# Virus question

**URL:** <https://boards.straightdope.com/t/virus-question/55076>\
**Category:** Factual Questions\
**Created:** [February 19, 2001, 2:56pm UTC](https://boards.straightdope.com/t/virus-question/55076 "2001-02-19T14:56:05Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![BoBettie](https://avatars.discourse-cdn.com/v4/letter/b/4af34b/32.png) [@BoBettie](https://boards.straightdope.com/u/BoBettie)\
**Post date:** [February 19, 2001, 2:56pm UTC](https://boards.straightdope.com/t/virus-question/55076/1 "2001-02-19T14:56:05Z")

</div>

Hi all! This might sound odd, but I want to test out my new Norton Antivirus software, and see exactly what it does when you get an attachment in your e-mail that contains a virus. (I am a Network Admin, and I want to see what my endusers will see). How can I get someone (just one person is all I need) to forward me a virus containing e-mail? I’m not going to open the attachment or anything, I just want to see the alert and how it deals with getting an e-mail of this nature.

Anyone?

Zette

---

<div class="post-metadata">

**Author:** ![carnivorousplant](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/carnivorousplant/32/3563_2.png) [@carnivorousplant](https://boards.straightdope.com/u/carnivorousplant)\
**Post date:** [February 19, 2001, 3:05pm UTC](https://boards.straightdope.com/t/virus-question/55076/2 "2001-02-19T15:05:24Z")

</div>

There is a standard line of test code you can use. I think you can get it from the NOrton or McAfee site.

---

<div class="post-metadata">

**Author:** ![cls](https://avatars.discourse-cdn.com/v4/letter/c/e68b1a/32.png) [@cls](https://boards.straightdope.com/u/cls)\
**Post date:** [February 19, 2001, 3:13pm UTC](https://boards.straightdope.com/t/virus-question/55076/3 "2001-02-19T15:13:46Z")

</div>

It’s called the EICAR test file:

[http://www.google.com/search?q="eicar+test+file"](http://www.google.com/search?q=%22eicar+test+file%22)

---

<div class="post-metadata">

**Author:** ![dylan\_73](https://avatars.discourse-cdn.com/v4/letter/d/ecccb3/32.png) [@dylan\_73](https://boards.straightdope.com/u/dylan_73)\
**Post date:** [February 19, 2001, 3:31pm UTC](https://boards.straightdope.com/t/virus-question/55076/4 "2001-02-19T15:31:27Z")

</div>

Yeah, it’s actually just a line of text:

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H\*

Paste that into a text file, and save with an extension your virus checker will pick up (eg .com). The virus checker should react as though it was a virus.

---

<div class="post-metadata">

**Author:** ![BoBettie](https://avatars.discourse-cdn.com/v4/letter/b/4af34b/32.png) [@BoBettie](https://boards.straightdope.com/u/BoBettie)\
**Post date:** [February 19, 2001, 3:33pm UTC](https://boards.straightdope.com/t/virus-question/55076/5 "2001-02-19T15:33:44Z")

</div>

Thanks guys!  
I appreciate it.

Mods- question asked and answered. You can close if you want to unclutter GQ 🙂

Zette