On Wed, 1 Sep 2004 22:01:48 +0000 (GMT)
Andy Fiddaman <[EMAIL PROTECTED]> wrote:

> 
> I've been re-running some tests on an EICAR file here with mixed
> results.
> 
> According to the eicar web page:
> 
> "The first 68 characters is the known string. It may be optionally
> appended by any combination of whitespace characters with the total
> file length not exceeding 128 characters."
> 

This is the correct definition:

"Any anti-virus product that supports the test file should detect it in
any file providing that the file starts with the following 68
characters, and is exactly 68 bytes long"

-- 
   oo    .....         Tomasz Kojm <[EMAIL PROTECTED]>
  (\/)\.........         http://www.ClamAV.net/gpg/tkojm.gpg
     \..........._         0DCA5A08407D5288279DB43454822DC8985A444B
       //\   /\              Thu Sep  2 01:53:03 CEST 2004

Attachment: pgpHN49HOsbjs.pgp
Description: PGP signature

Reply via email to