WelcomeProductsViruses & RisksSupportDownloadsStore
Home & Home Office
Symantec.com > Home & Home Office > Support > Knowledge Base


How to use the EICAR test string to test Norton AntiVirus

STEP 1
  Print this page

 
We suggest that you print this document before you start. PRINT
Expand each section by clicking the "+" before you actually print.

STEP 2
  Download or create EICAR file

 You can either download the file from the EICAR Web site or you can create the file.

I want to download the EICAR file
1
Right-click the Norton AntiVirus Auto-Protect icon in the system tray.
2
Click Disable or Disable Auto-Protect.
3
Click OK. (Only for Norton Antivirus 2004 or higher version)
4
Click on the button to download EICAR file. DOWNLOAD
5
Scroll to the bottom of the web page.
6
Double-click the eicar.com file.
7
Save the file to the Desktop.
I want to create a EICAR file
1
Right-click the Norton AntiVirus Auto-Protect icon in the system tray.
2
Click Disable or Disable Auto-Protect.
3
Click OK. (Only for Norton Antivirus 2004 or higher version)
4
Open a text editor such as Notepad.
Do not use a word processor, such as Microsoft Word or WordPad, to create the file. Word processors add extra header information to the file, which will cause it to not be detected.
5
Copy the following text into your text editor.
 X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
6
In Notepad, click File > Exit.
7
At the next prompt, save the file to the desktop with following file name:
 eicar.txt
8
Exit Notepad.
STEP 3
  Test Auto-Protect or the manual virus scan
 
I want to test Auto-Protect
1
Right-click the Norton AntiVirus Auto-Protect icon in the System Tray.
2
Click Enable or Enable Auto-Protect.
3
On the Windows desktop, start to move the eicar file.
4
Do the following depending on whether Auto-Protect detects the file:
 
  • If the file is detected, You will see a virus alert. This indicates that the eicar test string has been detected by Auto-Protect. Click OK to close the alert.
  • If the file is not detected, you will see a message in a DOS window that includes: "EICAR-STANDARD-ANTIVIRUS-TEST-FILE!"
I want to test Manual Virus Scanner
1
Right-click the Norton AntiVirus Auto-Protect icon in the system tray.
2
Click Disable or Disable Auto-Protect.
3
Click Ok. (Only for Norton Antivirus 2004 or higher version)
4
On the Windows desktop, right-click the eicar file > Select Scan with Norton AntiVirus.
5
Do the following depending on the results of the scan:
 
  • If the file is successfully detected, when the scan is finished, you will see the scan summary indicating that one threat was detected. To see details, click More Details. At the next screen, you will see eicar listed in the results pane.
  • If the file is not detected, you will see a message in a DOS window that includes: "EICAR-STANDARD-ANTIVIRUS-TEST-FILE!"
6
Right-click the Norton AntiVirus Auto-Protect icon in the System Tray.
7
Click Enable or Enable Auto-Protect.


References:
Additional Information

Go to the EICAR Web site for more information on the eicar test string.

 

Available Translations:


RATE THIS SOLUTION
Was this solution helpful to you?
Yes
No
If any information was unclear, or the information you were seeking was not provided, please let us know. Your feedback will help us improve this service.

NOTE: Comments entered here will NOT recieve a personal email response.


Document ID: 19975295056
Last Modified: 10/18/2006
Date Created: 05/02/1997
Product(s): Norton AntiVirus 2003, Norton AntiVirus 2003 Professional Edition, Norton AntiVirus 2004, Norton AntiVirus 2004 Professional, Norton AntiVirus 2005, Norton AntiVirus 2005 3 User License


Site Index · Legal Notices · Privacy Policy · · Contact Us · Global Sites · License Agreements
©1995 - 2009 Symantec Corporation