IMON and eicar

I was just wondering why IMON considers an attempt to download malware to be five instances. Take for example the eicar file; IMON sees downloadin that file once as multiple attempts. If IMON is configured to do so, the user is prompted with multiple on-access warnings. Why is that? Is there any way to change it so that I get only one per "attempt?"

 

Hm, I have not experienced this problem.

 

n8chavez where did you try downloading the Eicar test file?
What browser did you use?

 

That's because it's set to higher compatibility.
Change it back to higher efficiency for your browser and you only have to click once.

 

It's your browser which attempts to download it multiple times if IMON terminates the connection.

 

I'm using Opera 9.1. I was just trying to use the eicar file as an example; I though tthat maybe all files detected by IMON were treated that way. I will try changing the configuration settings first because I don't thik it is my browser. Dr Web and BD only show one screen and I'm using the same browser.

 

Hey, n8. I have noticed the same thing (with files besides eicar). Sometimes I will get multiple IMON detections, and sometimes an AMON will get in there, too. I am pretty sure it is as Brian and Marcos say. It is a combination of the "higher compatability" setting and the browser trying to reestablish the terminated connections.

Of course, a browser trying to reestablish a broken connection is usually a good thing, so I do not consider that a fault of Opera. Changing the IMON modes to higher efficiency will probably stop this from happening.

 

Yes , I confirm and second this . This happens with Internet Explorer which attempts to try eicar.com at least 3 times and everytime there is an alert.

n8chavez,if you use NOD32 and wish to make it easier , you can check it this way

 

Thanks for the suggestion but I would like the alert window to popup that way I know what is going on. I'll try the compatability settings.