Damian Menscher wrote:
There's a new signature for EICAR test virus on daily.cvd, using MD5 hash format.On Thu, 2 Sep 2004, Fajar A. Nugraha wrote:
With the signature update for EICAR test virus, clamdwatch.pl no longer
works.
Huh? clamdwatch.pl seems to be working for me... and what's this about a new signature for eicar?
Only recent devel versions can pick up this signature.
As Tomasz said,
"The current signature is more compatible with the official definition than the old one"
You can check the official definition on http://www.eicar.org/anti_virus_test_file.htm.
However, this also means that the file clamdwatch.pl will NOT be detected as EICAR virus (over 128 bytes, extra characters, etc).
Using the latest snapshot and database (ClamAV devel-20040902/477/01 Sep 2004 16:20 +0200),
clamdwatch.pl complains
"Clamd didn't find the EICAR pattern. Your virus database(s) could be borked!".
If you use the current stable (0.75.1), you won't experience this problem.
As devel version will (eventually) become the next stable, I'm posting a warning
for clamdwatch.pl users. It's a great script, and I'd like to see it work
with next versions of ClamAV.
Regards,
Fajar
------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
