Follow

Test to confirm if Anti Virus Scans a Specific Directory

PROBLEM:

To confirm if Anti virus is scanning a specific directory the EICAR test virus can be applied to the directory. The EICAR test virus should be deleted/quarantined if the anti virus is actively scanning the directory. 

This is mostly used in cases where a specific directory is excluded on the anti virus exclusions list, and confirmation is necessary to confirm if indeed the anti virus is not scanning the excluded directory. 

 

SOLUTION:

The following string can be entered in a notepad file. The Notepad file can then be saved to test.exe or test.com Then this can be ran by double clicking on the file or running using command line. The Anti Virus will immediately delete the file if it is scanning the directory. 

eicar.png

 

This string can be copy and pasted by using the link below.

http://www.eicar.org/86-0-Intended-use.html

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request

0 Comments

Article is closed for comments.