No detection on EIcar

Norton Security | Norton Internet Security
1

I think it wasn't like that a few days ago but at the moment my Norton 2011 (18.5) doesn't detect at all any forms of EICAR test file (the famous one from www.eicar.org) . Updated NIS 2011 (18.5) and no detection - this worries me . 

 

I restarted the computer 2 times and still nothing happens - many eicar.com files and even one eicar.exe remains on my Desktop.

 

Running Windows 7 Home Premium

 

What happens with your Nortons ?

 

By the way Norton is green ticked as usual , Safe Web and download Insight work on malicious files but Eicar ...

2

Although I generally use NIS or NAV , I just installed Norton 360 version 4 on the same computer and it doesn't detect Eicar , too . File Insight reports this as Norton Trusted files. However upon dowload using IE8 , nothing happens just with the Eicar file , it is not reported green as trusted/safe but nothing - really nothing. Symantec business antivirus detects Eicar , though.

3

Confirmed.  No detection.

 

Good catch!

4

Downloaded with Firefox just now, and it was detected and blocked.

5

I use mainly Chrome (stable) - now version 8 and IE8 (not often) and they don't work . Neither manual creation of EICAR.com or EICAR.exe using Notepad

 

Have no idea what might make Firefox different or your configuration different

6

Interesting.

 

I checked on three machines. Two with NIS 2011 and one with N360v5 Beta.  I used IE8 and Firefox.

 

No detection.

 

7

Ran LiveUpdate and retested with FF.  Still detected.  Weird.

8

All,

 

We're looking in to this. 

 

We'll provide an update when we have more information. 

9

All,

We have identified the cause of this and should have this issue corrected shortly. The issue will be resolved through a LiveUpdate def update.

10

Hi Tim,

 

Any thoughts on why my NIS 2011 continued to block it?

11

Very odd! I just tested again myself and both IE 8 and Firefox are detecting it just fine for me as well.

 

Allen

12

Nice work, Tim and team!

 

It's now being detected and removed.

13
Phil_D wrote:

Nice work, Tim and team!

 

It's now being detected and removed.

OK, so now the question is: was mine detected because I never had the problem like SendOfJive or because a live update fix resolved it before I knew it was broken? :smileytongue:

 

Allen

14

Hi SendOfJive,

 

Not too sure really - perhaps you're just THAT special :smileywink: 

15
Tim_Lopez wrote:

Hi SendOfJive,

 

Not too sure really - perhaps you're just THAT special :smileywink: 

Careful Tim, it's liable to go to his head! :smileytongue:

 

Just kidding, but then again SendOfJive is special and the coolest cat on the forums! :smileyhappy:

 

Allen

16

 

Tim_Lopez wrote:

Hi SendOfJive,

Not too sure really - perhaps you're just THAT special :smileywink: 

Hmmm.  Maybe I oughta check the timestamp on my last definitions file update.......:smileysurprised:

 

17

@Allenm,tim,sendofjiv

my norton working fine with eicar since first day.make sure everyone check http one,not https.

18

It should block it when downloaded with HTTPS too, as soon as it is written to the hard drive. Autoprotect detection on the hard drive isn't affected by the way you download it.

19

Yeah if download to hard drive.and if i access throuh http.norton blocks the entire connection.:p.\m/