On Mon, Nov 08, 2004 at 08:30:18AM -0500, Jason Frisvold wrote:
[Test #17 (Eicar virus hidden using the "CR Vulnerability") from ]
[www.testvirus.org ]
>I'm not running qmail-scanner, I'm running simscan. Either way, the email
>that comes in doesn't appear to have this vulnerability in it.. At least,
>the email source that I receive in my inbox doesn't have the eicar string in
>it (that I've been able to detect) and hand-scanning via clamscan results in
>a clean email...
Interesting; I've just tested the email www.testvirus.org sends out for
test #17 and I've found that ClamAV detects the Eicar virus via both the
home-grown utility I've written (postfix content filter, deals with MIME et al
to give ClamAV the individual files) and if I use clamscan on the email text
which appears in my inbox.
I'm using ClamAV 0.80 for this.
--
Simon the stressed http://www.bpfh.net/ [EMAIL PROTECTED]
Chocolate is *not* a substitute for sleep
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users