Eicar Mailtest !!!!!!!!!

Reading the same old story day in and day out........People asking which is the best AV solution. There is mostly (more like always.....) just one answer:
Nod32 or Kav.

I would just like to ask everybody, using these programs, to run the Eicar Mailtest.....http://www.webmail.us/testvirus and report back here about the findings.

It amazes me every time again, that nobody seems to run this test. I think it's important just to see how bad Nod32 scores within this test.

For me it is so important to have the e-mail scanning section as good as possible, as this is the biggest problem these days.

I have been testing several av's (big names) and came out at Dr. Web. This program deals with infected mails in a great way. 24 out of the 26 tests are detected and dealt with. This is a great score compared to the 'big' names here every minute of the day.

I hope a lot of you guys out here will run this Eicar Mailtest and reaport what happened.

Good luck......

Putin

 

Are you waiting for somebody "special" to make a comment on this ?
Have a nice day

 

The simple fact of the matter is that many, perhaps most, will report nothing. Many ISP's figured out that this is very easily dealt with at the server level and those e-mails simply won't make it through.

As for NOD32's performance in this regard, I've never seen a problem. Ever.

Blue

 

EICAR sample was never meant to be modified or encoded in any way...

 

That isn't my "answer" but maybe I'm out-of-step with this Board. This Board's opinion does not necessarily reflect that of the User-Community-At-Large or of the Security-Community-At-Large. If you go to a different Board, you will get different prevailing opinion.

 

Send me your address via PM i"ll post you right now a six-pack of beer

 

Reading the same old story, People asking which is the best Eicar test.

As Marcos says: The only regular eicar files for testing are available at http://www.eicar.org/anti_virus_test_file.htm

Please read here

 

We both know AV opinions vary from board to board and the AV wars will always rage on....but....to tag Wilders board as a board that "does not necessarily reflect that of the User-Community-At-Large or of the Security-Community-At-Large" is a sad commentary for all the many posts that have passed thru these Forums. While Wilders may be the Home to a Quality AV program....it in no way should be construed by anyone that this board as a whole is any different than other boards as for being opinionated....and to suggest any differently is simply an opinion I'll disagree with.

 

Actually all Boards are opinionated; the very nature of the "which AV is best" debate is one of opinion. That is all I meant; did not mean to sound critical of Wilders.

 

I don't wait for anybody 'special', as you can read in my topic!!!

But still funny.......that you react as first!!!!

Have a nice day too !!!!

Putin

 

My ISP doesn't deal with it at server level and all the mails make it through.

Please run this test and see what happens with these mails, perhaps you'll know what I mean and maybe you will be able to explain to me why a lot of these mails are not dealt with......that's all I'm asking.

Regards,

Putin

 

Running these eicar testfiles is not the same as running the Eicar Mailtest!!!!!!

Just run this mailtest and see what happens!!!!!

Greetings,

Putin

 

I am amazed about your comment. Have you ever ran this Eicar Mailtest?
Please do and try to explain to me why the results are so poorly with most AV's.

Greetings,

Putin

 

putin,read my post above...

 

...Happy Bytes hand signed beer cans.... i still need the address
That's not a joke... i"ll send them really

 

Can i have one beer too pls?

About these tests, i am not a specialist, but up to now i am very satisfied with my nod32, no problem at all and no inflections, even when i surf to dangerous places These tests are possibly useful, but the most important is how the AV protects in the real life and no under 'simulated' conditions. Up to now NOD32 protects me perfectly, so no thought to change it or to check it with that test which possibly is optimised to behave good in some selected AV softwares.

 

OMG there is a voice of reason!

Edit: I want some beer.

 

Just run the test and see what your AV does with these 'Eicar infected' mails. There is nothing simulated......just go there and see and then give your comment.

Greetings,

Putin

 

C'mon people,start reading! EICAR sample MUST have the exact string as stated on official EICAR webpage. If this string is altered in any way (bytes added/removed/exchanged) the sample is no longer valid and cannot be taken as any result of detection. You can however pack EICAR with different archive types (like ZIP,RAR,ACE,CAB,GZIP...),or make several compression layers(levels) and change extension. Thats all. If you start embedding EICAR string in other files,encoding it,doing all other fuzzy things with EICAR string you simply break it's main purpose. If AV miss the modified EICAR sample,thats nothing wrong since it was never meant to be changed in the first palce.

 

so Marcos was right that The only regular eicar files for testing are available at http://www.eicar.org/anti_virus_test_file.htm

I havent tried the test Putin. Just tell me the reason why the other AV cant do this that Dr Web does.

 

Quote taken from official EICAR webpage:

Yes,it's importnat how EICAR code looks,but many antiviruses pick it even if it's modified. Although it should be only detected under specific rules (read above).

 

The Eicar Mailtest is found on this site: http://www.security-ops.tk/ mentioned at the bottom of your own profile, so why are you questioning this now? Bit weird to me.......it's even supported by AVAST!!!!!

Putin

 

That's why I think Dr. Web is a great program, as it just detects all the eicars except two and most other AV's don't.
Another AV which scores very well with this test is: AVG 7.0.
It gives me peace of mind and I just wonder why the other AV's don't handle the files the same way.......that's all I wonder about. But everybody here is fighting this statement as I probably step on a lot of long toes.

The only 'great' scanner in the world according to this forum is Nod32.......and this makes me irritated. Just run this test and see what NOD32 does with these files and tell me why it doesn't do better, that's all.

Greetings,

Putin

 

Btw, Eicar is not a virus

 

I hafta admit I purchased my AV to detect virii.