EICAR

:"EICAR may refer also to the Ecole Internationale de Creation Audiovisuelle et de Réalisation, an international film school in Paris."

EICAR, the European Institute for Computer Antivirus Research, was founded in 1990 as an organization aiming to further antivirus research and improving development of antivirus software. Recently, EICAR has furthered its scope to include the research of malicious software (malware) other than computer viruses and extended work on other information security topics like content security, Wireless LAN security, RFID and information security awareness.

EICAR test file

EICAR is perhaps most notable for the EICAR test file, an innocent, executable string, designed to test the integrity of antivirus software. Its use can be more versatile than straightforward detection – for example, a file containing the Eicar test string can be compressed, and then the antivirus software can be run to see whether it can detect the test string in the compressed file.

Currently the Eicar test file comes in two forms, a text document (.txt) and also an MS-DOS Application (.com). The executable file is compressed within a zip folder, preventing such antivirus software detecting the test file directly, however this is dependent upon the integrity of the antivirus software being used. It is possible that the zip file could be indentified as containing a virus, or quite easily go unnoticed.

This is the string, to Eicar test, in form of a text document (.txt):

X5O!P%@AP [4PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

External links

* [http://www.eicar.org EICAR Home Page]
* [http://www.eicartest.com EICAR Mirror]
* [http://mirror.href.com/thestarman/asm/eicar/eicarcom.html An explanation of how the program works (with disassembly and commentary)]