Windows 7: Test your anti-malware/anti-virus protection with EICAR

Airbot · 11 Nov 2009

Quote: Originally Posted by Kosmo

As many of you know(quite a few don't) what EICAR is, this is a open poll to see what programs pick it up and what programs fail the basic tests.

I am conducting this poll because A-Squared failed to see this on a scan, but MSE picked it up before it could be downloaded.

So after you take the poll, Post what you used to test it with and results.

WIKI: EICAR test file - Wikipedia, the free encyclopedia
(links to test file) EICAR: eicar | THE ANTI-VIRUS OR ANTI-MALWARE TEST FILE

Quote: Originally Posted by Kosmo

Quote: Originally Posted by Dinesh

I guess in Kismo's case, a squared didnt detect it because he was also running MSE.
BTW, here's the virustotal link which says a squared will detect this file.
Virustotal. MD5: 44d88612fea8a8f36de82e1278abb02f EICAR Test String Virus.Eicar-Test-Signature EICAR_Test_File

I disabled MSE from booting on startup and tested this. So I wonder whats up hmm...

Probably the reason why a squared is not picking it up while downloading for you.

Test your anti-malware/anti-virus protection with EICAR-capturet.jpg

Name: Capturegg.JPG
Views: 555
Size: 14.5 KB

Dinesh · 11 Nov 2009

Quote: Originally Posted by Airbot

Quote: Originally Posted by Kosmo

As many of you know(quite a few don't) what EICAR is, this is a open poll to see what programs pick it up and what programs fail the basic tests.

I am conducting this poll because A-Squared failed to see this on a scan, but MSE picked it up before it could be downloaded.

So after you take the poll, Post what you used to test it with and results.

WIKI: EICAR test file - Wikipedia, the free encyclopedia
(links to test file) EICAR: eicar | THE ANTI-VIRUS OR ANTI-MALWARE TEST FILE

Quote: Originally Posted by Kosmo

Quote: Originally Posted by Dinesh

I guess in Kismo's case, a squared didnt detect it because he was also running MSE.
BTW, here's the virustotal link which says a squared will detect this file.
Virustotal. MD5: 44d88612fea8a8f36de82e1278abb02f EICAR Test String Virus.Eicar-Test-Signature EICAR_Test_File

I disabled MSE from booting on startup and tested this. So I wonder whats up hmm...

Probably the reason why a squared is not picking it up while downloading for you.

Attachment 36305 Attachment 36306

Thats one reason and also because MSE had already detected EICAR test file on his pc.

Dinesh · 11 Nov 2009

Panda Cloud Antivirus picks it up.

Test your anti-malware/anti-virus protection with EICAR-capture.png

hackerman1 · 11 Nov 2009

hi !

THANKS Airbot, mystery solved...

i was starting to wonder what was going on, you saved me from wasting a lot of time testing a2 tomorrow.

Airbot · 11 Nov 2009

No problem. A squared does detect the eicar, as seen with a scan from the right click context menu of the eicar zip. Just not picking it up during download on my x64 system.

Test your anti-malware/anti-virus protection with EICAR-capturefc.jpg

Creer · 11 Nov 2009

Eicar test is a very old well known test and almost all AV vendors had time to add this test samples to their AV databases of signatures - thats why you have so good scores

ignatzatsonic · 11 Nov 2009

I downloaded 3 files:

eicar.com: AVG Free detected one threat; malware bytes detected 1 threat

eicar_com.zip: AVG Free detected two threats; malware bytes detected nothing

eicarcom2.zip: AVG Free detected three threats; malware bytes detected nothing.

I had to manually choose to scan these files to get a result---I wasn't prevented from downloading or saving them.

Airbot · 11 Nov 2009

Interesting.

Avast detects it during the download and before, but only in Firefox, which is set as my default browser. It doesn't detect it with IE8, even if setting IE8 to default.

Malwarebytes pro doesn't detect any of them for me. This is with a x64 system.

TheSchaft · 11 Nov 2009

Quote: Originally Posted by Creer

Eicar test is a very old well known test and almost all AV vendors had time to add this test samples to their AV databases of signatures - thats why you have so good scores

Well said.

This is a well known test "virus" that everybody should catch. The MSE reaction was interesting in that it caught it as it started the download process (for me). Some others have posted that it saw what it was even earlier.

Bottom line: I would be concerned if my antivirus/antimalware DIDN'T catch these test files right off the bat.

Kipper · 11 Nov 2009

For me MSE caught it immediately, not allowing the files to be saved period.

Windows 7: Test your anti-malware/anti-virus protection with EICAR

Test your anti-malware/anti-virus protection with EICAR problems?