Author Topic: AntiVirus Tester 3.0  (Read 5767 times)

0 Members and 1 Guest are viewing this topic.

Offline MWassef

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1315
AntiVirus Tester 3.0
« on: October 02, 2003, 08:55:48 PM »
Anyone familiar with AntiVirus Tester 3.0 from http://www.damselsoft.freeservers.com/ ? is it some kind of a virus simulator?
I tested it with eTrust AV ver.7 promo, Avast4 (4.1.268) HE and Nod32 ver.2 and the results did not make my very happy :

EICAR Standard Test:
- Nod32 detected it but failed to stop it from execution.
- Avast4 did not detect it .
- eTrust detected it and was able to stop it from execution.

Simple Worm Test:
- Nod32 detected it but failed to stop it from execution.
- Avast4 did not detect it .
- eTrust did not detected it .

Enhanced Worm Test:
- Nod32 detected it but failed to stop it from execution.
- Avast4 did not detect it.
- eTrust detected it and was able to stop it from execution.

Encrypted Standard test:
- Nod32 detected it but failt to stop it from execution.
- Avast4 did not detect it .
- eTrust detected it and was able to stop it from execution.

Note: eTrust used with Vet engine..
« Last Edit: October 02, 2003, 08:56:51 PM by minacross »
MW

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:AntiVirus Tester 3.0
« Reply #1 on: October 02, 2003, 09:53:49 PM »
If at first you don't succeed, then skydiving's not for you.

Offline MWassef

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1315
Re:AntiVirus Tester 3.0
« Reply #2 on: October 02, 2003, 10:31:09 PM »
OK, we have made some more testing of this "test-suite", and generally what it does is that it saves some files on the root of the C: drive.

- Eicar test puts classic eicar
- Simple Worm test puts an artificial simple VBScript, generally harmless (so I believe the behavior of avast is correct)
- Enhanced Worm test puts a more complicated VBScript, derived from the classic love-letter. Indeed, it is identified by avast as Love-Letter.

Hope this helps,
Vlk


Thanx for your reply Vlk, but I have some points to be clarified:
-Avast detects EICAR.com by default , why it fails detecting it when it is created using this tool ???
-Avast did not detect the files made by all tests (including Enhanced Worm Test that should be detected as Love-letter, strange right?  ???
« Last Edit: October 02, 2003, 10:33:47 PM by minacross »
MW

Offline MWassef

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1315
Re:AntiVirus Tester 3.0
« Reply #3 on: October 02, 2003, 11:01:04 PM »
When I restarted my computer and repeated the Enhanced worm test, Avast4 was able to detect/unable to stop the script file but I had to press ok as it has been alerting me continuously.
when I clicked the test button again, Avast was unable to detect the worm  ??? ???
And the same happens regarding EICAR.com..
« Last Edit: October 03, 2003, 01:34:17 AM by minacross »
MW

TC17

  • Guest
Re:AntiVirus Tester 3.0
« Reply #4 on: October 04, 2003, 05:04:22 AM »
Double click on the Avast icon in the system tray and set the protection level to "high" and it will then detect the eicar in that program.

Although it doesn't detect either of the worm tests.

I'm having a problem with Avast home edition right now in that it doesn't want to update to the latest virus definitions.

First it gave me an error when I tried to force an update for an out of date definition file, and  it then locked up.  Then I did a program update which worked, however when I rebooted Avast seems to have deleted itself.  

I then reinstalled the program again, but it thinks it has the latest virus definition file, yet it doesn't.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re:AntiVirus Tester 3.0
« Reply #5 on: October 04, 2003, 05:10:30 AM »
Again... this junk?? PLEASEE
http://www.avast.com/forum/index.php?board=2;action=display;threadid=778;

Hey minacross, you let Vlk nervous  ;D
I think Vlk is right! You´re trying to do a test that will give you wrong answers... Trust, avast!  ;D
The best things in life are free.

Offline MWassef

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1315
Re:AntiVirus Tester 3.0
« Reply #6 on: October 04, 2003, 10:07:30 AM »
Again... this junk?? PLEASEE
http://www.avast.com/forum/index.php?board=2;action=display;threadid=778;

Hey minacross, you let Vlk nervous  ;D
I think Vlk is right! You´re trying to do a test that will give you wrong answers... Trust, avast!  ;D

I ment no harm   ??? ???
just wondering ::) ::)
« Last Edit: October 04, 2003, 10:10:47 AM by minacross »
MW

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re:AntiVirus Tester 3.0
« Reply #7 on: October 04, 2003, 02:05:27 PM »
I ment no harm   ??? ???
just wondering ::) ::)

No, it´s ok, we´re just kidding...  8)
The best things in life are free.