Threat Description

Symbian/EICAR-test

Details

Aliases:Symbian/EICAR-test, EICAR.COM, EICAR-Test-File, EICAR_Test_file, Eicar Test File
Category: Malware
Type:
Platform: W32

Summary



The correct operation of F-Secure anti-virus products can be tested with a special test file. This is a dummy file which is detected by exactly like if it were a virus. This file is known as EICAR Standard Anti-virus Test file, and it is also detected by several other anti-virus products in a similar manner.

To create the EICAR test file, use any text editor to create a file with the following single line in it:

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

save the file to any name with COM extension, for example EICAR.COM. Make sure you save the file in standard MS-DOS ASCII format. Now you can use this file to show what it looks like when a virus is detected.

Naturally, the file is not a virus. When executed, EICAR.COM will display the text 'EICAR-STANDARD-ANTIVIRUS-TEST-FILE!' and exit.

EICAR is the European Institute of Computer Anti-virus Research, reachable athttp://www.eicar.org



Removal


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.

More

You may wish to refer to the Support Community for further assistance. You also may also refer to General Removal Instructions for a general guide on alternative disinfection actions.



SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More