Compromised AV

[MadBeaver]

I was helping my friend fix his computer when I found he had several virii on his system.
I found them using command on demand.
He has norton on his computer and it was set to update and scan daily, but norton never picked up any of the virii. :sick:

My question: Is there an easy way to tell if your AV software is comprmised other than scaning a known infected file.

[phishphreek]

My question: Is there an easy way to tell if your AV software is comprmised other than scaning a known infected file.

Yes. You can use the eicar test file (http://www.eicar.org/anti_virus_test_file.htm) , which is not a virus, but a test file for your virus scanner.
It should pick it up as a virus, but it really isn't.

Default installs should detect this.

Though, you will want to keep your av up2date.

[MadBeaver]

Thanks for the info and the link.
The test files where just what I was looking for.