FRISK Software International

3.1 Testing F-PROT Antivirus with Eicar

The correct operation of F-PROT Antivirus can be tested with a special test file. This is a dummy file which is detected by F-PROT Antivirus exactly like if it were a virus.

This file is known as EICAR Standard Anti-virus Test file, and it is also detected by several other anti-virus products in a similar manner. EICAR is the European Institute of Computer Anti-virus Research.

Naturally, the file is not a virus.

When executed, EICAR.COM will display the text:

'EICAR-STANDARD-ANTIVIRUS-TEST-FILE'

and exit.

We do not include the EICAR test file with the package to avoid alarming anyone running F-PROT Antivirus (or any other scanner), but to create the EICAR test file, use any text editor to create a file with the following single line in it:

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

Save the file to any name with COM extension, for example EICAR.COM. Make sure you save the file in standard MS-DOS ASCII format. The file should be 68 bytes long, but might be 70 bytes if the editor puts a CR/LF at the end. Now you can use this file to test what happens when F-PROT Antivirus encounters a "real" virus.

You should receive a similar screen output as this one when testing F-PROT Antivirus with the EICAR test file:

< Previous | Back to Index | Next >
 
F-PROT Antivirus
- for Windows
- for UNIX
- for Exchange
F-PROT AVES
F-PROT Antivirus
- for Windows
- for UNIX
- for Exchange
F-PROT AVES
Stay up to date with important developments via e-mail.
Stay up to date with life cycle policies for F-PROT Antivirus for Windows.
Definitions of common antivirus terminology.