| WARNING : We did our best to produce a harmless software, AntiVirus Tester 2.0. This software is not intended to harm you, your PC, and your data anyway. However, if this or anything like this happens, we are not at all responsible for it. By downloading and using this software, you become responsible for all that it might do. |
|
EICAR Standard AV Test File : EICAR (European Institute of Computer AntiVirus Research) had released long long ago, an antivirus testing file. This test-file has string that tests only for boot and EXE-COM infector viruses. This doesn't test the antivirus for the new e-mail worms. However, if you like to download it, DOWNLOAD.
|
Read Must :
Please see your antivirus specific section at the end. We have added this in answer to some queries of our users. This might help you if AV Tester is not working on your antivirus product.
Description :
The AntiVirus Tester is designed to invoke your antivirus to come into action. Some less accurate antiviruses even warn you about it as being a new backdoor. It's funny and I assure you it's not.
AntiVirus Tester is a small utility to test your antivirus whether it is working fine or not. If your antivirus fails in test, it is a signal to you that your system is not protected in some way or other. Following figure show AntiVirus Tester at startup,
You have to click just Test button and wait for the result. If your antivirus passes the test, you should not forget to test it again on events such as,
1. You update virus database or entire antivirus files.
2. You think something is wrong with your antivirus.
3. You have just recovered from a virus infection.
4. You think something is wrong there.
We Tested it With :
- Norton AntiVirus 2001 for Windows Me/9x
- McAfee VirusScan for Windows9x version 4.x
- PC-cillin AntiVirus 2001
- AntiViral ToolKit Pro 3.0 from Kaspersky Labs
- AVG version 6.0
- F-Prot 3.0 for Windows 9x/Me
- Panda AntiVirus Platinum
Some antiviruses might detect AntiVirus Tester as a backdoor. See FAQS section.
Which Worms? :
- Basic Test : basic mailor worm with send codes removed.
- Enhanced Test : @mm worm with ILoveYou-like codes. Vital codes removed.
- Encrypted Test : @mm worm with encrypted codes. Vital codes removed.
AntiVirus Specific Section :
We have included this section due to increased queries from our users, about their antivirus-specific problems.
-
Norton AntiVirus 2001 : Norton AntiVirus (NAV) has the ability to detect all the worm codes in all sort of files. Some antiviruses cannot find e-mail worms in all files. For example, they cannot find a melissa infection in HTM files, etc. We tested NAV 2001/2000 with our AVT(AntiVirus Tester). Both of them detected and passed in all the three tests. The settings were :
- NAV Auto Protect was enabled. You can do this by right clicking on system-tray icon and then clicking on "Enable Auto-Protect"
- In NAV options for Auto-Protect, "Bloodhound Heuristics" was enabled and heuristic sensitivity level was at the highest position. Also in Auto-Protect options, "file type to scan" was set to "all files", "action" to "delete files automatically", and all other optins were checked.
This way NAV reported following worms -
1. Bloodhound.vbs.worm
2. Macro.src
3. Vbs.vbswg.gen
- McAfee VirusScan 4.x : McAfee can detect the general format of an e-mail worm, whether it is simple or enhanced. And this enables it to detect and check new worms (I neither support it, nor go against it). But this oversmartness sometimes produces errorneous results. We tested AV Tester with following settings -
- McAfee System Scan was enabled. You can do so, by right clicking on VirusScan system-tray icon and clicking on System Scan in the "Enable" section. If McAfee tells you that AV Tester is a new backdoor, then please disable first System Scan and then run AV Tester, then enable again System Scan.
- System Scan Properties -
1. Detection - Check all boxes with "All files" checked.
2. Action - Delete infected file automatically.
McAfee reported these worms -
1. New Worm
2. Assilem (Notice reverse is 'Melissa')
3. Pica.worm.gen
- PC-Cillin 2001 : This antivirus was unable to detect 'Simple' or 'Enhanced' worm tests. It only responded to 'Encrypted' worm test. This might be due to unavailability of 'Heuristic Scan' option in this antivirus. The settings can be done as,
-
In the 'Options' menu, select 'Real time Scan' and then select 'Scan Options'. Enable 'Real Time Scan' if disabled. In the 'Files to scan' select 'All Files'. In the 'Action when virus found' select 'Delete'.
It reported "VBS_KALAMAR" worm in the encrypted worm test.
-
F-Prot 3.0 : This antivirus is really fast. But it seems to be over-smart in detecting new trojans, worms and viruses. My friend's all PE files were detected as 'Trojans' by it, when 'all files' option was selected. The options are like,
-
Enable "Dumb" scan of all files.
- Enable Heuristics.
- Enable "Delete" in "Action" option.
F-Prot responded in all tests as "Could be a mass-mailing worm".
|
