43 replies to this topic

[coolbuster2007]

How to test your anti-virus software?

<a href="http://www.windowsxlive.net/?p=1540#more-1540">Click Here!</a>

I've done the procedure on 3 softwares such as Avast, NOD32 and Spy Sweeper. The last two passed, the first one failed. 

[DJVageli]

That was pretty cool!!!...thanks for the link

[ExtremeFusion]

AVG did not automatically detected it, but it detects there is a threat after I scanned the file.. 

[fr0stbound]

Quote

AVG did not automatically detected it, but it detects there is a threat after I scanned the file.. 

:iamwithstupid:i expected it to perform better than avast though.

[sven]

The latest version with anti-virus engine on...

[becman]

whew... 'scared me there.

[Buntz]

Quote

whew... 'scared me there.

Is that the free or paid version? Do you find it when you did a scan or did it find it on it own.

[becman]

the free one. it automatically popped up when i saved it on my desktop (I like the voice prompt part )
it's my only AV and the rest are ASpyWs and AdWs. Plus AdBlock and NoScript on FF.

once more...

[Buntz]

Look like I may be changing anti-virus program. I got to look into this.

[coolbuster2007]

i've switched to nod32 after avast detection failed this afternoon 

[Buntz]

Avg free anti-virus did not pick it up when I save it to my desktop or to my document file. But when I try to eraser the file from the desktop it come up as a virus. In my document the second I put the mouse cursor on the file Avg virus warning came up.

[mudmanc4]

Immediately detected by CA, I think this thread should be a sticky in the security section for further reference.

[Conuck]

Stickied!

[Roco]

Hold on guy's before charging off into the sunset .
I may be wrong on this but !!!!!
that eicar nonmalicious string is just that not malicious and about 5 years old ,  AVG used to report it in normal runtime , but not any more , neither do a lot of AV programs , Why , it is not active ,secondary it is in text form Txt, not an Exe.
Avg will only flag a warning if you click on the string  , it won't try to heal or remove it , any AV program that flags it as a positive in real time is is flagging a false positive ,

if you want a true test of eicars test string it's here http://www.eicar.org...s_test_file.htm

try downloading  eicar.com 68 Bytes ( first on the left , )  under Download area using the standard protocol http
AVG gives a correct instant positive flag before the download starts

and note
Important note: EICAR cannot be held responsible when these files or your AV scanner in combination with these files cause any damage to your computer. YOU DOWNLOAD THESE FILES AT YOUR OWN RISK. Download these files only if you are sufficiently secure in the usage of your AV scanner. EICAR cannot and will not provide any help to remove these files from your computer. Please contact the manufacturer/vendor of your AV scanner to seek such help.

[coolbuster2007]

Quote

if you want a true test of eicars test string it's here http://www.eicar.org...s_test_file.htm

try downloading  eicar.com 68 Bytes ( first on the left , )  under Download area using the standard protocol http
AVG gives a correct instant positive flag before the download starts

and note
Important note: EICAR cannot be held responsible when these files or your AV scanner in combination with these files cause any damage to your computer. YOU DOWNLOAD THESE FILES AT YOUR OWN RISK. Download these files only if you are sufficiently secure in the usage of your AV scanner. EICAR cannot and will not provide any help to remove these files from your computer. Please contact the manufacturer/vendor of your AV scanner to seek such help.

that one is risky. 

[Roco]

Why it is not a malicious code ,  and it is a true test of your AV ,

[Conuck]

Avast picked it up on all three as soon as you click on it. then shut the page down from the Internet .

[Roco]

Quote

Avast picked it up on all three as soon as you click on it. then shut the page down from the Internet .

looks good to me Coknuck , AVG just gives the warning b4 you download ,
I tried Advast once it didn't seem as smooth as AVG , but I have kept the link to advast , just in case AVG starts charging ,
BTW you can download the eicar zip file , and play around with it , AVG will find it , and delete it .if you do a right clike scan with AVG, 
lol I did all this with eicar back on win. Me. , and I still carry the eicar string on my memory pen , along with all the free AV's nd ccleaner etc. . as a test? clean up,  for other folk ,

end of the day do a full manuel scan , and clear the AV log when your done ,
the eicar test string isn't going to multiply or open backdoors  ,it's just a test string ,
so it is ok to delete any traces that you find after playing with it ,

any one wan't a link to a site that is full on nasties , ( it's a craxz  site ) 
that will truly test your AV,  second thoughts not a good idea 

 

[tommie gorman]

Quote

looks good to me Coknuck , AVG just gives the warning b4 you download ,
I tried Advast once it didn't seem as smooth as AVG , but I have kept the link to advast , just in case AVG starts charging ,
BTW you can download the eicar zip file , and play around with it , AVG will find it , and delete it .if you do a right clike scan with AVG, 
lol I did all this with eicar back on win. Me. , and I still carry the eicar string on my memory pen , along with all the free AV's nd ccleaner etc. . as a test? clean up,  for other folk ,

end of the day do a full manuel scan , and clear the AV log when your done ,
the eicar test string isn't going to multiply or open backdoors  ,it's just a test string ,
so it is ok to delete any traces that you find after playing with it ,

any one wan't a link to a site that is full on nasties , ( it's a craxz  site ) 
that will truly test your AV,  second thoughts not a good idea 

 

There you go, pretty much the same happened to mine with AVG.

Where did you say that site was Roco? 

[Roco]

Quote

There you go, pretty much the same happened to mine with AVG.

Where did you say that site was Roco? 

Nah , Tommie I dont think II should put a link in too  that site ,
but be very afraid  if you venture there , it's at your own risk , I can give it in PM