Do your OWN AV testing via simulation

[jimbo45]

Hi all
I think we see so many posts on this forum as to AV program A is better than B or whatever but how many people EVER do THEIR OWN testing.

I'd suggest first run a "simulation" type of test on scanning for a known virus and then (preferably on a Virtual Machine) load up a test Virus and see if your AV software detects it.

Comparisons that product A is better than B are meaningless here since we all use Computers and the Internet in different (often very different) ways that it makes any sort of comparison meaningless.


So for simulation try the approach suggested here

How To: Test your Anti-virus Software

Cheers
jimbo

 

[Dwarf]

This is a worthwhile check. All AVs should detect the EICAR test virus. Should it fail to do so, consider changing your AV. There is no excuse for an AV to fail to detect this test virus, since it is an industry standard test that has been around for many years and which should be detectable by all AVs.

 

[mickey megabyte]

mse2, unsurprisingly, passes the eicar test.

but the info it gives doesn't seem very accurate.



the online info is better.

Summary
VirusOS/EICAR_Test_File is not malicious and is a utility file created specifically to test that an antivirus application is functioning.

(not my smiley face)

 

[stratocaster]

It was quickly deleted by ESET after I click the save button.

 

[Dwarf]

Regardless of the message given out by your AV, the important thing is that it detected it and took the appropriate action.

 

[SledgeDG]

Don't forget: EICAR is not really a challenge anymore...it's out forever and all AV solutions know those scan strings used. So any AV solution that doesn't jump to red alert the moment EICAR comes anywhere near the system is not worth the storage space it occupies.

I say a false sense of security is just as bad as no security at all.

-DG

 

[Dwarf]

Don't forget: EICAR is not really a challenge anymore...it's out forever and all AV solutions know those scan strings used. So any AV solution that doesn't jump to red alert the moment EICAR comes anywhere near the system is not worth the storage space it occupies.

I say a false sense of security is just as bad as no security at all.

-DG

Exactly. Just as I also stated.

This is a worthwhile check. All AVs should detect the EICAR test virus. Should it fail to do so, consider changing your AV. There is no excuse for an AV to fail to detect this test virus, since it is an industry standard test that has been around for many years and which should be detectable by all AVs.

Failure to detect this test virus is totally inexcusable.

 

[MadHacker]

Don't assume you have a good AV just because the test works, though. Passing this test is about the AV equivalent of passing a long division test shortly after finishing advanced algebra

 

[mickey megabyte]

Regardless of the message given out by your AV, the important thing is that it detected it and took the appropriate action.

very true, but i would like to see an accurate description too! if i can't trust it on this, how can i trust it with an unknown 'threat'?