Eicar.zip files not detected

Discussion in 'NOD32 version 2 Forum' started by ragnarok, Jul 14, 2005.

Thread Status:
Not open for further replies.
  1. ragnarok

    ragnarok Registered Member

    Joined:
    Jul 14, 2005
    Posts:
    36
    Re: NOD32 2.50.25 program component update released

    im concerned about a very important issue, this new version DOES NOT detect eicar.zip neither eicar.zip2 files, very strange cuz version 2.50.16 did detect them, i have configured nod32 to maximun, so whats the problem? i can download them both and when i do a manual scan on them nod32 tells me they are infected and the only option i have available is LEAVE, this is bad, does this tell me that this new version cannot detect .zip or double zip files like before? if anyone wanna try heres tha page, altought these files are harmless, but imagine if a real virus shows up on zip alone or double zip..... http://www.eicar.org/anti_virus_test_file.htm
     
  2. hadi

    hadi Guest

    Re: NOD32 2.50.25 program component update released

    Hi ragnarok
    are you talking about "standard protocol" I mean the first row OR the secured one (2nd row)
    I get alerts on all 1st row immediately upon the click without extra settings. because I like to see the real action NOD without any setting apart from "potentially dangerous applications" selected on all setup screens

    http://img304.imageshack.us/img304/3078/avv1xt.jpg
     
  3. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    eicar.com
    68 Bytes
     

    Attached Files:

    • 1st.gif
      1st.gif
      File size:
      25.7 KB
      Views:
      554
  4. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    eicar.com.txt
    68 Bytes
     

    Attached Files:

    • 2nd.gif
      2nd.gif
      File size:
      25.2 KB
      Views:
      553
  5. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    eicar_com.zip
    184 Bytes
     

    Attached Files:

    • 3rd.gif
      3rd.gif
      File size:
      25.8 KB
      Views:
      550
  6. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    eicarcom2.zip
    308 Bytes
     

    Attached Files:

    • 4th.gif
      4th.gif
      File size:
      25.9 KB
      Views:
      547
  7. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Download area using the secure, SSL enabled protocol https
    (Note: For the time being we make use of a self-signed certificate. You may be asked by your browser whether you trust this site. Depending on acceptance of this new service we may install a certificate coming from a trusted Certificate Authority at a later point in time.)

    eicar.com
    68 Bytes
     

    Attached Files:

    • 5th.gif
      5th.gif
      File size:
      26.9 KB
      Views:
      544
  8. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Download area using the secure, SSL enabled protocol https
    (Note: For the time being we make use of a self-signed certificate. You may be asked by your browser whether you trust this site. Depending on acceptance of this new service we may install a certificate coming from a trusted Certificate Authority at a later point in time.)

    eicar.com.txt
    68 Bytes
     

    Attached Files:

    • 6th.gif
      6th.gif
      File size:
      9.5 KB
      Views:
      542
  9. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Download area using the secure, SSL enabled protocol https
    (Note: For the time being we make use of a self-signed certificate. You may be asked by your browser whether you trust this site. Depending on acceptance of this new service we may install a certificate coming from a trusted Certificate Authority at a later point in time.)

    eicar_com.zip
    184 Bytes
     

    Attached Files:

    • 7th.gif
      7th.gif
      File size:
      26.8 KB
      Views:
      537
  10. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Download area using the secure, SSL enabled protocol https
    (Note: For the time being we make use of a self-signed certificate. You may be asked by your browser whether you trust this site. Depending on acceptance of this new service we may install a certificate coming from a trusted Certificate Authority at a later point in time.)

    eicarcom2.zip
    308 Bytes
     

    Attached Files:

    • 8th.gif
      8th.gif
      File size:
      27.2 KB
      Views:
      538
  11. NOD32 user

    NOD32 user Registered Member

    Joined:
    Jan 23, 2005
    Posts:
    1,766
    Location:
    Australia
    I agree with you Blackspear - even if EICAR was a real virus, an active infection would not be possible :)
     
  12. Brian N

    Brian N Registered Member

    Joined:
    Jul 7, 2005
    Posts:
    2,148
    Location:
    Denmark
  13. ragnarok

    ragnarok Registered Member

    Joined:
    Jul 14, 2005
    Posts:
    36
    wow, i really appreciate the inmediate response, so, any suggestions of what could be happening? do i need to perform an uninstall, cuz its kind of strange :p, as i already said my nod32 is all configured to (profile = in depth scan) on all settings and modules, also ive checkmarked all options like potentially dangerous app, scan zip.rar, all of them on all modules and on the setup section, so i cant figure it out what seems to be the real problem :D :p
     
  14. Brian N

    Brian N Registered Member

    Joined:
    Jul 7, 2005
    Posts:
    2,148
    Location:
    Denmark
    Maybe you forgot to change IMON compatibility?
    By default it's always set to 'higher compatibility' - Try changing it to 'higher efficiency'.

    Click IMON > Setup > HTTP > Client compatibility > See picture :)

    http://img105.imageshack.us/img105/9123/nod328yw.gif
     
  15. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Why don't you take a run through this link.

    Let us know how you go...

    Cheers :D
     
  16. Brian N

    Brian N Registered Member

    Joined:
    Jul 7, 2005
    Posts:
    2,148
    Location:
    Denmark
    Added to bookmarks, I always forget to mention it :oops:
     
  17. ragnarok

    ragnarok Registered Member

    Joined:
    Jul 14, 2005
    Posts:
    36
    i really appreciate the help you ppl gave me, i saw finally that the problem was indeed on my pc, now i did a system restore to the beggining of all :p, and now all is working ok, thx allot really. :D :cool:
     
  18. hadi

    hadi Guest

    Hi
    It should work both ways. at least here it does
     
  19. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Good to see, and thank you for letting us know, as we all learn this way...

    Cheers :D
     
Thread Status:
Not open for further replies.