Eicar Mailtest !!!!!!!!!

Discussion in 'other anti-virus software' started by Benvan45, May 2, 2005.

Thread Status:
Not open for further replies.
  1. Benvan45

    Benvan45 Registered Member

    Joined:
    Jul 27, 2004
    Posts:
    556
    Reading the same old story day in and day out........People asking which is the best AV solution. There is mostly (more like always.....) just one answer:
    Nod32 or Kav.

    I would just like to ask everybody, using these programs, to run the Eicar Mailtest.....http://www.webmail.us/testvirus and report back here about the findings.

    It amazes me every time again, that nobody seems to run this test. I think it's important just to see how bad Nod32 scores within this test.

    For me it is so important to have the e-mail scanning section as good as possible, as this is the biggest problem these days.

    I have been testing several av's (big names) and came out at Dr. Web. This program deals with infected mails in a great way. 24 out of the 26 tests are detected and dealt with. This is a great score compared to the 'big' names here every minute of the day.

    I hope a lot of you guys out here will run this Eicar Mailtest and reaport what happened.

    Good luck...... ;)

    Putin
     
  2. Happy Bytes

    Happy Bytes Guest

    Are you waiting for somebody "special" to make a comment on this ? :D
    Have a nice day ;)
     
  3. BlueZannetti

    BlueZannetti Administrator

    Joined:
    Oct 19, 2003
    Posts:
    6,590
    The simple fact of the matter is that many, perhaps most, will report nothing. Many ISP's figured out that this is very easily dealt with at the server level and those e-mails simply won't make it through.

    As for NOD32's performance in this regard, I've never seen a problem. Ever.

    Blue
     
  4. RejZoR

    RejZoR Registered Member

    Joined:
    May 31, 2004
    Posts:
    6,426
    EICAR sample was never meant to be modified or encoded in any way...
     
  5. Randy_Bell

    Randy_Bell Registered Member

    Joined:
    May 24, 2002
    Posts:
    3,004
    Location:
    Santa Clara, CA
    That isn't my "answer" but maybe I'm out-of-step with this Board. This Board's opinion does not necessarily reflect that of the User-Community-At-Large or of the Security-Community-At-Large. If you go to a different Board, you will get different prevailing opinion. ;)
     
  6. Happy Bytes

    Happy Bytes Guest

    :-* :-* :-* :-* :-* :-* :-* :-* :-* :-*

    Send me your address via PM i"ll post you right now a six-pack of beer :eek:
     
  7. Stephanos G.

    Stephanos G. Registered Member

    Joined:
    Mar 29, 2005
    Posts:
    720
    Location:
    Cyprus
  8. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    We both know AV opinions vary from board to board and the AV wars will always rage on....but....to tag Wilders board as a board that "does not necessarily reflect that of the User-Community-At-Large or of the Security-Community-At-Large" is a sad commentary for all the many posts that have passed thru these Forums. While Wilders may be the Home to a Quality AV program....it in no way should be construed by anyone that this board as a whole is any different than other boards as for being opinionated....and to suggest any differently is simply an opinion I'll disagree with.
     
    Last edited: May 2, 2005
  9. Randy_Bell

    Randy_Bell Registered Member

    Joined:
    May 24, 2002
    Posts:
    3,004
    Location:
    Santa Clara, CA
    Actually all Boards are opinionated; the very nature of the "which AV is best" debate is one of opinion. That is all I meant; did not mean to sound critical of Wilders. ;)
     
  10. Benvan45

    Benvan45 Registered Member

    Joined:
    Jul 27, 2004
    Posts:
    556
    I don't wait for anybody 'special', as you can read in my topic!!!

    But still funny.......that you react as first!!!!

    Have a nice day too !!!! ;)

    Putin
     
  11. Benvan45

    Benvan45 Registered Member

    Joined:
    Jul 27, 2004
    Posts:
    556
    My ISP doesn't deal with it at server level and all the mails make it through.

    Please run this test and see what happens with these mails, perhaps you'll know what I mean and maybe you will be able to explain to me why a lot of these mails are not dealt with......that's all I'm asking.

    Regards,

    Putin
     
  12. Benvan45

    Benvan45 Registered Member

    Joined:
    Jul 27, 2004
    Posts:
    556
    Running these eicar testfiles is not the same as running the Eicar Mailtest!!!!!!

    Just run this mailtest and see what happens!!!!!

    Greetings,

    Putin
     
  13. Benvan45

    Benvan45 Registered Member

    Joined:
    Jul 27, 2004
    Posts:
    556

    I am amazed about your comment. Have you ever ran this Eicar Mailtest?
    Please do and try to explain to me why the results are so poorly with most AV's.

    Greetings,

    Putin
     
  14. RejZoR

    RejZoR Registered Member

    Joined:
    May 31, 2004
    Posts:
    6,426
    putin,read my post above...
     
  15. Happy Bytes

    Happy Bytes Guest

    ...Happy Bytes hand signed beer cans.... i still need the address :rolleyes: :D
    That's not a joke... i"ll send them really :eek:
     
  16. Stephanos G.

    Stephanos G. Registered Member

    Joined:
    Mar 29, 2005
    Posts:
    720
    Location:
    Cyprus
    Can i have one beer too pls?

    About these tests, i am not a specialist, but up to now i am very satisfied with my nod32, no problem at all and no inflections, even when i surf to dangerous places:) These tests are possibly useful, but the most important is how the AV protects in the real life and no under 'simulated' conditions. Up to now NOD32 protects me perfectly, so no thought to change it or to check it with that test which possibly is optimised to behave good in some selected AV softwares.
     
  17. SDS909

    SDS909 Registered Member

    Joined:
    Apr 8, 2005
    Posts:
    333
    OMG there is a voice of reason!

    Edit: I want some beer. :'(
     
  18. Benvan45

    Benvan45 Registered Member

    Joined:
    Jul 27, 2004
    Posts:
    556
    Just run the test and see what your AV does with these 'Eicar infected' mails. There is nothing simulated......just go there and see and then give your comment.

    Greetings,

    Putin
     
  19. RejZoR

    RejZoR Registered Member

    Joined:
    May 31, 2004
    Posts:
    6,426
    C'mon people,start reading! EICAR sample MUST have the exact string as stated on official EICAR webpage. If this string is altered in any way (bytes added/removed/exchanged) the sample is no longer valid and cannot be taken as any result of detection. You can however pack EICAR with different archive types (like ZIP,RAR,ACE,CAB,GZIP...),or make several compression layers(levels) and change extension. Thats all. If you start embedding EICAR string in other files,encoding it,doing all other fuzzy things with EICAR string you simply break it's main purpose. If AV miss the modified EICAR sample,thats nothing wrong since it was never meant to be changed in the first palce.
     
  20. Stephanos G.

    Stephanos G. Registered Member

    Joined:
    Mar 29, 2005
    Posts:
    720
    Location:
    Cyprus
    :eek: :eek: :eek: so Marcos was right that The only regular eicar files for testing are available at http://www.eicar.org/anti_virus_test_file.htm

    I havent tried the test Putin. Just tell me the reason why the other AV cant do this that Dr Web does.
     
  21. RejZoR

    RejZoR Registered Member

    Joined:
    May 31, 2004
    Posts:
    6,426
    Quote taken from official EICAR webpage:

    Yes,it's importnat how EICAR code looks,but many antiviruses pick it even if it's modified. Although it should be only detected under specific rules (read above).
     
  22. Benvan45

    Benvan45 Registered Member

    Joined:
    Jul 27, 2004
    Posts:
    556
    The Eicar Mailtest is found on this site: http://www.security-ops.tk/ mentioned at the bottom of your own profile, so why are you questioning this now? Bit weird to me.......it's even supported by AVAST!!!!!

    Putin
     
  23. Benvan45

    Benvan45 Registered Member

    Joined:
    Jul 27, 2004
    Posts:
    556
    That's why I think Dr. Web is a great program, as it just detects all the eicars except two and most other AV's don't.
    Another AV which scores very well with this test is: AVG 7.0.
    It gives me peace of mind and I just wonder why the other AV's don't handle the files the same way.......that's all I wonder about. But everybody here is fighting this statement as I probably step on a lot of long toes.

    The only 'great' scanner in the world according to this forum is Nod32.......and this makes me irritated. Just run this test and see what NOD32 does with these files and tell me why it doesn't do better, that's all.

    Greetings,

    Putin
     
  24. IBK

    IBK AV Expert

    Joined:
    Dec 22, 2003
    Posts:
    1,819
    Location:
    Innsbruck (Austria)
    Btw, Eicar is not a virus ;)
     
  25. Detox

    Detox Retired Moderator

    Joined:
    Feb 9, 2002
    Posts:
    8,507
    Location:
    Texas, USA
    I hafta admit I purchased my AV to detect virii.
     
Thread Status:
Not open for further replies.