anti_virus:eicar_test_file
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
anti_virus:eicar_test_file [2016/07/08 23:18] – peter | anti_virus:eicar_test_file [2020/07/15 09:30] (current) – external edit 127.0.0.1 | ||
---|---|---|---|
Line 5: | Line 5: | ||
The EICAR test file is recognized by the majority of anti-virus programs as a test virus. | The EICAR test file is recognized by the majority of anti-virus programs as a test virus. | ||
- | It consists entirely of printable ASCII characters, so that it can easily be created with a regular text editor. | + | * It consists entirely of printable ASCII characters, so that it can easily be created with a regular text editor. |
- | + | * Any anti-virus product that supports the EICAR test file should detect it in any file providing that the file starts with the following 68 characters, and is exactly 68 bytes long. | |
- | It is very useful for testing as doing so against a real virus could be extremely dangerous. | + | |
< | < | ||
Line 13: | Line 13: | ||
</ | </ | ||
- | The first 68 characters is the known string. | + | <WRAP info> |
+ | **NOTE:** | ||
- | ===== References ===== | + | The first 68 characters is the known string. |
- | * www.eicar.org | + | It may be optionally appended by any combination of whitespace characters with the total file length not exceeding 128 characters. |
+ | The only whitespace characters allowed are the space character, tab, LF, CR, CTRL-Z. | ||
+ | To keep things simple the file uses only upper case letters, digits and punctuation marks, and does not include spaces. | ||
+ | The only thing to watch out for when typing in the test file is that the third character is the capital letter " | ||
+ | </ | ||
+ | |||
+ | ---- | ||
+ | |||
+ | ===== References ===== | ||
+ | |||
+ | * www.eicar.org | ||
anti_virus/eicar_test_file.1468019903.txt.gz · Last modified: 2020/07/15 09:30 (external edit)