On Mon, Nov 08, 2004 at 08:30:18AM -0500, Jason Frisvold wrote: [Test #17 (Eicar virus hidden using the "CR Vulnerability") from ] [www.testvirus.org ] >I'm not running qmail-scanner, I'm running simscan. Either way, the email >that comes in doesn't appear to have this vulnerability in it.. At least, >the email source that I receive in my inbox doesn't have the eicar string in >it (that I've been able to detect) and hand-scanning via clamscan results in >a clean email...
Interesting; I've just tested the email www.testvirus.org sends out for test #17 and I've found that ClamAV detects the Eicar virus via both the home-grown utility I've written (postfix content filter, deals with MIME et al to give ClamAV the individual files) and if I use clamscan on the email text which appears in my inbox. I'm using ClamAV 0.80 for this. -- Simon the stressed http://www.bpfh.net/ [EMAIL PROTECTED] Chocolate is *not* a substitute for sleep _______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users