Check your AV - WICAR.org - Test Your Anti-Malware Solution!

[Dave Russo]

Test Malware!

Each test will open up a new browser window at http://malware.wicar.org/. You may wish to try each test systematically. Ideally, all tests should be blocked by your anti-malware defences. If a blank...

www.wicar.org

Maybe this is old news but fun to check your Av,browser will probably warn,just proceed to check(there is a warning)gl

 

[Bot]

(link omitted) Maybe this is old news but fun to check your Av,browser will probably warn,just proceed to check(there is a warning)gl

Hi Dave — an oldie, but still useful as a quick sanity check. I would slightly amend “just proceed,” though: if the browser, DNS filter or security suite blocks malware.wicar.org, that is already a successful result. Bypassing the warning deliberately removes one of the layers being tested.

A few interpretation points:

• The EICAR item is a harmless standard test file, designed to trigger antivirus detection without containing malicious code (EICAR’s explanation).
• WICAR also hosts actual historical browser-exploit code, mostly for ancient versions of Internet Explorer, Java, Firefox and Flash (test list). Those tests are best kept to a disposable VM, particularly if the machine is old or unpatched.
• A URL warning may come from the browser’s reputation service, DNS filtering, an extension, network protection or the AV’s web shield. It does not necessarily show which component caught it.
• An obsolete exploit loading without an AV alert does not automatically mean the AV failed—the current browser or operating system may simply be immune.

For a cleaner modern check, the AMTSO Security Features Check separates phishing, drive-by download and other protection tests while using approved, non-malicious samples.

So: useful for confirming that a protection layer responds, but not an AV benchmark. Passing EICAR proves the product recognises EICAR; it does not award it a black belt in malware detection.

Sources

• WICAR.org - Test Your Anti-Malware Solution!
• Download Anti Malware Testfile
• AMTSO Security Features Check Tools

 

[Digmor Crusher]

I clicked on them all, all were blocked by my browser, Brave.

 

[Victor M]

Same here. Blocked by Brave.

 

[Parkinsond]

Blocked by SS of Edge and by MD.

 

[Marko :)]

No point in testing. Everything is blocked by Google Safe Browsing, which means everything will be blocked in all web browsers using it.

 

[ErzCrz]

Blocked by Google Safe Browsing as @Marko :) said. In Edge, interestingly, these got blocked by my DNS Quad9 first instead of Smartscreen.

Spoiler: DNS Block

 

[Shadowra]

Blocked by AdGuard and Malwarebytes

Spoiler: Blocked

 

[nickstar1]

all blocked by browser guard.

 

[TairikuOkami]

Firewall blocked it before DNS even had a chance to intervene.

 

[k1esa]

ESET blocked everything... The links seem to be very old, since the examples show Kaspersky 2014...

 

[TuxTalk]

Omg so old and outdated this website

 

[Pat MacKnife]

Most blocked by Bitdefender Websage and some by browser.

 

[Parkinsond]

Even Comodo can block.

 

[nickstar1]

Even Comodo can block.

Now that’s how you know it’s older than grandma’s underwear.

 

[Berny]

 

[piquiteco]

Blocked by McAfee.

Spoiler: Blocked by McAfee WebAdvisor