Virus Creation !!!! : Test your antivirus software!!!

[bimba]

.......WARNING........

This publication explains you to create a harmless test file which virus detectors are programmed to treat as a virus. If you receive alerts from your anti-virus software, do not be alarmed. Read on, to discover what is happening.

Creating A Test Virus:
Have you ever wondered if your anti-virus software is really working? Would you like to see what happens when it detects a virus? Here's a safe way to test your computer's virus protection that doesn't require you to have a real virus.

First, open Notepad. Then copy and paste into it the text on the line below. (It should all be on one line.)

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

Then select File, Save, select All Files for the file type, then save the file as eicar.com.

Your anti-virus software may prevent you from saving the file as eicar.com, which is a sign that it is working effectively. If it doesn't raise an alert, try scanning the folder where you saved eicar.com. To see what happens if you try to run a file containing a virus, double-click eicar.com to open it.

Explanation:
The file eicar.com you have created is completely safe. It is not a virus. It is a standard test file developed by the European Institute for Computer Anti-virus Research (EICAR). All anti-virus products are programmed to detect this file as if it was a real virus. Therefore you can safely use it to test whether your anti-virus software works, without fear of infecting your computer.

Conclusion:
If your anti-virus product should fail to prevent you from running the file, it will simply display the text "EICAR-STANDARD-ANTIVIRUS-TEST-FILE" in a DOS box. No harm will have been done, but you should probably consider using a better anti-virus product, because if it had been a real virus, your computer would by now be infected!

eNjoy!!

[marcode]

nice post... interesting

wasnt aware of the existance of a standard test file...

[chubblies]

Fuckin useless symantec

[weejabba]

AVG didnt show anything?? but then it didnt show anything in the dos box either just blank

[gunner]

Nod32 or Avast did not pick this up...

[DJAd]

Fuck all here

[beerman]

Nothing here either. I use Sophos which actually ships with eicar.com if you by the enterprise edition. It picks up the eicar.com it shipped with but not this one.

[syscon]

Fully updated Nod32 did not pick anything up, is this a wind up?

[Mule]

My AVG picked it up

EDIT: I got my code from wikipedia, the above code is missing a \

Here is the correct code:

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

File attached, just needs renaming to .com

[marcode]

Scanned disks, folders and files: D:\Downloads\eicar.com
Number of scanned files: 1
Number of threats found: 0

:/

[Shambles]

Eicar have been making versions of this file content available since around 1997


http://www.eicar.org/anti_virus_test_file.htm

[marcode]

http://www.eicar.org/download/eicar.com

that worked.. NOD went apeshit when i tried to dl it.

[chubblies]

Scan type: Realtime Protection Scan
Event: Virus Found!
Virus name: EICAR Test String
Action taken: Quarantine succeeded : Access denied
Date found: 05 January 2007 20:08:37

Same here woop!

[b!lly]

ZA picked this up when i tryed to download it.

[Shambles]

I'm just wondering what this has to do with PC Hardware myself

[marcode]

moved.

[Tradeas1]

Avast warned me and fully deleted successfully

Cheers and an intersting post.

[blacksheep]

nod popped up as soon as I tried to save the text file and quarantined it

[Soulassassin]

Worked for me on nod aswell, altho i saved the file 'eicar.com' and NOT 'eicar.com.'

[syscon]

My AVG picked it up

EDIT: I got my code from wikipedia, the above code is missing a \

Here is the correct code:

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

File attached, just needs renaming to .com

Nod32 picked this up as soon as I clicked on it, just created eicar.txt and insert revised string and nod32 picked it up as soon as I tried to save it.