Cort, Tom wrote: > Hello, > > clamav comes with a sample virus (ClamAV-Test-File) for testing > purposes. It's located in the clamav source tarball in the 'test' > directory and named 'clam.exe'. I'd like to distribute it with a free > software program I maintain, but I can't find the corresponding source > code. Can someone point me to the source code for 'clam.exe'?
I've not looked into it because I have no Windows/DOS (the very thought of that gives me happy feet) to test it on, but what I understand from reading is the EICAR string is a complete DOS .com executable file. Remember those? The .exe version is a self-extracting archive made from the .com file. Test it by copying the EICAR string to a file named eicar.com. It should execute in a Windows cmd session and will only print a line of text saying it's printing part of the EICAR test string. Then archive the com file into a self-extracting archive which should produce a file with a .exe extension. You now have two executables that have the EICAR "virus" sample in them. Testing both files with ClamAV should return a report that the EICAR string was found in the com and exe files. dp _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
