Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

fakevirus.exe


  • Please log in to reply
9 replies to this topic

#1 msrrahul

msrrahul

  • Members
  • 32 posts
  • OFFLINE
  •  
  • Local time:12:19 AM

Posted 26 December 2009 - 12:49 PM

"A Trick To Check Ur Antivirus Is Working Properly
Open notepad
Copy this code in the text file....

"X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*"

without quotes

then save it with the name fakevirus.exe"

it was a poll in this forum. i did the same as mentioned above. now i m unable to delete this file n i use kaspersky anti virus and it didnt detect this file fakevirus.exe. i also saved this file with a name anything diff from fakevirus.exe, but stil kaspersky dint detect it nor i m able to delete it...any solutions...i appreciate one giving me solution for this.

BC AdBot (Login to Remove)

 


#2 starcraftmaster

starcraftmaster

  • Members
  • 1,109 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:australia
  • Local time:07:19 PM

Posted 26 December 2009 - 09:35 PM

Its meant to be saved as .com/.bat.
I don't know but i don't think .exe will work.

Look:http://en.wikipedia.org/wiki/EICAR_test_file

As for removing it , what happens when you try to delete the file ? Malwarebytes' Anti-Malware and Hijackthis has a delete function that restarts the computer and deletes the file that cant be deleted.


Edit: You post it in Note pad with out the quotes.

Edited by starcraftmaster, 26 December 2009 - 09:39 PM.


#3 samuel3

samuel3

  • Members
  • 2,349 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:19 AM

Posted 27 December 2009 - 03:46 PM

Works with .exe and .bat with NOD32.

Deleted straight away.

Edited by samuel3, 27 December 2009 - 03:46 PM.


#4 starcraftmaster

starcraftmaster

  • Members
  • 1,109 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:australia
  • Local time:07:19 PM

Posted 27 December 2009 - 09:11 PM

Well then , your kaspersky on access anti virus may be on(once a file is made ,completed downloading and opened it will scan the file )
.
And did make sure you did it with out the quotes ?

#5 Union_Thug

Union_Thug

    Bleeps with the fishes...


  • Members
  • 2,355 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:is everything
  • Local time:04:19 AM

Posted 17 January 2010 - 01:47 PM

it was a poll in this forum. i did the same as mentioned above. now i m unable to delete this file n i use kaspersky anti virus and it didnt detect this file fakevirus.exe. i also saved this file with a name anything diff from fakevirus.exe, but stil kaspersky dint detect it nor i m able to delete it...any solutions...i appreciate one giving me solution for this.



Download & Install a nifty little program called "Everything" from here: http://www.voidtools.com/

Start the program & use the search featurento search for fakevirus.exe (or whatever you saved it as)--- Here's a screenshot of the result on my computer (I bookmarked this topic)

Posted Image

"everything" found it in my "favorites" folder
Posted Image
Highlight the result>>right click>>select delete from the drop-down menu &
Posted Image
POOF!! It's gone.
Posted Image
After you install this program, you will NEVER use the "search for files & folders" in winDOZE explorer again...Everything finds it INSTANTANEOUSLY!

Edited by Union_Thug, 18 January 2010 - 07:07 AM.


#6 gamemaster1494

gamemaster1494

  • Members
  • 99 posts
  • OFFLINE
  •  
  • Local time:02:19 AM

Posted 07 August 2010 - 10:49 PM

WOW! I saved it as a .txt and BitDefender picked it up as a virus! WOW

#7 Scorpionkingin

Scorpionkingin

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Mumbai, Maharashtra
  • Local time:01:49 PM

Posted 06 September 2010 - 12:52 AM

I have tasted this file with eScan antivirus and it working. my antivirus have deleted this file straight away.
With Best Regards,

Scorpion king.............!

#8 max7bg

max7bg

  • Banned
  • 317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:19 AM

Posted 02 October 2010 - 01:05 PM

It's working...i can't beleive...

#9 Yellowmongoose

Yellowmongoose

  • Members
  • 39 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:08:19 AM

Posted 08 November 2010 - 04:16 PM

:lol: Wow! Norton 2010 picked up and deleted it as soon as I clicked save. Even told me it was an EICAR test string. I'm loving these tests. I know they are only tests but it's cool to watch. Maybe that's just me...

#10 Blathnat

Blathnat

  • Members
  • 224 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Canada
  • Local time:04:19 AM

Posted 08 November 2010 - 04:59 PM

TrendMicro snapped it up as well, but I had to change it to .com.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users