Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Testing e-mail antivirus protection

0 views
Skip to first unread message

ICU

unread,
Nov 16, 2009, 6:20:45 PM11/16/09
to
Is there anyway you can test whether your antivirus program is really
checking your incoming e-mail properly.
I know there is a string by Eicar that will test the installed antivirus
program in general but I'm wondering about the incoming e-mail portion of
AVG 9 Free.

TIA

ICU

David H. Lipman

unread,
Nov 16, 2009, 7:09:52 PM11/16/09
to
From: "ICU" <I...@nowhere.com>

| TIA

| ICU

Email the EICAR test file to yourself :-)

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


FromTheRafters

unread,
Nov 17, 2009, 7:43:26 AM11/17/09
to
"ICU" <I...@nowhere.com> wrote in message
news:Xns9CC5BA...@74.209.131.10...

> Is there anyway you can test whether your antivirus program is really
> checking your incoming e-mail properly.

Properly? No, not really. Unless you have a data set of malware that you
can throw (e-mail) at it.

> I know there is a string by Eicar that will test the installed
> antivirus

> program in general...

It is a non-viral malware file designed to allow users to see what would
happen if a real virus were detected. It doesn't actually test much of
anything except whether or not your AV is turned on and inspecting data
within its purview.

> but I'm wondering about the incoming e-mail portion of
> AVG 9 Free.

IIRC, at the eicar.com website they offer a number of services such as
e-mailing you a file, a zipped file, a double-zipped file...

BTW, e-mail scanning is not usually necessary or recommended (aside from
recommendations by the AV's marketing department).

Maximus the Mad

unread,
Nov 17, 2009, 7:50:05 AM11/17/09
to

Avira AntiVir Personal - FREE Antivirus http://www.free-av.com/
(The free version won't scan your emails.)

Unless you are using Microsoft Outlook or Lotus Notes (MAPI or VIM),
scanning email is worthless.

Why You Don't Need Your Anti-Virus Program to Scan Your E-Mail
http://thundercloud.net/infoave/tutorials/email-scanning/index.htm

Ensure your e-mail program is configured to display e-mail messages in
'Plain Text' only.

Turn off un-needed Windows Services
http://www.jasonn.com/turning_off_unnecessary_services_on_windows_xp

Decrapify your PC (free)
http://pcdecrapifier.com/download
--
Max Wachtel
This message was created using SeaMonkey Portable
Virus Removal http://sites.google.com/site/keepingwindowsclean/home
Freeware http://sites.google.com/site/keepingwindowsclean/freeware

ICU

unread,
Nov 17, 2009, 11:00:59 AM11/17/09
to
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in
news:hdspk...@news3.newsguy.com:

> From: "ICU" <I...@nowhere.com>
>
>| Is there anyway you can test whether your antivirus program is really
>| checking your incoming e-mail properly.
>| I know there is a string by Eicar that will test the installed
>| antivirus program in general but I'm wondering about the incoming
>| e-mail portion of AVG 9 Free.
>
>| TIA
>
>| ICU
>
> Email the EICAR test file to yourself :-)
>

I tried that but my e-mail program (Eudora 7) wouldn't allow it.(G)
Thanks for the reply.

ICU

ICU

unread,
Nov 17, 2009, 11:01:55 AM11/17/09
to
"FromTheRafters" <err...@nomail.afraid.org> wrote in news:hdu5ph$r8v$1
@news.eternal-september.org:

Thanks for the reply and suggestions.

ICU

ICU

unread,
Nov 17, 2009, 11:03:21 AM11/17/09
to
Maximus the Mad <maxp...@hotmail.com> wrote in
news:4b029c3a$0$271$1472...@news.sunsite.dk:

> ICU wrote:
>> Is there anyway you can test whether your antivirus program is really
>> checking your incoming e-mail properly.
>> I know there is a string by Eicar that will test the installed
>> antivirus program in general but I'm wondering about the incoming
>> e-mail portion of AVG 9 Free.
>
> Avira AntiVir Personal - FREE Antivirus http://www.free-av.com/
> (The free version won't scan your emails.)
>
> Unless you are using Microsoft Outlook or Lotus Notes (MAPI or VIM),
> scanning email is worthless.
>
> Why You Don't Need Your Anti-Virus Program to Scan Your E-Mail
> http://thundercloud.net/infoave/tutorials/email-scanning/index.htm
>
> Ensure your e-mail program is configured to display e-mail messages in
> 'Plain Text' only.
>
> Turn off un-needed Windows Services
> http://www.jasonn.com/turning_off_unnecessary_services_on_windows_xp
>
> Decrapify your PC (free)
> http://pcdecrapifier.com/download

Thanks for the reply and the suggested urls, much appreciated.

ICU

FromTheRafters

unread,
Nov 17, 2009, 1:43:12 PM11/17/09
to
"ICU" <I...@nowhere.com> wrote in message
news:Xns9CC670...@74.209.131.10...

You could search the web for the kakworm script, and send that to
yourself.

The problem is that kakworm is real malware and may be stripped enroute
before you receive the e-mail.

Chances are very high that you (or anyone else) are not actually
vulnerable to kakworm, but I think you should make sure of this before
messing with any actual malware using the Scriptlet.Typelib (Eyedog)
vulnerability.

*Most* other e-mail vector malware come in on e-mail as an attachment -
Eudora 7 might just avoid that part of the vector as a matter of course.
The EICAR test file implementation *shouldn't* work if embedded within a
message body as a script entity - it wasn't designed for that (however,
I've noticed it has been extended somewhat from its original form).


0 new messages