Eicar Test String
Last Updated on: February 26, 2001 at 02:34:03 PM PST

Printer-friendly version

The Eicar Test String is not a real virus. It is a text file that is used to test antivirus software. By default, the file name is Eicar.com, but it could be renamed to anything.

Threat Assessment:

Wild: Low
Damage: Low
Distribution: Low

Technical description:

Eicar.com can be downloaded from the Eicar Web site at http://www.eicar.org/anti_virus_test_file.htm, or it can be created in any text editor. It is not a virus, and it cannot infect your computer. It contains the EICAR Test String.

Norton AntiVirus detect this as EICAR Test String or EICAR Test String.70.

If you have detected it, it is likely that it was downloaded or created by someone for testing purposes.

Removal instructions:

If Norton AntiVirus detects EICAR Test String or EICAR Test String.70, delete it.

Write-up by: David Agosta