ECHO X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H* >EICAR.COM
(That's all one line).
The file EICAR.COM is not a Virus, but it should be reported as one by a properly installed Virus Detector. It should be removed after testing is completed.
NOTE: When I tried this with an elderly version of McAfee, it did not detect the file, but did report some non-critical errors that were probably unrelated and which it scrolled off the screen before I could read them.
NOTE: It appears that anti-virus programs did not adopt this convention. I have rarely seen EICAR files such as this one detected by anti-virus programs.
Return To Index Copyright 1994-2002 by Donald Kenney.