The Eicar Test String is not a real virus. It is a text file that is used to test antivirus software. By default, the file name is Eicar.com, but it could be renamed to any other name.
Type: Zoo (http://securityresponse.symantec.com/avcenter/refa.html#zoo) Virus (http://securityresponse.symantec.com/avcenter/refa.html#virus)Infection Length (http://securityresponse.symantec.com/avcenter/refa.html#length): 68 bytes
http://securityresponse.symantec.com/avcenter/graphics/ssrc/writeups/section_title_technical.gif
Eicar.com:
Can be downloaded from the Eicar Web site at <A href="http://www.eicar.org/anti_virus_test_file.htm">http://www.eicar.org/anti_virus_test_file.htm
Can also be created in any text editor
Is not a virus
Cannot infect your computer
Contains the EICAR Test String
Symantec antivirus products detect this as EICAR Test String.
If Eicar.com was detected on your computer, an individual most likely downloaded or created it for testing purposes.
http://securityresponse.symantec.com/avcenter/graphics/ssrc/writeups/section_title_removal.gif
As mentioned previously, this is a test file and is not malicious. To remove it, simply delete it using Internet Explorer, or do the following:
Start your Symantec antivirus program.
Run a full system scan.
If any files are detected as infected with Eicar Test String, click Delete.