I just tried it, this is the content of the eicar.com file: Ye–Ye–Ye–Ye–Ye–Ye–Ye–Ye–Ye–Ye–Ye–Ye–Ye–Ye–Ye–Ye–Ye–Ye–Ye–Ye–Ye–Ye–H* Obviously not the eicar string...
----- Original Message Follows ----- From: Noel Jones <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Re: [Clamav-users] www.testvirus.org Test #17 Date: Fri, 27 Feb 2004 14:45:28 -0600 > > At 02:20 PM 2/27/04, Everton da Silva Marques wrote: > >Hi, > > > >Can anyone provide hints on how to make > >clamd to catch test #17 [1] from > >www.testvirus.org? > > > >I'm running 0.67-1 with ScanMail enabled. > > > >Thanks, > >Everton > > > >[1] http://www.testvirus.org/ > >Test #17: Outlook 'Space Gap' vulnerability > >(includes Eicar virus as hidden attachment) > > Unless that test has changed recently, the "Space Gap" test does not > contain the eicar string. It contains a base64 encoded attachment named > "eicar.com" but it's not the eicar code, nor is it executable code of any > type. This specific test mail will only be blocked by a mail filter that > blocks based on attachment name, or a mime normalizer that flags it due to > unusual mime formatting. > > > -- > Noel Jones > > > > ------------------------------------------------------- > SF.Net is sponsored by: Speed Start Your Linux Apps Now. > Build and deploy apps & Web services for Linux with > a free DVD software kit from IBM. Click Now! > http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click > _______________________________________________ > Clamav-users mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/clamav-users ==================== Kevin W. Gagel Network Administrator (250) 561-5848 local 448 (250) 562-2131 local 448 -------------------------------------------------------------- The College of New Caledonia, Visit us at http://www.cnc.bc.ca Virus scanning is done on all incoming and outgoing email. -------------------------------------------------------------- ------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id56&alloc_id438&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
