On Mon, Nov 08, 2004 at 08:30:18AM -0500, Jason Frisvold wrote:
[Test #17 (Eicar virus hidden using the "CR Vulnerability") from ]
[www.testvirus.org                                               ]
>I'm not running qmail-scanner, I'm running simscan.  Either way, the email
>that comes in doesn't appear to have this vulnerability in it..  At least,
>the email source that I receive in my inbox doesn't have the eicar string in
>it (that I've been able to detect) and hand-scanning via clamscan results in
>a clean email...

Interesting; I've just tested the email www.testvirus.org sends out for
test #17 and I've found that ClamAV detects the Eicar virus via both the
home-grown utility I've written (postfix content filter, deals with MIME et al
to give ClamAV the individual files) and if I use clamscan on the email text
which appears in my inbox.

I'm using ClamAV 0.80 for this.

-- 
    Simon the stressed        http://www.bpfh.net/           [EMAIL PROTECTED]
                 Chocolate is *not* a substitute for sleep
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Reply via email to