Tuesday, May 6, 2008

How do I Test My VirusScan Installation?

After installing VirusScan, you may logically wonder, how do I know if it's working? The
Test Antivirus
answer is a test virus.

The EICAR Standard AntiVirus Test File is a combined effort by anti-virus vendors throughout the world to implement one standard by which customers can verify their anti-virus installations.

  • Solution
To test your installation, copy the following line into its own file, then save the file with the name EICAR.COM. More detailed instructions are found below.

The file size will be 68 or 70 bytes.

If VirusScan is running and configured correctly, when you try to save the file, VirusScan will detect the virus. If VirusScan is not running, start it and scan the directory that contains EICAR.COM. When your software scans this file, it will report finding the EICAR test file.

Note that this file is NOT A VIRUS. Delete the file when you have finished testing your installation to avoid alarming unsuspecting users.

  • Creating Eicar virus testing files:
1. Click on Start.
2. Select Run.
3. In the Open box type: notepad
4. Maximize the window.
5. Highlight the following on the following line of text:

6. Right click on the highlighted text and choose 'copy'.
7. Switch back to Notepad.
8. Right click anywhere inside of Notepad and select 'paste'.
9. Click the File menu and select 'save as'.
10. Change the 'Save as Type' to 'all files'.
11. Name the file eicar.com.


Anonymous said...

I saved the EICAR.COM file through notepad in C:\. It doesnot show in Windows explorer. Then I saved in My Documents again it is not shown. I changed the file view to show system files even it is not available.

Please guide me.


TN - houkwing said...

K first of all pause your Antivirus software and check I think this is happen because you're anti virus software deleting the EICAR.COM file right instant you save it into hard driver. In other word your anti virus system working properly. Upgrade your anti virus every day that is the most important thing you should follow. :)

Post a Comment