Malware

Should I remove “EICAR-Test-File”?

Malware Removal

The EICAR-Test-File is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What EICAR-Test-File virus can do?

  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine EICAR-Test-File?


File Info:

crc32: BD6A3974
md5: a23e6c5a509362fb9e4a534a3d9b140f
name: fsa_dropper2.exe
sha1: 8401e1238216d28f5b174b2622fbd067f3f6a27b
sha256: 63cb332f5208018938a73cb0ec8393f6fa4ccf2b4f70c95e774259c303de4994
sha512: c134911fe092cc0ffbc9be7d4b681a513078a323c3580a4d372941db9d887e01a0c0b65feaf173c8271fdc118c764579a7c444649de5a41427fdd024ce8c3bfa
ssdeep: 768:S3FyRH1sw8D7EBGozRN9lzFc5G0iwOoWIPfvZj/sDdYasJBS8s:S3Fyp8EBpznLYGFwfdPfvZj/sDdYhts
type: PE32 executable (console) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

EICAR-Test-File also known as:

MicroWorld-eScanTrojan.Eicartest.N
FireEyeGeneric.mg.a23e6c5a509362fb
CAT-QuickHealTrojan.Agent
ALYacTrojan.Eicartest.N
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderTrojan.Eicartest.N
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.a50936
F-ProtW32/Eicartest.A
SymantecSMG.Heur!gen
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Trojan.Eicartest-1
GDataTrojan.Eicartest.N
KasperskyEICAR-Test-File
NANO-AntivirusTrojan.Win32.Chgt.duflwj
ViRobotTrojan.Win32.Agent.48329
RisingTrojan.Agentb!8.F8 (RDMK:cmRtazoYQrWNvcgkQOzh/gYqzC2d)
Ad-AwareTrojan.Eicartest.N
EmsisoftTrojan.Eicartest.N (B)
DrWebTrojan.KeyLogger.37761
ZillyaTrojan.GenericKD.Win32.192615
McAfee-GW-EditionGenericRXFP-CR!83C91320B3EC
MaxSecureTrojan.Malware.1729305.susgen
Trapminemalicious.high.ml.score
IkarusTrojan.Win32.Swrort
CyrenW32/Eicartest.ATXA-1793
JiangminTrojan.Agentb.dmc
WebrootW32.Trojan.Eicartest
MAXmalware (ai score=87)
Antiy-AVLTrojan/Win32.Tgenic
Endgamemalicious (high confidence)
ArcabitTrojan.Eicartest.N
ZoneAlarmEICAR-Test-File
MicrosoftTrojan:Win32/Wacatac.C!ml
AhnLab-V3Trojan/Win32.Agent.C523728
McAfeeGenericRXFP-CR!83C91320B3EC
VBA32Trojan.Agentb
ZonerTrojan.Win32.44973
TencentMalware.Win32.Gencirc.10ba89c2
YandexTrojan.KeyLogger!gGxCJr07pqk
FortinetW32/Crypt.ULPM!tr
BitDefenderThetaGen:NN.ZexaF.34122.cmIfa05T!Ke
AVGWin32:Malware-gen
Qihoo-360HEUR/QVM11.1.7700.Malware.Gen

How to remove EICAR-Test-File?

EICAR-Test-File removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment