How can we check if any antivirus is capable of detecting, removing and protecting from the malware? Can it be verified by checking the configuration of the antivirus or by just doing a live scan? If I need to show the evidence that any particular antivirus is working, how can it be done?
-
6What do you mean by "the malware"? Do you have any specific malware in mind? Most anti virus vendors have a database of known malware. You can find for example McAfee's database here.– Tom K.Feb 14, 2018 at 8:25
Add a comment
|
2 Answers
The EICAR test file is made just for this purpose. Every signature based malware scanner should detect this file. Everything else just depends on trust.
To check anti virus is capable to detect
Use EICAR test file
https://en.wikipedia.org/wiki/EICAR_test_file
you can download it from https://www.ikarussecurity.com/support/virus-info/test-viruses/
or
simply copy and paste the following string in text file and scan with antivirus
X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
check this post also for Malware database
Where to download thousands of virus samples for AV testing?
In order to detect latest virus and malware you need to update the Anti Virus database regularly
-
2
-
he just want to know whether his anti virus is capable of detecting and removing this what i do to check my AV– AyyanarFeb 14, 2018 at 10:11
-
1TBH that just proves that the EICAR file ist detected and gets deleted. this just proves that the Software is generally able to detect files and delete them - It does not prove that the software is able to delete malware that in any way tries to evade the deletion process (which imho is not proofable) Feb 14, 2018 at 14:04