You can create a file called test.ndb and add the following lines to it: Eicar-Test-Signature:0:0:58354f2150254041505b345c505a58353428505e2937434329377d2445494341522d5354414e444152442d414e544956495255532d544553542d46494c452124482b482a Eicar-Test-Signature-1:0:*:574456504956416c51454651577a5263554670594e54516f554634704e304e444b5464394a45564a513046534c564e555155354551564a454c55464f56456c5753564a565579315552564e550a4c555a4a544555684a45677253436f3d0a
Then run clamscan against that database file: kpyke@vrt-dev-01:~$ clamscan --database=./test.ndb eicar.com eicar.com: Eicar-Test-Signature.UNOFFICIAL FOUND ----------- SCAN SUMMARY ----------- Known viruses: 2 Engine version: 0.97.4 Scanned directories: 0 Scanned files: 1 Infected files: 1 Data scanned: 0.00 MB Data read: 0.00 MB (ratio 0.00:1) Time: 0.007 sec (0 m 0 s) Let me know if that doesn't answer your question. Matt On Mon, Jul 2, 2012 at 6:24 AM, Wojciech Michalak <wojciech.micha...@nask.pl> wrote: > Hello, > > I was wondering if you could release (or point me to if one exists) > a set of cvd files which would contain only the eicar test samples? When > developing software I was hoping to refrain from having to commit/host > the whole current virus database. Checkout/download becomes cumbersome > when running software deployment tests. I tried searching both the web > and the mailing list, but didn't find anything useful. I was hoping to > have a set of files that I could place in "/var/lib/clamav" which would > be sufficient for starting "/etc/init.d/clamav-daemon" and running tests > with the eicar sample. > > Kind regards, > Wojciech Michalak > _______________________________________________ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://www.clamav.net/support/ml _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
