Testing Dr.Web for Linux Operation

The EICAR (European Institute for Computer Anti-Virus Research) Test helps testing performance of anti-virus programs that detect viruses using signatures. This test was designed specially so that users could test reaction of newly-installed anti-virus tools to detection of viruses without compromising security of their computers.

Although the EICAR test is not actually a virus, it is treated by the majority of anti-viruses as if it were a virus. On detection of this "virus", Dr.Web anti-virus products report the following: EICAR Test File (Not a Virus!). Other anti-virus tools alert users in a similar way. The EICAR test file is a 68-byte COM-file for MS DOS/MS Windows OS that outputs the following line on the console when executed:

EICAR-STANDARD-ANTIVIRUS-TEST-FILE!

The EICAR test contains the following character string only:

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

To create your own test file with the "virus", you may create a new file with the line mentioned above.

If Dr.Web for Linux operates correctly, the EICAR test file is detected during a file system scan regardless of the scan type and the user is notified on the detected threat: EICAR Test File (Not a Virus!).