ZA + Antivirus

[Sam]

Archived from groups: comp.security.firewalls (More info?)

I know this is a firewall ng but as this applies to Zonealarm, I wonder
if anyone can help.

I've purchased ZA + antivirus and am having problems with it (win98SE).
I wanted to test its efficacy so I downloaded the eicar.com test virus.
ZA+AV detects this virus on finding it in an email and when I
specifically (on demand) scan the file or the directory it's in.
However, the on-access (i.e. resident) scanner fails to pick it up when I
double-click or otherwse open eicar.com. My conclusion can only be that
the on-access scanner is not working - I'm not going to await a real
virus and test this view out!!!!. I've tried all manner of means to get
it to work - uninstalled/reinstalled; redownloaded the virus signatures;
stopped virtually everything else on my machine from loading to try to
find an incompatibility somewhere, but to no avail. So, I've now re-
installed AVG (free version) and am using that as my on-access scanner.
Not what I'd expected to have to do.

Any ideas?
--
Sam

 

[phoenix]

Archived from groups: comp.security.firewalls (More info?)

On Wed, 30 Jun 2004 16:54:14 +0100, Sam wrote:

> I know this is a firewall ng but as this applies to Zonealarm, I wonder
> if anyone can help.
>
> I've purchased ZA + antivirus and am having problems with it (win98SE).
> I wanted to test its efficacy so I downloaded the eicar.com test virus.
> ZA+AV detects this virus on finding it in an email and when I
> specifically (on demand) scan the file or the directory it's in.
> However, the on-access (i.e. resident) scanner fails to pick it up when I
> double-click or otherwse open eicar.com. My conclusion can only be that
> the on-access scanner is not working - I'm not going to await a real
> virus and test this view out!!!!. I've tried all manner of means to get
> it to work - uninstalled/reinstalled; redownloaded the virus signatures;
> stopped virtually everything else on my machine from loading to try to
> find an incompatibility somewhere, but to no avail. So, I've now re-
> installed AVG (free version) and am using that as my on-access scanner.
> Not what I'd expected to have to do.
>
> Any ideas?

Well, as you've paid for the product why don't you email Zonelabs support?
Failing that have a look in the ZA forums here
http://forum.zonelabs.org/zonelabs

Regards

Bill

 

[Guest]

Archived from groups: comp.security.firewalls (More info?)

Sam wrote:
> I know this is a firewall ng but as this applies to Zonealarm, I wonder
> if anyone can help.
>
> I've purchased ZA + antivirus and am having problems with it (win98SE).
> I wanted to test its efficacy so I downloaded the eicar.com test virus.
> ZA+AV detects this virus on finding it in an email and when I
> specifically (on demand) scan the file or the directory it's in.
> However, the on-access (i.e. resident) scanner fails to pick it up when I
> double-click or otherwse open eicar.com. My conclusion can only be that
> the on-access scanner is not working - I'm not going to await a real
> virus and test this view out!!!!. I've tried all manner of means to get
> it to work - uninstalled/reinstalled; redownloaded the virus signatures;
> stopped virtually everything else on my machine from loading to try to
> find an incompatibility somewhere, but to no avail. So, I've now re-
> installed AVG (free version) and am using that as my on-access scanner.
> Not what I'd expected to have to do.
>
> Any ideas?

If you want to know if your antivirus program is working
peoperly, I recommend that you go to the below url and follow the
instructions to send yourself a benign virus encoded in different
formats and embedded in various segments and types of files.
http://www.testvirus.org/
--

Alan

 

[Sam]

Archived from groups: comp.security.firewalls (More info?)

phoenix wrote ...

> Well, as you've paid for the product why don't you email Zonelabs support?
> Failing that have a look in the ZA forums here
> http://forum.zonelabs.org/zonelabs
>
done both, thanks. The forum evoked a number of suggestionds which
haven't worked. I'm still awaiting a response from my email to technical
support on 27th June (but that is only 3 days ago, so I'm hoping they
will still respond!).
--
Sam

 

[Sam]

Archived from groups: comp.security.firewalls (More info?)

Sam wrote ...

> I'm still awaiting a response from my email to technical
> support on 27th June
>
.... sorry to reply to my own post, but, to be fair, it was 28th, not
27th.
--
Sam

 

[Sam]

Archived from groups: comp.security.firewalls (More info?)

A.G. Kalman wrote ...

> If you want to know if your antivirus program is working
> peoperly, I recommend that you go to the below url and follow the
> instructions to send yourself a benign virus encoded in different
> formats and embedded in various segments and types of files.
> http://www.testvirus.org/
> --
>
Thanks. I've tried the 25 tests here. Very useful for testing if the
email scanner is working (it didn't in a good few cases). However, these
tests all use the eicar test virus, which is the one which I've been
saying the on-access scanner does not detect, so I'm really not much
further on.
--
Sam

 

[Alan]

Archived from groups: comp.security.firewalls (More info?)

Sam wrote:

> A.G. Kalman wrote ...
>
>> If you want to know if your antivirus program is working
>> peoperly, I recommend that you go to the below url and follow the
>> instructions to send yourself a benign virus encoded in different
>> formats and embedded in various segments and types of files.
>> http://www.testvirus.org/
>> --
>>
> Thanks. I've tried the 25 tests here. Very useful for testing if the
> email scanner is working (it didn't in a good few cases). However, these
> tests all use the eicar test virus, which is the one which I've been
> saying the on-access scanner does not detect, so I'm really not much
> further on.
Excuse my ignorance as I don't use ZA. What do you mean by
"on-access scanner"?

 

[Michael]

Archived from groups: comp.security.firewalls (More info?)

Alan wrote:

> Sam wrote:
>
>> A.G. Kalman wrote ...
>>
>>> If you want to know if your antivirus program is working peoperly, I
>>> recommend that you go to the below url and follow the instructions
>>> to send yourself a benign virus encoded in different formats and
>>> embedded in various segments and types of files.
>>> http://www.testvirus.org/
>>> --
>>>
>> Thanks. I've tried the 25 tests here. Very useful for testing if
>> the email scanner is working (it didn't in a good few cases).
>> However, these tests all use the eicar test virus, which is the one
>> which I've been saying the on-access scanner does not detect, so I'm
>> really not much further on.
>
> Excuse my ignorance as I don't use ZA. What do you mean by "on-access
> scanner"?

On Access means if he receives an e-mail with an attachment and he saves
the attached file to a folder and then double clicks the file the AV is
supposed to scan the file before it executes the file. Or, if he double
clicks the file in his e-mail message the AV is supposed to scan the
attachment before it executes.

Michael

 

[Sam]

Archived from groups: comp.security.firewalls (More info?)

Michael wrote ...

> On Access means if he receives an e-mail with an attachment and he saves
> the attached file to a folder and then double clicks the file the AV is
> supposed to scan the file before it executes the file. Or, if he double
> clicks the file in his e-mail message the AV is supposed to scan the
> attachment before it executes.
>
absolutely right, obly on my Win98SE system I have to conclude that the
zonealarm on-access antivirus scanner is not active even though it says
it is.
--
Sam

 

[Michael]

Archived from groups: comp.security.firewalls (More info?)

Sam wrote:

>Michael wrote ...
>
>
>
>>On Access means if he receives an e-mail with an attachment and he saves
>>the attached file to a folder and then double clicks the file the AV is
>>supposed to scan the file before it executes the file. Or, if he double
>>clicks the file in his e-mail message the AV is supposed to scan the
>>attachment before it executes.
>>
>>
>>
>absolutely right, obly on my Win98SE system I have to conclude that the
>zonealarm on-access antivirus scanner is not active even though it says
>it is.
>
>
Sam,

With your experience and the troubleshooting you have performed you
should give ZA "Customer Service" a call, they may have the answer you
are looking for, and that number is free.

Michael

 

[Sam]

Archived from groups: comp.security.firewalls (More info?)

Michael wrote ...

> Sam,
>
> With your experience and the troubleshooting you have performed you
> should give ZA "Customer Service" a call, they may have the answer you
> are looking for, and that number is free.
>
> Michael
>
free in the USA I think, though, not in UK ?
--
Sam