EICAR Test File


Open Notepad & paste the following content there : –
X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

Now save the file with .com extentsion. Try double clicking it. EICAR test file will print “EICAR-STANDARD-ANTIVIRUS-TEST-FILE!”

What makes this file special? Well most Antivirus (AV) software will detect this file as a virus! Why?? Because the code written in this file is a Machine Code instruction. Also, the code is self-modiying or mutating one! This spectacular behavior is the reason most AntiVirus software stop it’s execution & only the text is printed!

But the best thing is that this file doesn’t do anything harmful as all the code is in ASCII human-readable characters & it only prints the the text “EICAR-STANDARD-ANTIVIRUS-TEST-FILE!”.

PS – This file is used to test the functionality of AntiVirus software in a safe manner. Rather than testing AntiVirus with real virus, AV Software companies test their product with EICAR test file. 🙂

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s