Jump to content

Recommended Posts

Posted (edited)

I am using eset internet security, and it is not detecting the amtso drive by download test 

 

Edited by fxtreme

Share this post


Link to post
Share on other sites
On 6/28/2020 at 3:47 AM, Marcos said:

Try downloading it from here:

http://2016.eicar.org/download/eicar_com.zip

Actually, that's the zipped version. Both HTTP and HTTPS eicar.com versions can be downloaded here: http://2016.eicar.org/85-0-Download.html . In any case, Eset detects both on attempted download.

Looks like there is a problem - again - with the AMTSO test download web site.

Share this post


Link to post
Share on other sites
On 6/28/2020 at 1:17 PM, Marcos said:

It seems the website doesn't actually initiate the download of the test file eicar.com. Try downloading it from here:

hxxp://2016.eicar.org/download/eicar_com.zip

If detected, web access protection works alright.

 

On 6/29/2020 at 6:25 PM, itman said:

Actually, that's the zipped version. Both HTTP and HTTPS eicar.com versions can be downloaded here: hxxp://2016.eicar.org/85-0-Download.html . In any case, Eset detects both on attempted download.

Looks like there is a problem - again - with the AMTSO test download web site.

To add to this ESET doesn't block the download if it's done through internet download manager. The file downloaded successfully and then the file detection cleaned it up from the downloads folder.

I also tried going here and downloading from all four https versions of the file and then again the both zip files got downladed via idm but the threat was detected by eset with a notification.

The file got downloaded and it is a concern. 

Can you guys also test this out in Google Chrome with latest idm installed?


PS : The file was blocked when I tried downloading without idm. 

Eset Internet Security : 13.2.16.0 (64bit)

Google Chrome : 84.0.4147.105 (64bit)

Internet Download Manager : 6.38 build 2

Thank you

Share this post


Link to post
Share on other sites

Web access protection cannot scan files downloaded through download managers. Downloaded files will be scanned by real-time protection or upon extraction from an archive.

Share this post


Link to post
Share on other sites
Posted (edited)
10 hours ago, Marcos said:

Web access protection cannot scan files downloaded through download managers. Downloaded files will be scanned by real-time protection or upon extraction from an archive.

Thank you @Marcos

But when I tried downloading from AMTSO all files were blocked by ESET even if the download was initiated by IDM.

386273069_Screenshot(4).thumb.png.09197ea24cc8bd42c4d51ebd898cf314.png

 

 

 

But if I download the eicar zip file from the official page ESET doesn't block the download through idm. ESET blocked the page but not the download from the eicar official page. But it did block the download from AMTSO. This is what I'm getting into.
 

 

If it's by nature that ESET functionality is to not block downloads done through download managers then it shouldn't work for any websites.

I believe it's because the eicar test file downloaded from the official page have SSL encryption and AMTSO doesn't?

 

Edited by JitzyJT

Share this post


Link to post
Share on other sites

1, In the list of SSL/TLS filtered applications change "auto" to "scan" for idman.exe:

image.png

2, In IDM setup, you may need to change the max. connections number to 1:

image.png

Share this post


Link to post
Share on other sites
Posted (edited)
2 hours ago, Marcos said:

1, In the list of SSL/TLS filtered applications change "auto" to "scan" for idman.exe:

image.png

Thanks again @Marcos

That did it. I changed the scan action of IDM from "auto" to "scan" and ESET blocked it straight way. Tried with Chrome, Firefox, Edge Chromium (with microsoft store idm extension) and Brave browser. 

ESET blocked the download on all four browsers.

As for limiting the connections which I didn't have to do anyway so  I'm leaving it as it is.

I'll keep looking if it'll happen again after changing the setting.

Thank you for now!!!

Edited by JitzyJT

Share this post


Link to post
Share on other sites
1 hour ago, JitzyJT said:

As for limiting the connections which I didn't have to do anyway so  I'm leaving it as it is.

If you don't do that bigger files downloaded in chunks will not be scanned. It was not a problem with eicar since it's a tiny file which is downloaded at once.

Share this post


Link to post
Share on other sites
57 minutes ago, Marcos said:

If you don't do that bigger files downloaded in chunks will not be scanned. It was not a problem with eicar since it's a tiny file which is downloaded at once.

I think he wouldn't want to change the number of maximum connection as changing this in a way makes the use of IDM obsolete. 

Share this post


Link to post
Share on other sites

IDM supports scanning of downloaded files with a command-line on-demand scanner. It's possible to use ecls for this purpose:

image.png

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...