[Shining White]

The file is a legitimate DOS program, and produces sensible results when run (it prints the message "EICAR-STANDARD-ANTIVIRUS-TEST-FILE!").

This test file has been provided to EICAR for distribution as the "EICAR Standard Anti-Virus Test File", and it satisfies all the criteria listed above. It is safe to pass around, because it is not a virus, and does not include any fragments of viral code. Most products react to it as if it were a virus (though they typically report it with an obvious name, such as "EICAR-AV-Test").


Open a Notepad and paste this

Code:

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

and save like anyname.com or like similar format

The File Should be detect asap when file save

Or Active the real time protection ,


Source : http://www.eicar.org/86-0-Intended-use.html

[3r3bus]

Was just curious, so I actually tried this.


nod32 deleted straight away.

[Shining White]

Was just curious, so I actually tried this.


nod32 deleted straight away.

i thought NOD32 not detecting this , so seems they upgrade their AV

[3r3bus]

Was just curious, so I actually tried this.


nod32 deleted straight away.

i thought NOD32 not detecting this , so seems they upgrade their AV

I don't see why NOD32 wouldn't detect this.
NOD32 is a really great AV, and I highly recommend it.

[H4R0015K]

every (mostly) AV detects this as a virus...
and nod32 detects this as a virus from long time....

[Shining White]

every (mostly) AV detects this as a virus...
and nod32 detects this as a virus from long time....

was Not detected , , now it is detecting

[H4R0015K]

bitdefender detect it as ECIAR(not a virus)

[Shining White]

bitdefender detect it as ECIAR(not a virus)

Code Provide from the ECIAR , thats why i guess

[HrDe]

this is works as batch file in front of AV, a lot time before i had also made a tutorial on this, this is really nice.

[Frooxius]

Just a note: It's not a DOS program, it's no program at all, it's just a short piece of text.

You cannot really post programs (which are binary files) as a text, as text uses only a subset of possible combinations of a byte and some other combinations do not represent any printable characters (and some combinations can actually result in more characters than bytes and vice versa), while binary files use all possible combinations of bytes, so showing them as a text would corrupt these bytes and the ones that would be shown as characters would be more or less gibberish, as DOS programs are basically machine code - numbers that are read directly by the processor, not text.

Basically the companies that make antiviruses decided to use this piece of text as a test to check if the anti-virus monitors the system appropriately and picks it up. It has no way of actually harming the computer, so it's safe to use for anyone, compared to having to use an actual virus and it's also relatively simple to use.