I found an article about "testing av" and i did tried to follow steps it said to test clamwin. I copied an example virus file to a text document. I turned off the desktop's AV, renamed the txt file as mytest.com. Scanned it w/ clamwin but unfortunately, clamwin did not detected the virus. I turned the desktop's AV on, and it quickly deleted the file. Why cant clamwin detect that EICAR test virus?
New: Kanri (Oct 9, '24), Platform 29.5.3 (Jun 27, '24)
1,100+ portable packages, 1.1 billion downloads
No Ads November!, Please donate today
Visit the Community page
Join our forums
Subscribe to our email newsletter
Subscribe with RSS
Follow us on Facebook
Follow us on LinkedIn
Follow us on Twitter
Follow us on Mastodon
Follow us on BlueSky
Well, it does, even when just having the EICAR test in a text file:
using WinXP+SP3, ClamWin Portable 0.96.5.
Did you update the Definitions Database? To my knowledge Clamwin (Portable or otherwise) comes without any definitions, and you need to tell it to update them or it won't detect ANYthing Ever.
~3D1T0R
I regulary update my clamwin. Im just curious w/ this one. I just found that certain "virus test file" on gohacking.com. Clamwin just says that it cant read the file. But i'll try it again. I forgot to test it after updating my virus def yesterday. But if it still fail, my i send that certain test virus somewhere?
-:O =
The original EICAR test is a virus that isn’t one.
It can even be copyied as readable text characters and put into a file, then renamed to something.com. Even if you try to actually execute the virus test, it will not harm your system but only output a harmless message (»EICAR-STANDARD-ANTIVIRUS-TEST-FILE!«).
Still, I don’t want to risk any harm to PA’s forum by posting the test text here, but you can find it (and different versions to download for testing) on EICAR’s web site.
ClamAV usually reports this test as »Eicar-Test-Signature«.