flag as inappropriate
Turns out, it not only ignores EICAR test files, but also ignores real malware if you include the EICAR signature! …I'll explain later.