Include the EICAR virus string inside another more malicious virus and
hope the virus scanner identifies it as EICAR.
And then what?
grantm on 2003-11-10T07:16:20
Surely the point of the
EICAR test virus is that anti-virus software treats it exactly the same as a real virus - ie: auto-delete or least quarantine. So any malicious code you'd added wouldn't get a chance to run.
virus in 60 bytes?
ask on 2003-11-11T00:23:32
(Unless your point is that maybe some anti virus software is too dumb anyway
....)
I thought the eicar thing was only allowed to be 128bytes long
... And I don't think it's allowed to contain anything else than the eicar string and whitespace.
- ask
