH enabled on-execution not only on-create and on-modification

[Sjoeii]

Originally Posted by rogervernon

The anti-virus failed to detect this Eicar test file, sent as an attachment to an email from Panda. The event did not appear in the log files either.
Here is`a screen shot pf part of Panda's email to me, showing the test as a Word document as the attachment. When executed , Word opens & shows a small picture labeled "Eicar"
http://i115.photobucket.com/albums/n.../EicarTest.jpg

Strange it was detected over here.
Can't confirm

[lucas1985]

Originally Posted by Firecat

The "cleaning" feature will become significant in future versions. I was told in brief about this back in 2005, and it looks very good on paper.

Are you allowed to share more info about this with us?
Thanks for this feedback

[Brian N]

Originally Posted by rogervernon

The anti-virus failed to detect this Eicar test file, sent as an attachment to an email from Panda. The event did not appear in the log files either.
Here is`a screen shot pf part of Panda's email to me, showing the test as a Word document as the attachment. When executed , Word opens & shows a small picture labeled "Eicar"

Panda sends a doc file and if you take a look inside, the eicar code actually changes and so does the file size.
I've never been able to detect anything sent from Panda myself while using NOD32.
You need either a txt, com or an archive. You can also try this one instead: http://nod32sse.com/avtest.php

[Firecat]

Originally Posted by lucas1985

Are you allowed to share more info about this with us?
Thanks for this feedback

I wasn't told too much about it anyway, but there was talk about a "special cleaning" mechanism, which would be able to at least partially remove even unknown malware (i.e. heuristic detections). Registry entries of even heuristic detections may be cleaned and perhaps other leftovers too.

[lucas1985]

Thanks Firecat

Originally Posted by Brian N

I've never been able to detect anything sent from Panda myself while using NOD32

Oh , no , I tried this test of theirs while I was using their products (Titanium and Platinum 2005/2006) . I always received the email and it never got detected by Panda . Which is very silly because they say "if your securiry products misses it then buy our products" ... and a loopback ... Tests on eicar.org always work with all AVs but in a DOC , the strings gets changed , I think

[Doc Serenity]

Originally Posted by Brian N

Panda sends a doc file and if you take a look inside, the eicar code actually changes and so does the file size.
I've never been able to detect anything sent from Panda myself while using NOD32.
You need either a txt, com or an archive. You can also try this one instead: http://nod32sse.com/avtest.php

This could definitely mess with my serenity. If I unserstand you correctly, the av I'm using and really like has not been able to deal w/Panda's tests.
I'm suddenly feeling more than a little concerned.
Doc

[Brian N]

Originally Posted by Doc Serenity

This could definitely mess with my serenity. If I unserstand you correctly, the av I'm using and really like has not been able to deal w/Panda's tests.
I'm suddenly feeling more than a little concerned.
Doc

It won't detect it because it's not an eicar test after it's been altered by the doc. If they made regular txt or archives, there wouldn't be a problem with their tests.

And there's no need to worry really - Normal eicar tests are detected by NOD32 just fine.

[Doc Serenity]

Thank you.
All better now.
Doc

[rogervernon]

I re-loaded AVG anti spyware and on a scan it found this:- Win32.Worm.Luder.
This had not been found by either ESS or KIS on regular scans.
Could it have been lurking in Sys Restore? Can ESS scan there?
Or is it a "falsie"?

Originally Posted by rogervernon

Could it have been lurking in Sys Restore? Can ESS scan there?

Don't know where it is , you only know . Yes , ESS can scan there.

Originally Posted by rogetvernon

Or is it a "falsie"?

Have no idea , may be . VirusTotal knows more for sure . If it appears to real malware , send a copy of it to ESET Virus Lab to email samples @ eset . com