Copy this line and save the file with any name and .COM extension, for example
EICAR.COM. You can keep the EICAR.COM in a safe place and test periodically the
server protection.
EICAR online resources
You can visit the EICAR website at http://eicar.com/, read the documentation and
download the file from one of the locations on the web page
http://eicar.com/anti_virus_test_file.htm.
Infected email attachment
For testing the email protection efficiency, create an email with your favorite email
agent, attach the file EICAR.COM and send it to yourself through your email server.
You will shortly receive the email disinfected, the notification emails as postmaster
and, if configured, the emails addressed to sender and receiver stating about the virus
found.
If you have no Linux to work with, feel free to use any other Operating System and
email agent. Just follow the above steps: compose a new email, attach the EICAR file
and send it. It is preferable to send it to yourself, as you will see the result immediately.
Sending the email to another account
The $USER parameter is usedto send theemail to your current accounton local machine.
If you wish to send the test emails to another recipient or to some remote email server,
replace it with a real email address, but take care the emails will be classified as infected
and/or spam.
Using the mail program, available on many Linux distributions, sending the email can
be done in the following way. You can safely replace mail with mutt or nail, if your
mail does not support attachments.
$ echo "EICAR test file." | mail -s EICAR -a EICAR.COM $USER
Alternately, if your version of mail program does not support attachments, you can
use the next command, where the email body is just the content of EICAR.COM file
(since it is an ASCII file). BitDefender, scanning the entire email, will find it infected,
will disinfect it and will notify the postmaster and, eventually, the sender and the
receiver.
$ mail -s EICAR $USER < EICAR.COM
Here is what you will see. First, you will receive the email disinfected, containing a
note saying what virus has been found and what happened to it. If you look at the log
file, there will be a line about the event: arriving of the email and disinfection. And
finally, there are the notification emails sent to the server administrator and to the
sender, if the notifications have been enabled.
5
EVALUATOR'S GUIDE
BitDefender Mail Protection for Enterprises
