-----Message d'origine----- De : Török Edwin [mailto:edwinto...@gmail.com] Envoyé : jeudi 10 juin 2010 16:28 À : DAVID BERTHIAU Cc : clamav-users Objet : Re: [Clamav-users] Problem with lha, lzh, uuencode and pgp files
On 2010-06-10 17:20, DAVID BERTHIAU wrote: >> >> >> On 2010-06-09 12:41, Török Edwin wrote: >>> On 06/09/2010 03:12 PM, DAVID BERTHIAU wrote: >>> > Hello, >>> > >>> > I have installed clamav with squidclam for a proxy (0.96 with package >> and 0.96.1 with sources) but when I test it with eicar files >> >> Ø >>> > (found on http://techlabs.bluecoat.com/ ) the eicar.lha, eicar.lzh >>> >>> Support for external unarchivers was dropped 2 years ago. >>> Clamscan doesn't support lha/lzh. >>> >>> >, eicar.pgp and >>> >>> I don't see this file on that site. What is it? >>> If it is a pgp encrypted file, ClamAV can't guess the passphrase... >>> >> >> Sorry, for the pgp file, it was not on the same site but it was the file >> eicar.com.pgp on this site http://securite-informatique.info/virus/eicar/ >None of the AVs detect that (and none should, it is an encrypted file): >http://www.virustotal.com/analisis/21c94279acf534fe49c32289dbe22cff12ec1006>b09ef2e6ac31066e2d943cfb-1276179996 Sorry, but I am not agree with you because my current system (trend micro IWSS) detect everything as malicious (even on http://techlabs.bluecoat.com/ and on http://securite-informatique.info/virus/eicar/) >> >> >>> > eicaruue1.bin >>> >>> This one looks truncated, please open a bug and we'll have a look. >>> uudecode is not able to decode it either, xdeview can decode it though. >>> >> >> I will do. Thanks, --Edwin _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
