eicar test file

Asked by john

The Eicar test file comes up in the AVG 7.5.47 as a virus. How can I remove this file as it will be detected every time I run a scan? My operating system is Ubuntu 7.04.

Question information

Language:
English Edit question
Status:
Solved
For:
Ubuntu Edit question
Assignee:
No assignee Edit question
Solved by:
Simos Xenitellis 
Solved:
Last query:
Last reply:
Revision history for this message
Flavius (fcopaciu-deactivatedaccount) said :
#1

From http://www.eicar.org/anti_virus_test_file.htm

How to delete the test file from your PC

We understand (from the many emails we receive) that it might be difficult for you to delete the test file from your PC. After all, your scanner believes it is a virus infected file and does not allow you to access it anymore. At this point we must refer to our standard answer concerning support for the test file. We are sorry to tell you that EICAR cannot and will not provide AV scanner specific support. The best source to get such information from is the vendor of the tool which you purchased.

Please contact the support people of your vendor. They have the required expertise to help you in the usage of the tool. Needless to say that you should have read the user's manual first before contacting them.

Best regards,
Flavius

Revision history for this message
john (jaytee1937) said :
#2

Thank you, Flavius, for your response. I have not, to my knowledge, ever requested or purchased the test file. It simply was picked up by AVG when I used it to scan the computer. Previously I could not get clamav to work properly or to update. However, interestingly, the test file appears in the 'clamav-getfiles' folder. I I am in a quandary still.

Revision history for this message
Best Simos Xenitellis  (simosx) said :
#3

Clamav is a standard antivirus for Linux, and it apparently comes with the EICAR test file for testing purposes.
This is cool actually, because when you install an antivirus is it good to test it out. Especially as part of training of new users.

I believe you can safely erase the file, or you can choose to uninstall clamav.

Revision history for this message
john (jaytee1937) said :
#4

Thanks for this response. It clears up the matter. I will leave the file in place. I have to do that as I do not have 'ownership of the file: it is 'root.'