                              EICAR Test File

This  TEST.TXT file  is  helpful in        (TEST.TXT)    
testing  the   performance   of the       -
antivirus     programs    detecting     ,  -
viruses with their signatures  (for         (, - 
example,    Doctor Web,   DSAVmail,       Doctor Web,  DSAVmail,
Spider anti-virus programs).           Spider  .).

For this purpose, most of the anti-        -
virus    designers    at    present            
generally make use of the  standard           
TEST.COM program.                       TEST.COM.    
The TEST.COM program is _specially_    __   , -
designed  such   that   the   user,      ,       
without  endangering  his  machine,      ,    ,
may verify  how  a  newly-installed          
anti-virus tool will alert the user         -
on detecting a virus.  The TEST.COM     .  TEST.COM  -
program,   in  reality,  is  not  a        ,   -
virus,  but it is recognized by the           
majority  of  anti-virus  utilities      (   Doctor Web,  
(even Doctor Web)  as if  it  is  a    )    .    
virus.  Furthermore,  on  detecting    Doctor Web   "" -
this "virus", Doctor Web reports        :

                      EICAR Test File (Not a Virus!)

Other  anti-virus  utilities   also           -
alert along somewhat similar lines.       .     :
(The  acronym  EICAR   stands   for    EICAR - European Institute for Computer
European   Institute  for  Computer    Anti-Virus Research.
Anti-Virus Research).
                                         TEST.COM   
The TEST.COM program  is  a 68-byte    68- COM-,  -
COM-file,  which on executed prints      -   -
on the screen                          :

                    EICAR-STANDARD-ANTIVIRUS-TEST-FILE!

and  then  returns control to  DOS.           
The  TEST.COM  file  contains  only    DOS.  TEST.COM   
printable   characters    and   the          
corresponding text string reads  as        :
follows:

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

In  the  file   you  are  presently         (TEST.TXT)
reading now  (i.e.,  TEST.TXT),  if         
you  retain only the above line and          
delete all other  text  matter  and       TEST.COM,   -
rename  the  file  thus  edited  to      ,  
TEST.COM,  you  obtain  a  program,       "".
which   is  the  "virus"  described
above.                                 

  Information Service Department                
       DialogueScience,Inc.                       ""

                    E-mail: Antivir@DialogNauka.ru
                       http://www.DialogNauka.ru
