This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Please explain why it's completely normal to download so many Eicars and the installed M.D.A. gave it the all clear,and on the other side of the coin,after usng any other free antivirus regardless of where it came from?,didn't like my Eicars at all and took successful actions agains them?.My installed malware scanners also didn't like my Eicars as they showed on on the detections list and successfully removed all within seconds.The M.D.A. does even show a warning at random on the screen and it wanted a reboot to continue on with the removal,and after the reboot was made and rechecked my downloads folder ,sadly nothing had changed.Any advice further on would be much appreciated.
A cloud-native solution that protects workloads across hybrid and multi-cloud environments with threat detection and security recommendations
Locked Question. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
Just tested Windows 11 25H2 and Windows Defender removed every eicar test file immediately with no reboot required.
Clearly there must be something very wrong with your installation.
AI answer
It is normal for Microsoft Defender Antivirus (M.D.A.) to allow EICAR test files because they are specifically designed for testing antivirus solutions without posing any real threat. The EICAR test file is recognized as a safe file by many antivirus programs, including Microsoft Defender, which treats it as a benign test case rather than a malicious threat. This is why you might see that M.D.A. gives it the all-clear.
On the other hand, other free antivirus solutions or malware scanners may have different configurations or heuristics that lead them to flag the EICAR test files as threats. This can result in them taking actions such as quarantining or removing the files. The discrepancy in behavior between M.D.A. and other antivirus programs can be attributed to their different detection algorithms and policies regarding test files.
If you are experiencing issues with M.D.A. not removing the EICAR files despite warnings, it might be worth checking the settings for real-time protection and ensuring that the software is fully updated. Additionally, you may want to review the exclusion settings to ensure that the EICAR files are not being mistakenly excluded from scanning.
If the problem persists, consider reaching out to Microsoft support for further assistance, as they can provide more tailored advice based on your specific setup and any potential conflicts with other security software you may have installed.
References: