Jump to content


Photo
- - - - -

Eicar Cloud Detection Enabled


  • Please log in to reply
1 reply to this topic

#1 RobT

RobT

    Advanced Member

  • Administrators
  • 241 posts

Posted 28 April 2011 - 08:01 PM

**Update** the Eicar Win32.Trojan.275a detection name has been changed to Win32.Eicar.275a

As there are several ongoing threads about Immunet not detecting eicar in the cloud I wanted to let everyone know we just added the cloud signature Win32.Trojan.275a for it.

Please note, if you previously scanned eicar your previous scan result will be cached on your system so you might see something other than a detection of Win32.Trojan.275a:
-If you previously scanned eicar.com with a fully updated ClamAV engine, it will be re-detected by a Clam.Something.Something signature rather than the Win32.Trojan.275a signature.
-If you previously scanned eicar.com with clam disabled, it will have been marked as a clean file and will not be detected.

If you want to see eicar detected by the cloud signature and have previously scanned and cached it, you can clear Immunet's cache by:
1) opening an elevated command prompt
2) net stop immunetprotect
3) delete c:\programfiles\Immunet\history.db, cache.db, and histortyex.db
4) net start immunetprotect
5) Now, download and re-scan eicar from http://www.eicar.org...nload/eicar.com and it should detect as Win32.Trojan.275a

#2 ritchie58

ritchie58

    Staff Member

  • Moderators
  • 1,891 posts
  • LocationOil City, Pa. U.S.A.

Posted 04 October 2011 - 06:37 AM

I just ran the Eicar test and I'm sure you guys will be glad to know that Immunet Free detected the string before Panda Cloud Pro. In fact I ran the test twice and Immunet caught it both times first.

* Immunet Global Forum Moderator *





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users