23 MB download gets 92% of the way, then stops

[saubrey]

WG 6.04. using KAV plug-in. An HTTP download of a 23 MB file terminates at 92%. Why?

I have drip feed of 100 K turned on. Download takes about 2 minutes to get to 75%, then KAVSS.exe shoots up to 90% CPU utilization and stays there for over 5 minutes trickling out the remaining 6 MB to the browser. When the browser has received 92% of the file (approx. 22.3 MB), the download terminates and the file is corrupted.

Why does the last 25% take over 5 minutes to scan with KVASS.exe? It is only 6 MB. Is this a bug in KVASS.exe?

I turned off the KAV plug-in and the file downloaded correctly the first try. I have Norton AV installed on the client and it didn't report any viruses with the downloaded file.

[adrien]

Hi

Does the downloaded file have a whole heap of files in it (i.e. a zip file)?

Or is it password-protected or anything like that?

If the session is terminating like that it indicates that KAV wasn't happy with it. There should be something in the KAV log.

Is this a publicly accessible URL? We could have a look at it here if you like.

Adrien

[saubrey]

http://www.zonelabs.com/store/content/c ... ist2_trial

Then click the "download" button under the "Zonealarm Internet Security Suite" column

The file is a self extracting .EXE file (zip). It has 115 embedded files within it. No password protection.

[saubrey]

I manually scanned the correctly downloaded file with KAV and it gave a "corrupt file" error and stopped the scanning with a "Not scanned" status. Odd, because the file isn't corrupt...zip correctly opens and unpacks it.

[adrien]

OK, sounds like I may have to check up on this one with Kaspersky Labs themselves...

Adrien

[adrien]

PS, what scanning options do you have enabled for KAV?

Adrien

[saubrey]

The following are ON: checked packed files, check archives, check e-mail dtabases, check plain e-mail, Scan for possible virus signatures or dangerous code, Scan broken exe, zip, etc. files

Quarantine file: Cleaned, Infected, Suspicious, Time-out, Cancelled.

Pass file on: Non-scanned, Unexpected failure, Unknown error, Corrupted.