See:
http://www.eicar.org/anti_virus_test_file.htm
Specifically:
"Any anti-virus product that supports the EICAR test file should
detect it in any file providing that the file starts with the
following 68 characters, and is exactly 68 bytes long"
Best Regards,
Joseph Benden
.--.
|o_o |
|:_/ |
// \ \
(| | )
/'\_ _/`\
\___)=(___/
http://www.ThrallingPenguin.com/
--------------------------------
We design, develop, and extend
software technologies for the
most demanding business
applications, as well as
offer VoIP Consulting
services.
On Dec 3, 2008, at 5:41 PM, Thomasz Blaszczyk wrote:
> 2) I've downloaded Eicar Test Anti-Virus File and crated 10bytes file.
> (See logs below) Then I've appended Eicar to this file. Why clamscan
> doesn't find a signature in this file?
_______________________________________________
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net
