VBA32 and eicar

I never have more than one AV installed on my system at a time, especially with Dr Web. I have removeable drive bays; one is my personal system and one is a test system.

 

This is a very serious charge. But a charge that I am unfortunately able to verify as being correct.

VBA32 in repeated testing, is missing threats about 50% of the time with its on demand scanner. I never actually sat down and tested this aspect of the product, generally because I manually scan anything I download.

But this indeed is an extremely serious issue IMO.

 

I have just heard back from support, who acknowledge that there is a BUG in the RTM.

Apparently there are problems detecting newly created files in some configurations.

It should be fixed in the next week.

 

VBA users originally posted about the inconsistencies of the RTM and I reported this aspect to their support. If you have found the same result with the on-demand scanner have you reported this to support?

 

I cannot verify that there inconsistencies in on-demand scanning protection. VBA32s scanner has always caught every "threat" even when the RTM failed. On my machine it works well.

 

Could you by any chance fwd me the reply form support, I would be curious as to what they say. Thanks!

 

Not a lot but you have a pm

 

I emailed them with the information on the multiple file execution also.

 

Will be very interested in what they say

 

Hypocrital or not, I am uninstalling VBA32 for the time being and switching those particular machines over to AntiVir. Its been a long time since I checked out AntiVir, and I love the new interface and options.

I have reported my findings to VBA32 tech support, including the scans that keep missing stuff, on-access scanner missing stuff, and a few other things.

 

Hopefully this will bring out a better product in the end.
I have not uninstalled and will await a response to my emails and the emails of others here @ Wilders, to see what action I will be taken.

 

Can you outline your tests which showed that the on-demand scanner was not doing its job? Was this again with zipped files?

Overall, I wonder whether these bugs have just been introduced or have been present for awhile?

 

I've been a fly on the wall monitoring this post after discovering myself VBA's RTM failure of picking up the eicar.zip.
Only slightly off topic here:
What is your typical mem usage?
3.11.1 beta on XP Pro here Working Set = 84,100 K, Peak Set = 95,500 K.

 

3.11.0 FULL version shown on a WIN XP system.

From your results, Bob, the memory usage is increasing again. Hopefully they can reduce it before the full release.

 

Wow, Blackcat, your mem profile is quite a bit lower.
(It DID seem a bit excessive here)

 

Just a postscript:
Mem usage seems improved with last beta update.

 

re:

Response I received from Dmitry @ VirusBlokAda:

Let's hope they do implement it. VBA has a lot of potential.

 

I have received a reply to my email, and this should be fixed in the next update.
Now I am assuming they mean the next regular update and not the next build ie 3.11.1 etc. As they updated today at 1212, I am also assuming it will be tomorrow.

 

Response does not really answer your question. You asked about detection after EXTRACTION from the zip NOT archive scanning by the RTM

 

You are correct Blackcat.
The cut / paste query

was from previous post.
My bad.
My actual observation to which they responded was

Your concern about "detection after extraction.." is still quite valid.
I'm pleased they do respond in a timely fashion (even if it's not the answer we desire).

Cheers

 

Anyone else hear anything about this issue?
Still no update to fix it even in the beta version?
VBA32 support have a comment?

 

Yeah, wheres the big update to fix this serious issue?

 

I've heard nothing.
Beta version here. No change.

 

I have purchased 2 licenses for VBA32 this year for relatives. I am petitioning for a refund, or calling my CC to have them charged back. No telling how long this security breach has been going on, but I do know they have known for a week or two and haven't fixed it.

I let my $$ do the talking, and in this case, the extraction of my $$ will be the mouthpiece.

 

Problem resolved?
Latest update (beta version here) this AM included some system files necessitating reboot.
'eicar_com.zip' file now is detected upon extraction.
Update appears (as far as I can tell at the moment) to have no adverse affect on sys resources.