X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

[T. M. Tracy]

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

Lol, I don't know if anyone has ever seen this...but it's a virus test
string to see if your AV works. Neat. create a txt file and put that
string in it and see if your AV picks it up

--
"Too close for missles, I'm switching to guns."
-TopGun

[Fuzzy Logic]

It's not a text file. The file will have to be named .com, not .txt

http://www.eicar.org/anti_virus_test_file.htm

[Uwe]

The eicar "virus" has been around or a while. I thought it had to be named eicar.exe. Also nice to mail as an attachment to your friends. :D

--
___________
Uwe

[Fuzzy Logic]

It's a .com file, not an exe.

I'm a programmer. A .com is purely executable and non-relocatable. An
exe contains sections and is relocatable. If the first two characters
of the file are "MZ" it's an exe, if not, it's a com file.

Fuzzy

[T. M. Tracy]

Thanks for being a douche Fuzzy...why don't you TRY what I said before
saying I'm wrong. If you put it in a txt file, it will still be
detected by AV.

[Fuzzy Logic]

Uh, what? At least try to reply to the message where I corrected _you_.

Anyway, it is executable code, not a text file. Most AVs will catch
it, that doesn't mean all will.

Just because doing something wrong works most of the time doesn't make
you less wrong.

I've been working on computers for a long time. I've become quite
familiar with the EICAR test string, and I'm not terribly impressed
that you found something and then managed to get some of the details
wrong. 30 seconds on Google would have made you look like much less of
a dumbass.

Fuzzy

[T. M. Tracy]

That's funny,

From: http://en.wikipedia.org/wiki/Eicar_test_file
==
The Eicar test file is a file, developed by the EICAR organization,
that is used in testing anti-virus scanners for their integrity in
detecting viruses. The actual file is simply a text file of either 68
or 70 bytes that can be created using any text editing program (Such
as Notepad), although it can be saved and run as an executable MS-DOS
COM file.
==

Sounds to me that it is a text file that CAN be used as an .com file.
Hmm.. Interesting how google can make someone seem stupid.

Oh here...Lets look on the EICAR website:
==
Any anti-virus product that supports the text link button test file
should detect it in any file providing that the file starts with the
following 68 characters, and is exactly 68 bytes long:

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
==

>Anyway, it is executable code, not a text file. Most AVs will catch
>it, that doesn't mean all will.

Sounds to me that all of this is saying that if the AV will catch it
as an .com or executable file, then they would also detect it as a
.txt file.

In your own words, Fuzzy, the computer programmer know-it-all, 30

seconds on Google would have made you look like much less of
a dumbass.

[Fuzzy Logic]

I'm not getting into a pissing match with a 16-year-old. That is
beneath me. I shouldn't have engaged you in the first place. I will
simply reply to your points with relevant information and leave the
hyperbole out of it.

On 6/28/06, T. M. Tracy <tmt...@gmail.com> wrote:

> From: http://en.wikipedia.org/wiki/Eicar_test_file

Not relevant. Only the EICAR website is relevant.

> Oh here...Lets look on the EICAR website:
> ==
> Any anti-virus product that supports the text link button test file
> should detect it in any file providing that the file starts with the
> following 68 characters, and is exactly 68 bytes long:
>
> X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
> ==
>
> > Anyway, it is executable code, not a text file. Most AVs will catch
> > it, that doesn't mean all will.
> Sounds to me that all of this is saying that if the AV will catch it
> as an .com or executable file, then they would also detect it as a
> .txt file.

Unless it is configured otherwise. Some AVs specifically skip text
files since they should never be executable. HTML and zip are
otherwise.

Look at the bottom of page in question:
http://www.eicar.org/anti_virus_test_file.htm Note that all the
examples are .com or .zip with the .com embedded at some level. I'm
not disputing that most will catch it. My exact point in the FIRST
message was that it was not actually a text file, but an executable. I
overstated my point, but I still believe that it should be .com just
to make sure that all AVs will catch it.

This seems to be a pattern with you. If anyone dares disagree with
even a minor point, you go nuts and start with the "douchebag", etc
nonsense. This is a large part of why you are probably not taken
seriously.

Fuzzy

[T. M. Tracy]

yeah, that's fine. everything is beneath you. I forgot, you're the
all-knowing homo. I'll try to remember that next time you speak.
Sorry sir, it will never happen again.

[Jim Reeves]

Alright now. Pull back the claws. LOL

--
Jim Reeves

[Scott Villarosa]

Mine didn't catch it.

[Scott Villarosa]

Tyler wants Fuzzy bad. Just take him out on a date already, Fuzzy. Jokes.

-----Original Message-----
From: Gmail-...@googlegroups.com [mailto:Gmail-...@googlegroups.com]
On Behalf Of T. M. Tracy
Sent: Thursday, 29 June 2006 2:19 AM
To: Gmail-...@googlegroups.com
Subject: [Gmail-Lounge] Re:
X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

[Fuzzy Logic]

I was going to reply to his message with "Why yes, I am The
all-singing, all-dancing homo of the world", but I was suspicious that
no-one would get the reference.

Besides, I don't think my wife would approve.

Fuzzy