Select local site

| Japanese | Simplified Chinese | Traditional Chinese (Hong Kong) | Traditional Chinese (Taiwan)

F-Secure Clean - Not Malware Information Pages: EICAR

[Summary] | [Detailed Description]

Name : EICAR
Alias:MPFppc01, Eicar_test_file_not_a_virus!, Eicar Test File, EICAR-Test-File, EICAR_Test_file, MPFpalm01, EICAR.COM, MPFsymbian01
Type:Other
Category:Clean - Not Malware
Platform:W32
Radar

Summary
The correct operation of F-Secure Anti-Virus products can be tested with a special test file.

This is a dummy file which is detected exactly as if it were a virus. This file is known as the EICAR Standard Anti-Virus Test file. The EICAR test file is also detected by several other antivirus products in a similar manner.
Back to the Top

Detailed Description
To create an EICAR test file, use any text editor to create a file with the following single line in it:

  • X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

Save the file with any name using a COM extension; for example, EICAR.COM. Make sure you save the file in standard MS-DOS ASCII format. Now you can use this file to demonstrate what occurs when a virus is detected.

Naturally, the file is not a virus. When executed, EICAR.COM will display the text "EICAR-STANDARD-ANTIVIRUS-TEST-FILE!" and exit.

EICAR is the European Institute of Computer Anti-virus Research, reachable at http://www.eicar.org.
Back to the Top



F-Secure Corporation

Last Modified: January 01, 2006