wiki-rubber-ducky-usb/Payload---EICAR-AV-test.md

A simple test to place the EICAR AV test string in a file on the Desktop, which in theory should trigger the AV on the host. Useful if you're assessing a host with no other connectivity.

Original version by tautology.

```
DEFAULTDELAY 500
GUI r
STRING notepad.exe
ENTER
STRING X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
CTRL s
STRING %USERPROFILE%\desktop\eicar.com
ENTER
ALT F4
```
Created Payload - EICAR AV test (markdown) 2013-09-17 11:34:40 +02:00			`A simple test to place the EICAR AV test string in a file on the Desktop, which in theory should trigger the AV on the host. Useful if you're assessing a host with no other connectivity.`

			`Original version by tautology.`

			```
			`DEFAULTDELAY 500`
			`GUI r`
			`STRING notepad.exe`
			`ENTER`
			`STRING X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*`
"CTRL S" -> "CTRL s" 2014-07-30 13:36:21 +02:00			`CTRL s`
Created Payload - EICAR AV test (markdown) 2013-09-17 11:34:40 +02:00			`STRING %USERPROFILE%\desktop\eicar.com`
			`ENTER`
			`ALT F4`
			```