---- Original Message ---- > From Jason Lieurance <[EMAIL PROTECTED]> > Date: Tuesday, 17 Jun 2003, 21:54 > > How do you get a more descriptive log instead of just the summary? I ran a > scan and summary said 5 infected files but I don't know which or with what > virus. Also, is Eicar-test-signature ok or is it a virus? Thanks.
The EICAR test signature matches a DOS .com executable that when ran simply displays the message 'EICAR-STANDARD-ANTIVIRUS-TEST-FILE' and then exits - so it's totally harmless. Most anti-virus software recognises this as if it were a real virus, allowing end uses to test that their scanner is functioning correctly without any risk of infecting their computer with anything. Also, the executable is made up entirely of ASCII characters, enabling you to type it in via vim/notepad/pico so that even if youre virus scanner wouldn't let you download it you can simply type it in and check that it finds it when scanner, that (if you're running Windows and have a suitable anti-virus program installed) it won't let you execute it, etc. You can create a copy of the test file be just creating a file called 'eicar.com' (or similar) containing the text: [EMAIL PROTECTED](P^)7CC)7}$EICAR-ST ANDARD-ANTIVIRUS-TEST-FILE!$H+H* [without the line break, I put that in so that this email shouldn't trigger scanners :) ] -- Stephen White <[EMAIL PROTECTED]> --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
