i use comodo antivirus … and the antivirus mode is stateful. when i download eicar test file comodo doesn’t detect it!!!
but when i change the mode to on access comodo detects and deletes the file
what’s wrong??
If you click on the eicar file does it then detect it?
i used this test
stateful mode detects the EICAR test file when i open it ( the av pass only the first test ‘manual download of malware’)
on access mode detects all files in all tests while downloading and prevents them.
In that case you are safe either way. Stateful mode will detect the files before they are loaded into memory. There are also other situations in which it will detect the files (although I am not sure of all of them) but it will certainly check them before they are loaded into memory. Thus, as all malware must be loaded into malware before it can cause problems, you are safe.
Let me know if you have any other questions.
Thanks.
Thanks man 
No problem. 