Some time ago certain developers of antivirus software have started adding test files to their packages. Antivirus software detects it as a virus although it is not a virus. Such test “viruses” are designed to satisfy the curiosity of users who do not have “live samples” of a virus, but want to see the reaction of antivirus software to appearance of a virus (how it informs the user, what actions prompts, etc.).
Later antivirus software vendors came to an agreement about developing a uniform standard "virus simulator" which should consist of text messages only. The latter allows any user to create such a "virus" manually (for example, by copying it from the documentation). The resulting .com file looks like this:
If you copy&paste this text or enter it by command "copy con test.com", and execute the resulting .com file, it will output the messagešEICAR-STANDARD-ANTIVIRUS-TEST-FILE! and return the control to the operating system. That's it. A lot of antivirus software will detect it asš"EICAR-Test-File".
You can download a ready test file eicar.com from a Kaspersky Lab server here: eicar.zip
Courtesy : Kaspersky.com
No comments:
Post a Comment