On 2010-06-10 17:20, DAVID BERTHIAU wrote: > > > On 2010-06-09 12:41, Török Edwin wrote: >> On 06/09/2010 03:12 PM, DAVID BERTHIAU wrote: >> > Hello, >> > >> > I have installed clamav with squidclam for a proxy (0.96 with package > and 0.96.1 with sources) but when I test it with eicar files > > Ø >> > (found on http://techlabs.bluecoat.com/ ) the eicar.lha, eicar.lzh >> >> Support for external unarchivers was dropped 2 years ago. >> Clamscan doesn't support lha/lzh. >> >> >, eicar.pgp and >> >> I don't see this file on that site. What is it? >> If it is a pgp encrypted file, ClamAV can't guess the passphrase... >> > > Sorry, for the pgp file, it was not on the same site but it was the file > eicar.com.pgp on this site http://securite-informatique.info/virus/eicar/
None of the AVs detect that (and none should, it is an encrypted file): http://www.virustotal.com/analisis/21c94279acf534fe49c32289dbe22cff12ec1006b09ef2e6ac31066e2d943cfb-1276179996 > > >> > eicaruue1.bin >> >> This one looks truncated, please open a bug and we'll have a look. >> uudecode is not able to decode it either, xdeview can decode it though. >> > > I will do. Thanks, --Edwin _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml