See: http://www.eicar.org/anti_virus_test_file.htm
Specifically: "Any anti-virus product that supports the EICAR test file should detect it in any file providing that the file starts with the following 68 characters, and is exactly 68 bytes long" Best Regards, Joseph Benden .--. |o_o | |:_/ | // \ \ (| | ) /'\_ _/`\ \___)=(___/ http://www.ThrallingPenguin.com/ -------------------------------- We design, develop, and extend software technologies for the most demanding business applications, as well as offer VoIP Consulting services. On Dec 3, 2008, at 5:41 PM, Thomasz Blaszczyk wrote: > 2) I've downloaded Eicar Test Anti-Virus File and crated 10bytes file. > (See logs below) Then I've appended Eicar to this file. Why clamscan > doesn't find a signature in this file? _______________________________________________ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches to our Bugzilla: http://bugs.clamav.net