From: David H. Lipman on
From: "Stephen Wolstenholme" <steve(a)tropheus.demon.co.uk>


| X5O!P%@AP[4PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
| and its ZIPs are the only guaranteed safe ones I use. The others are
| not guaranteed to be safe. The real test is a self replicator that I
| discovered by accident when compiling a nested *.exe

OK. EICAR is not really a test of efficacy. Only tests that a given AV is working.


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


From: FromTheRafters on
I'm surprised that you would use such a simplistic approach to make such
a sweeping statement. A mediocre AV would appear to be the cream of the
crop...

....so...I guess *that* explains it.

"Stephen Wolstenholme" <steve(a)tropheus.demon.co.uk> wrote in message
news:bigut5dcbghrfev38jtjo8cf04b2g2fl1i(a)4ax.com...
> On Mon, 03 May 2010 13:28:24 DST, stop.nospam.gbbsg(a)shaw.ca (gufus)
> wrote:
>
>>Hi David,
>>
>>Sunday May 02 2010, David H. Lipman writes to All:
>>
>> >> From: "Stephen Wolstenholme" <steve(a)tropheus.demon.co.uk>
>> >> "...better than every other anti-virus application..."
>>
>> > Based upon what criteria ?
>>
>>I guess didn't have any hu. I always find 'millage varies".
>
> I missed that until you quoted.
>
> The criteria I use for all the anti-virus applications I have are the
> same. First I make sure it finds some test viruses. Then I check using
> a *.com self replicator and self modifier. Then I check the update and
> scan times and resources used.
>
> Steve
>
> --
> Neural Planner Software Ltd www.NPSL1.com
> EasyNN-plus. Neural Networks plus. www.easynn.com
> SwingNN. Forecast with Neural Networks. www.swingnn.com
> JustNN. Just Neural Networks. www.justnn.com


From: FromTheRafters on
:oD

....it's worse than I thought.

"Stephen Wolstenholme" <steve(a)tropheus.demon.co.uk> wrote in message
news:49jut5ls8u1v9ua774m129o9mddjo1in4c(a)4ax.com...
> On Mon, 3 May 2010 18:08:36 -0400, "David H. Lipman"
> <DLipman~nospam~@Verizon.Net> wrote:
>
>>From: "Stephen Wolstenholme" <steve(a)tropheus.demon.co.uk>
>>
>>| On Mon, 03 May 2010 13:28:24 DST, stop.nospam.gbbsg(a)shaw.ca (gufus)
>>| wrote:
>>
>>>>Hi David,
>>
>>>>Sunday May 02 2010, David H. Lipman writes to All:
>>
>>>> >> From: "Stephen Wolstenholme" <steve(a)tropheus.demon.co.uk>
>>>> >> "...better than every other anti-virus application..."
>>
>>>> > Based upon what criteria ?
>>
>>>>I guess didn't have any hu. I always find 'millage varies".
>>
>>| I missed that until you quoted.
>>
>>| The criteria I use for all the anti-virus applications I have are
>>the
>>| same. First I make sure it finds some test viruses. Then I check
>>using
>>| a *.com self replicator and self modifier. Then I check the update
>>and
>>| scan times and resources used.
>>
>>Name them, the test viruses.
>
> X5O!P%@AP[4PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
> and its ZIPs are the only guaranteed safe ones I use. The others are
> not guaranteed to be safe. The real test is a self replicator that I
> discovered by accident when compiling a nested *.exe
>
> Steve
>


From: FromTheRafters on
Avira detects it as TR/Crypt.Morphine.Gen but only after a I initiated
the scan manually.

Windows Defender caught it out when I saved it to the desktop as
TR/Crypt.Morphine.Gen

ClamWin has it as Trojan.Hacdef-29 (on demand only scanner)

"gufus" <stop.nospam.gbbsg(a)shaw.ca> wrote in message
news:Q8IDn.343634$K81.320849(a)newsfe18.iad...
> Hello, Stephen!
>
> You wrote on Mon, 03 May 2010 22:45:37 +0100:
>
> SW>
> SW> The criteria I use for all the anti-virus applications I have are
> the
>
> That is if /YOUR/ AV lets you DL..
>
> When accessing data from the URL,
> "http://members.shaw.ca/kevin.klement/TEST.RAR"
> a virus or unwanted program 'BDC/Hacdef.084' [backdoor] was found.
> Action taken: Blocked file
>
> --
> With best regards, gufus. E-mail: stop.nospam.gbbsg(a)shaw.ca
>


From: gufus on
Hello, FromTheRafters!

You wrote on Mon, 3 May 2010 20:15:59 -0400:


F> Windows Defender caught it out when I saved it to the desktop as
F> TR/Crypt.Morphine.Gen
F>
F> ClamWin has it as Trojan.Hacdef-29 (on demand only scanner)

MS Defender got it here too.

never/the/less /ALL/ those files are off-line now.

Happy testing.


--
With best regards, gufus. E-mail: stop.nospam.gbbsg(a)shaw.ca


First  |  Prev  |  Next  |  Last
Pages: 1 2 3 4 5 6 7 8
Prev: Kasperksy, Gmail & Forte Agent
Next: AV for Macintosh?