[jurjenh]

You need to enter the following in the test file

  X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

ie ignore the "EICAR Test code" bit.

Anyone familiar with disassembly want to give a quick breakdown of what the code does? Never mind, wikipedia has a handy link to exactly that:

http://thestarman.pcministry.com/asm/eicar/eicarcom.html http://archive.cert.uni-stuttgart.de/bugtraq/2003/06/msg0025...