Hi,
Can anyone provide hints on how to make clamd to catch test #17 [1] from www.testvirus.org?
I'm running 0.67-1 with ScanMail enabled.
Thanks, Everton
[1] http://www.testvirus.org/ Test #17: Outlook 'Space Gap' vulnerability (includes Eicar virus as hidden attachment)
Unless that test has changed recently, the "Space Gap" test does not contain the eicar string. It contains a base64 encoded attachment named "eicar.com" but it's not the eicar code, nor is it executable code of any type.
This specific test mail will only be blocked by a mail filter that blocks based on attachment name, or a mime normalizer that flags it due to unusual mime formatting.
--
Noel Jones
------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
