--- Nigel Horne <[EMAIL PROTECTED]> wrote:
> On Saturday 18 Sep 2004 13:24, Sandeep Agarwal
> wrote:
> > hello list,
> >
> > I have recently installed ClamAV on my Linux box,
> it
> > is working fine, but when i tested my mail server
> > against virus attach (http://www.testvirus.org/),
> it
> > successfully blocked 21 out 25 different ways of
> > sending virus which indeed is a good result, but
> was
> > unable to block test number 20,23,24 and 25,
>
> 24 and 25 contain no virus so there is nothing to
> detect.
> You haven't said what version of clamAV you're
> using, but it's probably
> 0.75.1, you should find that the latest development
> version catches 20 and 23.
>
> > Sandeep
>
sorry for not mentioning the verison, yes i am using
0.75.1, will test for the undetected virus with the
latest development.
24 and 25 contains no virus but the mail i received
for these virus says:
For test #24
Test #24 (non-virus): Test for the "Partial
(Fragmented) Vulnerability". <B>This does not include
the Eicar virus</B>, however your mail server should
still block this since a virus can use this technique
to break itself into multiple emails, bypassing virus
scanners, and reassembling itself in your inbox.
(attachment can be opened by virtually any mail
program)
For test #25
Test #25 (non-virus): Attachment with a CLSID
extension which may hide the real file extension.
<B>This does not include the Eicar virus</B>, however
your mail server should still block this since the
CLSID technique can be used to hide the true extension
of a malicious file. (attachment can be opened by any
Windows computer)
thanks
Sandeep
__________________________________
Do you Yahoo!?
Yahoo! Mail - Helps protect you from nasty viruses.
http://promotions.yahoo.com/new_mail
-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
