There’s a very simple anti-virus testing tool I’ve programmed years ago, and I just realize I’ve never
published it. So here goes.
EICARgen is just a program that creates the EICAR Anti-Virus test file.
The EICAR Anti-Virus test file is 68 bytes long, and it will cause all Anti-Virus software to trigger a virus alert. Of course, this EICAR file is not a virus, it’s just an industry-standard test file. The EICAR file is only detected by Anti-Virus software that supports the EICAR file, but I’m not aware of any that doesn’t.
The EICAR Anti-Virus test file is great to test your Anti-Virus software, but it’s not easy to handle, because your Anti-Virus software keeps deleting it ;-)
Being a developer, I came up with my own solution to this problem: I wrote a program that would just create the EICAR Anti-Virus test file when I need it.
My program itself is not detected by Anti-Virus software, because
- Anti-Virus software that fully complies with EICAR does only trigger an alert for a 68 bytes long EICAR Anti-Virus test file, not for larger files containing the 68 bytes EICAR sequence
- my program does not contain an exact copy of the EICAR sequence
EICARgen is a Windows console application. Start it without arguments, and it will create eicar.com in the working directory and then exit.
Start it with a filename as argument, and it will create the EICAR test file with the name you specified.
Compiled with Borland’s free C++ 5.5 compiler.