Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

using AMTSO's anti-malware feature checks

The Anti-Malware Testing Standards Organization (AMTSO) provides a way to test antivirus programs. Well, it’’’’s actually a check of features and settings. Go tohttp://www.amtso.org/feature-settings-check.html (“Feature Settings Check for Desktop Solutions”), where there are 5 features to check:

1. Test if my protection against the manual download of malware (EICAR.COM) is enabled
2. Test if my protection against a drive-by download (EICAR.COM) is enabled
3. Test if my protection against the download of a Potentially Unwanted Application (PUA) is enabled
4. Test if protection against accessing a Phishing Page is enabled
5. Test if my cloud protection is enabled

I use Sophos Anti-Virus for Mac and have for several years, so I tried these out.

EDIT 2014-03-26 changed test #3 to #4): I had to set some preferences correctly but after doing so SAV passed tests 1, 2, 3, and 5. In my test SAV does not pass the anti-phishing web site test (#4).

I’’’’d appreciate it if other users of SAV would test their settings. I’’’’d rather find that that I made some mistake and that SAV protected against phishing web sites.

Thanks!

:1016485


This thread was automatically locked due to age.
Parents

  • Bob_Stromberg wrote:

    Thank you. I checked and my SAV was at version 8. Hm, how'd I miss that?


    Version 8 hasn't been automatically upgraded to 9 yet.  Version 8 is retiring in April 2014 so we'll then be upgrading users to 9 then.  Until that point it's optionally, though recommended, to upgrade your own installation.  See the thread below for more information.

    http://openforum.sophos.com/t5/Sophos-Anti-Virus-for-Mac-Home/Support-ending-for-SAV-for-Mac-version-8-in-April-2014/td-p/15331


    Bob_Stromberg wrote:

    for test 5...the download file cloudcar.exe is downloaded...with no notice by SAV.


    Detection can be a funny thing.  :smileyfrustrated: I tried the test over and over and managed, on one occasion, to experience SAV not detecting during test 5 the download.  Demo:

    Note:  I had clicked all the 'Restore Default' buttons prior to testing to discard any customizations I may of made previously.  Example:

    Maybe if you try the test multiple times with the default settings the behavior will alter slightly.

    :1016503
Reply

  • Bob_Stromberg wrote:

    Thank you. I checked and my SAV was at version 8. Hm, how'd I miss that?


    Version 8 hasn't been automatically upgraded to 9 yet.  Version 8 is retiring in April 2014 so we'll then be upgrading users to 9 then.  Until that point it's optionally, though recommended, to upgrade your own installation.  See the thread below for more information.

    http://openforum.sophos.com/t5/Sophos-Anti-Virus-for-Mac-Home/Support-ending-for-SAV-for-Mac-version-8-in-April-2014/td-p/15331


    Bob_Stromberg wrote:

    for test 5...the download file cloudcar.exe is downloaded...with no notice by SAV.


    Detection can be a funny thing.  :smileyfrustrated: I tried the test over and over and managed, on one occasion, to experience SAV not detecting during test 5 the download.  Demo:

    Note:  I had clicked all the 'Restore Default' buttons prior to testing to discard any customizations I may of made previously.  Example:

    Maybe if you try the test multiple times with the default settings the behavior will alter slightly.

    :1016503
Children
No Data