What is EICAR test virus?
We use cookies to make your experience of our websites better. By using and further navigating this website you accept this. Detailed information about the use of cookies on this website is available by clicking on more information.
Accept and close

 

 

Safety 101: Questions and answers

 
 
 

What is EICAR test virus?

Back to "Questions and answers"
2018 Jun 13 ID: 459
 
 
 
 
EICAR is a 68-byte .com file detected as "EICAR-Test-File". This IS NOT a virus. The test file simply displays a text message and returns the control to the operating system. 

Some time ago certain developers of antivirus software started adding such test files to their packages. Antivirus software detects it as a virus although it is not a virus. Such test “viruses” are designed to satisfy the curiosity of users who do not have “live samples” of a virus, but want to see the reaction of antivirus software to a virus detection (how it informs the user, what actions it prompts and etc.).

Later antivirus software vendors came to an agreement about developing a uniform standard "virus simulator" which should consist of text messages only. The latter allows any user to create such a "virus" manually (for example, by copying it from the documentation). The resulting .com file looks like this:

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H* 

If you copy and paste this text or enter it by command "copy con test.com", and execute the resulting .com file, it will output the message EICAR-STANDARD-ANTIVIRUS-TEST-FILE! and return the control to the operating system. That's it. A lot of antivirus software will detect it as "EICAR-Test-File"

Download eicar.zip from the Kaspersky Lab server.
 
 
 
 
Was this information helpful?
Yes No
Thank you
 

 
 

Feedback on Technical Support Site

Please let us know what you think about the site design, improvements we could add and any errors we need to eliminate

Send My Website Feedback Send My Website Feedback

Thank you!

Thank you for submitting your feedback.
We will review your feedback shortly.

 

How can we improve this article?

We will not be able to contact you if you leave your email address or phone number. To contact technical support, please sign in to your Personal Account.

Submit Submit

Thank you for your feedback!

Your suggestions will help improve this article.

OK