RE: Question about UCE and also AMAVIS (EICAR ATTACHED)

[Christopher Seawood]

On Thu, 9 Dec 1999, Dustin Miller wrote:

> 
> Still, however -- the EICAR.COM virus goes right through.  I'm attaching the
> EICAR.COM virus to this post (it's 69 bytes) to see if it sets any other
> alarms off.  That's a good way to tell who's using it. :)

Strange, it didn't set the alarm off here but when I compared the file you
attached versus the eicar file I used for testing, I noticed that you seem
to have an extra space but not return carriage.

cls@amadeus:~> cat eicar\ 2word.com
X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
cls@amadeus:~> cat EICAR.COM
X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H
+H*cls@amadeus:~

- cls