Testing e-mail antivirus protection

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View


Is there anyway you can test whether your antivirus program is really
checking your incoming e-mail properly.
I know there is a string by Eicar that will test the installed antivirus
program in general but I'm wondering about the incoming e-mail portion of
AVG 9 Free.

TIA

ICU

Re: Testing e-mail antivirus protection




| Is there anyway you can test whether your antivirus program is really
| checking your incoming e-mail properly.
| I know there is a string by Eicar that will test the installed antivirus
| program in general but I'm wondering about the incoming e-mail portion of
| AVG 9 Free.

| TIA

| ICU

Email the EICAR test file to yourself  :-)

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Testing e-mail antivirus protection




Quoted text here. Click to load it
I tried that but my e-mail program (Eudora 7) wouldn't allow it.(G)
Thanks for the reply.

ICU

Re: Testing e-mail antivirus protection



Quoted text here. Click to load it

You could search the web for the kakworm script, and send that to
yourself.

The problem is that kakworm is real malware and may be stripped enroute
before you receive the e-mail.

Chances are very high that you (or anyone else) are not actually
vulnerable to kakworm, but I think you should make sure of this before
messing with any actual malware using the Scriptlet.Typelib (Eyedog)
vulnerability.

*Most* other e-mail vector malware come in on e-mail as an attachment -
Eudora 7 might just avoid that part of the vector as a matter of course.
The EICAR test file implementation *shouldn't* work if embedded within a
message body as a script entity - it wasn't designed for that (however,
I've noticed it has been extended somewhat from its original form).



Re: Testing e-mail antivirus protection



Quoted text here. Click to load it

Properly? No, not really. Unless you have a data set of malware that you
can throw (e-mail) at it.

Quoted text here. Click to load it

It is a non-viral malware file designed to allow users to see what would
happen if a real virus were detected. It doesn't actually test much of
anything except whether or not your AV is turned on and inspecting data
within its purview.

Quoted text here. Click to load it

IIRC, at the eicar.com website they offer a number of services such as
e-mailing you a file, a zipped file, a double-zipped file...

BTW, e-mail scanning is not usually necessary or recommended (aside from
recommendations by the AV's marketing department).




Re: Testing e-mail antivirus protection



@news.eternal-september.org:

Quoted text here. Click to load it
you
would
from

Thanks for the reply and suggestions.

ICU

Re: Testing e-mail antivirus protection



ICU wrote:
Quoted text here. Click to load it

Avira AntiVir Personal - FREE Antivirus http://www.free-av.com /
(The free version won't scan your emails.)

Unless you are using Microsoft Outlook or Lotus Notes (MAPI or VIM),
scanning email is worthless.

Why You Don't Need Your Anti-Virus Program to Scan Your E-Mail
http://thundercloud.net/infoave/tutorials/email-scanning/index.htm

Ensure your e-mail program is configured to display e-mail messages in
'Plain Text' only.

Turn off un-needed Windows Services
http://www.jasonn.com/turning_off_unnecessary_services_on_windows_xp

Decrapify your PC (free)
http://pcdecrapifier.com/download
--
Max Wachtel
This message was created using SeaMonkey Portable
Virus Removal http://sites.google.com/site/keepingwindowsclean/home
Freeware http://sites.google.com/site/keepingwindowsclean/freeware

Re: Testing e-mail antivirus protection




Quoted text here. Click to load it

Thanks for the reply and the suggested urls, much appreciated.

ICU

Site Timeline