Comments on: EICARgen http://blog.didierstevens.com (blog 'DidierStevens) Mon, 15 Mar 2010 17:38:44 +0000 http://wordpress.com/ hourly 1 By: Quickpost: New EICARgen Version « Didier Stevens http://blog.didierstevens.com/programs/eicargen/#comment-36727 Quickpost: New EICARgen Version « Didier Stevens Fri, 04 Dec 2009 14:59:25 +0000 http://didierstevens.wordpress.com/programs/eicargen/#comment-36727 [...] Filed under: My Software, Quickpost — Didier Stevens @ 14:58 I never expected to release a new version of EICARgen, but I’m forced to: EICARgen.exe generates just too many false [...] [...] Filed under: My Software, Quickpost — Didier Stevens @ 14:58 I never expected to release a new version of EICARgen, but I’m forced to: EICARgen.exe generates just too many false [...]

]]> By: Didier Stevens http://blog.didierstevens.com/programs/eicargen/#comment-35974 Didier Stevens Thu, 22 Oct 2009 15:39:16 +0000 http://didierstevens.wordpress.com/programs/eicargen/#comment-35974 Interesting, thanks for the heads-up. Interesting, thanks for the heads-up.

]]> By: Jan http://blog.didierstevens.com/programs/eicargen/#comment-35973 Jan Thu, 22 Oct 2009 13:25:11 +0000 http://didierstevens.wordpress.com/programs/eicargen/#comment-35973 Microsoft Security Essentials found the "Trojan:Win32/Meredrop" in EICARgen.exe when extacting the zip-file. Even before I could test the EICAR Anti-Virus test file, at least MSE is doing it's job. Microsoft Security Essentials found the “Trojan:Win32/Meredrop” in EICARgen.exe when extacting the zip-file.
Even before I could test the EICAR Anti-Virus test file, at least MSE is doing it’s job.

]]> By: D0R http://blog.didierstevens.com/programs/eicargen/#comment-33671 D0R Thu, 06 Nov 2008 13:58:24 +0000 http://didierstevens.wordpress.com/programs/eicargen/#comment-33671 Probably AVAST recognized your program as a virus generator and classified it as malware. Now wait until Google ranks this very URL with the alert "This site may damage your computer". :) Probably AVAST recognized your program as a virus generator and classified it as malware.
Now wait until Google ranks this very URL with the alert “This site may damage your computer”. :)

]]> By: Didier Stevens http://blog.didierstevens.com/programs/eicargen/#comment-33514 Didier Stevens Thu, 25 Sep 2008 13:11:28 +0000 http://didierstevens.wordpress.com/programs/eicargen/#comment-33514 Great! Great!

]]> By: Andrew http://blog.didierstevens.com/programs/eicargen/#comment-33513 Andrew Thu, 25 Sep 2008 09:46:19 +0000 http://didierstevens.wordpress.com/programs/eicargen/#comment-33513 I filed a bug report with AVAST and they have updated their virus sig so it won't be detected as a virus. I used virustotal.com to check and it says it is not a virus anymore. See http://www.virustotal.com/analisis/79564320564a016f159f9adb8ea55847 for the report. I filed a bug report with AVAST and they have updated their virus sig so it won’t be detected as a virus. I used virustotal.com to check and it says it is not a virus anymore. See http://www.virustotal.com/analisis/79564320564a016f159f9adb8ea55847 for the report.

]]> By: Didier Stevens http://blog.didierstevens.com/programs/eicargen/#comment-33486 Didier Stevens Fri, 19 Sep 2008 12:59:41 +0000 http://didierstevens.wordpress.com/programs/eicargen/#comment-33486 Avast says: Win32:Trojan-gen {Other} That's strange... Avast says: Win32:Trojan-gen {Other}

That’s strange…

]]> By: Andrew http://blog.didierstevens.com/programs/eicargen/#comment-33471 Andrew Wed, 17 Sep 2008 19:29:01 +0000 http://didierstevens.wordpress.com/programs/eicargen/#comment-33471 Can you obfuscate the virus code in the software i.e. split the line into say 5 pieces in wrong order and only assemble on program execution. Avast says your eicargen file is a virus. Can you obfuscate the virus code in the software i.e. split the line into say 5 pieces in wrong order and only assemble on program execution. Avast says your eicargen file is a virus.

]]> By: Quickpost: eicar.pdf « Didier Stevens http://blog.didierstevens.com/programs/eicargen/#comment-32665 Quickpost: eicar.pdf « Didier Stevens Tue, 20 May 2008 08:54:23 +0000 http://didierstevens.wordpress.com/programs/eicargen/#comment-32665 [...] PDF, Quickpost — Didier Stevens @ 8:54 I like to embed the EICAR Anti-Virus test file in usual formats and less usual formats. Today, I’m publishing a PDF document with an embedded EICAR test file [...] [...] PDF, Quickpost — Didier Stevens @ 8:54 I like to embed the EICAR Anti-Virus test file in usual formats and less usual formats. Today, I’m publishing a PDF document with an embedded EICAR test file [...]

]]>