Threat Description

Symbian/EICAR-test

Details

Aliases: Symbian/EICAR-test, EICAR.COM, EICAR-Test-File, EICAR_Test_file, Eicar Test File
Category: Malware
Type:
Platform: W32

Summary



The correct operation of F-Secure anti-virus products can be tested with a special test file. This is a dummy file which is detected by exactly like if it were a virus. This file is known as EICAR Standard Anti-virus Test file, and it is also detected by several other anti-virus products in a similar manner.

To create the EICAR test file, use any text editor to create a file with the following single line in it:

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

save the file to any name with COM extension, for example EICAR.COM. Make sure you save the file in standard MS-DOS ASCII format. Now you can use this file to show what it looks like when a virus is detected.

Naturally, the file is not a virus. When executed, EICAR.COM will display the text 'EICAR-STANDARD-ANTIVIRUS-TEST-FILE!' and exit.

EICAR is the European Institute of Computer Anti-virus Research, reachable at http://www.eicar.org



Removal



Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.



SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More