Test your anti-malware/anti-virus protection with EICAR

[Kosmo]

As many of you know(quite a few don't) what EICAR is, this is a open poll to see what programs pick it up and what programs fail the basic tests.

I am conducting this poll because A-Squared failed to see this on a scan, but MSE picked it up before it could be downloaded.


So after you take the poll, Post what you used to test it with and results.

WIKI: http://en.wikipedia.org/wiki/EICAR_test_file
(links to test file) EICAR: http://www.eicar.org/anti_virus_test_file.htm

 

[TheSchaft]

Microsoft Security Essentials caught and cleaned it as soom as I clicked on "save". Never had a chance.

 

[Dinesh]

 

[Tews]

With NIS, I couldnt even click save...

 

[hackerman1]

hi !

Kosmo: "I am conducting this poll because A-Squared failed to see this on a scan"

a2 is perhaps intelligent enough to know it´s a testfile ?

if so, it doesn´t show a FP.

 

[Dinesh]

In Kismo's case, a squared didnt detect it because he was also running MSE.
BTW, here's the virustotal link which says a squared will detect this file.
Virustotal. MD5: 44d88612fea8a8f36de82e1278abb02f EICAR Test String Virus.Eicar-Test-Signature EICAR_Test_File

 

[Kosmo]

Perhaps it won't show it as a FP, but at the same time we can see the sensitivity of such scanners with this simple poll.

To the novice user, you get away with FP without too many worries, but I think more advanced users want to see results and everything shown even as a FP(user decides what should be done to the file), I guess knowing it is actually picking up even the simplest of junk can make you feel more secure about what product you use.

 

[Kosmo]

I guess in Kismo's case, a squared didnt detect it because he was also running MSE.
BTW, here's the virustotal link which says a squared will detect this file.
Virustotal. MD5: 44d88612fea8a8f36de82e1278abb02f EICAR Test String Virus.Eicar-Test-Signature EICAR_Test_File

I disabled MSE from booting on startup and tested this. So I wonder whats up hmm...

 

[Dinesh]

remove mse from your system and you'll find a squared detecting the eicar file.

 

[hackerman1]

hi !

Kosmo: "I disabled MSE from booting on startup"

exactly how did you do it ?

 

[Airbot]

As many of you know(quite a few don't) what EICAR is, this is a open poll to see what programs pick it up and what programs fail the basic tests.

I am conducting this poll because A-Squared failed to see this on a scan, but MSE picked it up before it could be downloaded.


So after you take the poll, Post what you used to test it with and results.

WIKI: EICAR test file - Wikipedia, the free encyclopedia
(links to test file) EICAR: eicar | THE ANTI-VIRUS OR ANTI-MALWARE TEST FILE

I guess in Kismo's case, a squared didnt detect it because he was also running MSE.
BTW, here's the virustotal link which says a squared will detect this file.
Virustotal. MD5: 44d88612fea8a8f36de82e1278abb02f EICAR Test String Virus.Eicar-Test-Signature EICAR_Test_File

I disabled MSE from booting on startup and tested this. So I wonder whats up hmm...

Probably the reason why a squared is not picking it up while downloading for you.

 

[Dinesh]

As many of you know(quite a few don't) what EICAR is, this is a open poll to see what programs pick it up and what programs fail the basic tests.

I am conducting this poll because A-Squared failed to see this on a scan, but MSE picked it up before it could be downloaded.


So after you take the poll, Post what you used to test it with and results.

WIKI: EICAR test file - Wikipedia, the free encyclopedia
(links to test file) EICAR: eicar | THE ANTI-VIRUS OR ANTI-MALWARE TEST FILE

I guess in Kismo's case, a squared didnt detect it because he was also running MSE.
BTW, here's the virustotal link which says a squared will detect this file.
Virustotal. MD5: 44d88612fea8a8f36de82e1278abb02f EICAR Test String Virus.Eicar-Test-Signature EICAR_Test_File

I disabled MSE from booting on startup and tested this. So I wonder whats up hmm...

Probably the reason why a squared is not picking it up while downloading for you.


View attachment 36305 View attachment 36306

Thats one reason and also because MSE had already detected EICAR test file on his pc.

 

[Dinesh]

Panda Cloud Antivirus picks it up.

 

[hackerman1]

hi !

THANKS Airbot, mystery solved...

i was starting to wonder what was going on, you saved me from wasting a lot of time testing a2 tomorrow.

 

[Airbot]

No problem. A squared does detect the eicar, as seen with a scan from the right click context menu of the eicar zip. Just not picking it up during download on my x64 system.

 

[Creer]

Eicar test is a very old well known test and almost all AV vendors had time to add this test samples to their AV databases of signatures - thats why you have so good scores

 

[ignatzatsonic]

I downloaded 3 files:

eicar.com: AVG Free detected one threat; malware bytes detected 1 threat

eicar_com.zip: AVG Free detected two threats; malware bytes detected nothing

eicarcom2.zip: AVG Free detected three threats; malware bytes detected nothing.

I had to manually choose to scan these files to get a result---I wasn't prevented from downloading or saving them.

 

[Airbot]

Interesting.

Avast detects it during the download and before, but only in Firefox, which is set as my default browser. It doesn't detect it with IE8, even if setting IE8 to default.

Malwarebytes pro doesn't detect any of them for me. This is with a x64 system.

 

[TheSchaft]

Eicar test is a very old well known test and almost all AV vendors had time to add this test samples to their AV databases of signatures - thats why you have so good scores

Well said.

This is a well known test "virus" that everybody should catch. The MSE reaction was interesting in that it caught it as it started the download process (for me). Some others have posted that it saw what it was even earlier.

Bottom line: I would be concerned if my antivirus/antimalware DIDN'T catch these test files right off the bat.

 

[Kipper]

For me MSE caught it immediately, not allowing the files to be saved period.