PDA

View Full Version : Should SD detect 'eicar.com'? (5.5.1.336 beta)



PC-Pete
05-30-2008, 07:21 AM
Following on from this thread http://www.pctools.com/forum/showthread.php?t=51886 in the AV forum , I noticed that the eicar test virus is ignored by SD 5.5.1.336 both in real-time and full on-demand scan. Is this normal?

redwolfe_98
05-30-2008, 10:32 AM
pete, the person had "pctools av" set to automatically quarantine files.. that is probably why they didn't see any alerts when they tried to test "pctools av" with the eicar test file..

PC-Pete
05-30-2008, 02:54 PM
Hi redwolfe_98

I accept that you are trying to help but I am really asking about Spyware Doctor's identification of 'eicar.com'. Antivirus is dealing with it as expected for me, as illustrated by the shots in my posts in the previously quoted Antivirus forum thread.

Ditto
06-02-2008, 04:04 AM
Following on from this thread http://www.pctools.com/forum/showthread.php?t=51886 in the AV forum , I noticed that the eicar test virus is ignored by SD 5.5.1.336 both in real-time and full on-demand scan. Is this normal?

Um...that's because Eicar test file is recognized as a VIRUS, not spyware. Spyware Doctor is designed to eliminate spywares, if you want to test Eicar file you need Spyware Doctor with AntiVirus or PC Tools AntiVirus.

AChen
06-02-2008, 04:10 AM
Hi Pete,

We are looking into this and SD standalone will detect the EICAR tests :)

PC-Pete
06-02-2008, 07:19 AM
Hi Anthony
Do you mean it "will detect the EICAR tests" in the future, or that it "will" now when you try to download, write, open it?

AChen
06-02-2008, 07:34 AM
Sorry for the confusion :o
It will detect the eicar tests in the very near future :)

PC-Pete
06-03-2008, 04:05 AM
Thanks for the clarification.
On seeing that 5.5.1.336 contains a PC Tools AV on-demand scan engine and PCTAV-format database files, I thought that eicar.com might now be included. Looking closer it appears that the definitions are not identical with PCTAV.

Is 'PCTAVEng.dll' used as/for the 'File Scanner' tool?