New
#31
WD let's you download Eicar.com, yes. But it detects and blocks it at any attempt to acces the file. And Yes, it will remove it.
Actually, you don't even need to download it to test this. You can create the EICAR test virus in Notepad. Just type the text:
X5O!P%%@AP[4\PZX54(P%^^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
as one line (do not press Enter at the end) and save it as eicar.com. In fact, at a pinch you can do without Notepad, just open a command prompt and use ECHO to pipe the text directly to the file.
echo X5O!P%%@AP[4\PZX54(P%^^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*>eicar.com
But Eicar.com is not detected as PUA malware, it is a test virus that is detected on any attempt to access the file (it's also a 16-bit app).
The PUP/PUA test is the EICAR potentially unwanted application test here: Feature Settings Check - Potentially Unwanted Applications | AMTSO
Defender will stop you from downloading that one, but you'll need to enable PUA detection first.
Enable or Disable Windows Defender PUA Protection in Windows 10