Author Topic: Virus Software Test  (Read 332 times)

Offline NHawk

  • Silver Member
  • ****
  • Posts: 1787
Virus Software Test
« on: February 18, 2009, 04:25:58 PM »
I don't know if anyone has ever seen this before, but this will test your anti-virus software to see if it is working properly.

Open Notepad and paste the string below into it...

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

Save the file with the name test.com

If your anti-virus software is working correctly it should alert you immediately about the presence of the EICAR virus and either remove it automatically or prompt you what to do with it. If need be, have the software remove the file.

If you are not alerted to its presence, or if you can successfully save the file without being alerted of its presence, it's time to look for new anti-virus software.

NOTE: THIS IS NOT an actual virus. It is a test sequence of characters that imitates a virus.
Most of the people you meet in life are like slinkies. Pretty much useless, but still bring a smile to your face when you push them down the stairs.
-------------------------------
Sometimes I think I have alzheimers. But then I forget about it and it's not a problem anymore.

Offline Getback

  • Platinum Member
  • ******
  • Posts: 6364
Re: Virus Software Test
« Reply #1 on: February 18, 2009, 04:37:43 PM »
I don't know if anyone has ever seen this before, but this will test your anti-virus software to see if it is working properly.

Open Notepad and paste the string below into it...

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

Save the file with the name test.com

If your anti-virus software is working correctly it should alert you immediately about the presence of the EICAR virus and either remove it automatically or prompt you what to do with it. If need be, have the software remove the file.

If you are not alerted to its presence, or if you can successfully save the file without being alerted of its presence, it's time to look for new anti-virus software.

NOTE: THIS IS NOT an actual virus. It is a test sequence of characters that imitates a virus.

I will await Llama's opinion.

  Created by MyFitnessPal.com - Free Calorie Counter

Offline NHawk

  • Silver Member
  • ****
  • Posts: 1787
Most of the people you meet in life are like slinkies. Pretty much useless, but still bring a smile to your face when you push them down the stairs.
-------------------------------
Sometimes I think I have alzheimers. But then I forget about it and it's not a problem anymore.

Offline Getback

  • Platinum Member
  • ******
  • Posts: 6364
Re: Virus Software Test
« Reply #3 on: February 18, 2009, 05:10:23 PM »
ah rgr. I'm very cautious type of fellow.

  Created by MyFitnessPal.com - Free Calorie Counter

Offline Skuzzy

  • Support Member
  • Administrator
  • *****
  • Posts: 31462
      • HiTech Creations Home Page
Re: Virus Software Test
« Reply #4 on: February 18, 2009, 05:13:22 PM »
It's called forcing a false-trigger.  Our game does it all the time.  :)
Roy "Skuzzy" Neese
support@hitechcreations.com

Offline 1701E

  • Silver Member
  • ****
  • Posts: 1889
      • VBF-18 Bearcats
Re: Virus Software Test
« Reply #5 on: February 18, 2009, 05:53:51 PM »
With Command and Conquer (game) and WMP open it took my AVG about 01:13 (mm:ss) to detect it. :)
ID: Xcelsior
R.I.P. Fallen Friends & Family

"The only ones who should kill are those prepared to be killed"

Offline llama

  • Silver Member
  • ****
  • Posts: 819
      • http://www.warrenernst.com/
Re: Virus Software Test
« Reply #6 on: February 18, 2009, 06:04:27 PM »
I will await Llama's opinion.

Wow. Someone's actually waiting for my opinion! It was bound to happen sooner or later. ;-)

OK, The Eicar Test String (developed by the European Institute for Computer Antivirus Researchas, hence the name) is basically something that all antivirus programs detect as a virus by a "gentlemen's agreement." This string really isn't dangerous in any way, but it is always included as one of the viruses in a virus definition file for testing purposes. Theoretically, it is the only "false positive" an AV utility should detect, since it really isn't harmful but it is flagged as if it is.

For example, if you are concerned that something has "knocked out" your antivirus program, you could try to save a file with The Eicar Test String and see if your AV software flags it as a virus. If it doesn't do anything, you should suspect something is wrong with your AV software's background scanner. If you manually scan it and it doesn't create an alarm, you should suspect something is wrong with the foreground scanner.

If you don't feel like finding and messing around with real viruses, it is a perfectly fine way to test for minimum AV functionality.

But again, it isn't dangerous, any more than pointing your finger at someone and saying "Bang!" is dangerous.

For the record, I never use The Eicar Test String to test anti-malware products. In fact, I don't even bother creating a file with it, since I have tens of thousands of real viruses I can test with that I can use to generate some detection statistics of my own.

-Llama

Interesting server at 69.12.181.171