The EICAR test file is designed for users and administrators who want to
check the proper operation of their anti-virus software without using actual
viruses. Since it is never a good idea to test with real viruses, anti-virus
researchers designed a completely harmless test file that most anti-virus
products detect as if it were a virus. The EICAR test file is completely
benign and contains no viral code.
The most common uses for the EICAR test file are:
- Confirms the anti-virus application is installed correctly
- Demonstrate what happens when a virus is found
- Check internal procedures and reactions when a virus is found
For users who would like to check the correct operation of their
F-Secure Anti-Virus products, they can download the EICAR test file from
the following links:
(Netscape Users: Right-click and select "Save Link As")
Or you may create the EICAR test by following the instructions below:
- Launch your text editor to create a file with the following single
line in it
(You may cut and paste the line below):
X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
- Save the file to any name with COM extension, for example EICAR.COM.
Make sure you save the file in standard MS-DOS ASCII format. Now you can
use this file to demonstrate what happens when a virus is found.
Naturally, the file is not a virus. When executed, EICAR.COM
will display the text 'EICAR-STANDARD-ANTIVIRUS-TEST-FILE!' and exit.
EICAR is the European Institute of Computer Anti-virus Research.
