Re: [Clamav-users] eicar within tnef

2005-03-26 Thread . kibble .
From: Nigel Horne [EMAIL PROTECTED] Date: Fri, 25 Mar 2005 19:52:25 + I have added decoding for TNEF (winmail.dat) to the CVS version. -Nigel You are a super star !! Well done !! _ It's fast, it's easy and it's free. Get MSN

Re: [Clamav-users] eicar within tnef

2005-03-25 Thread Nigel Horne
It seems that ktnef *does* extract the file eicar.com from the winmail.dat test 14. It is not impossible that the reason is that ktnef doesn't check the checksum and thus it gets around that. Anyway the point is I'm going to see if I can find the souce to ktnef and examine it (provided it isn't

Re: [Clamav-users] eicar within tnef

2005-03-25 Thread Nigel Horne
I have added decoding for TNEF (winmail.dat) to the CVS version. -Nigel ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] eicar within tnef

2005-03-25 Thread Jim Maul
Nigel Horne wrote: I have added decoding for TNEF (winmail.dat) to the CVS version. Well damn, that didnt take very long ;) Keep up the great work guys. -Nigel -Jim ___ http://lurker.clamav.net/list/clamav-users.html

RE: [Clamav-users] eicar within tnef

2005-03-25 Thread Sean Franklin
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jim Maul Sent: Friday, March 25, 2005 12:12 PM To: ClamAV users ML Subject: Re: [Clamav-users] eicar within tnef Nigel Horne wrote: I have added decoding for TNEF (winmail.dat) to the CVS version. Well damn, that didnt take very long

Re: [Clamav-users] eicar within tnef

2005-03-25 Thread Odhiambo Washington
* Sean Franklin [EMAIL PROTECTED] [20050326 00:14]: wrote: I second that! I merely thought I had something configured wrong. Then when I heard it wasn't supported yet, I was relieved and was going to make a note to ignore that test from now on. Instead, I/we get a brand new feature!

Re: [Clamav-users] eicar within tnef

2005-03-25 Thread Nigel Horne
On Fri, 2005-03-25 at 21:17, Odhiambo Washington wrote: * Sean Franklin [EMAIL PROTECTED] [20050326 00:14]: wrote: I second that! I merely thought I had something configured wrong. Then when I heard it wasn't supported yet, I was relieved and was going to make a note to ignore that

Re: [Clamav-users] eicar within tnef

2005-03-25 Thread Nigel Horne
On Fri, 2005-03-25 at 20:12, Jim Maul wrote: Nigel Horne wrote: I have added decoding for TNEF (winmail.dat) to the CVS version. Well damn, that didnt take very long ;) Keep up the great work guys. Little endian only for now (e.g. x86 OK, PPC to be done). Will fix that ASAP. -Jim

[Clamav-users] eicar within tnef

2005-03-22 Thread jef moskot
Is anyone having trouble detecting Test #14 (the TNEF test) from http://www.webmail.us/testvirus ? I know there's been a lot of discussion about eicar detection with regards to Clam recently, and, to complicate the issue, I can't seem to unpack the winmail.dat file, so it could be that things

Re: [Clamav-users] eicar within tnef

2005-03-22 Thread Tomasz Kojm
On Tue, 22 Mar 2005 16:26:35 -0500 (EST) jef moskot [EMAIL PROTECTED] wrote: Is anyone having trouble detecting Test #14 (the TNEF test) from http://www.webmail.us/testvirus ? I know there's been a lot of discussion about eicar detection with regards to Clam recently, and, to complicate the

Re: [Clamav-users] eicar within tnef

2005-03-22 Thread jef moskot
On Tue, 22 Mar 2005, Tomasz Kojm wrote: ClamAV doesn't support the TNEF format. Hmm, good point. I also forgot to mention I'm using ClamAV 0.83, but I guess that's irrelevant. I use amavis to pass the files off to ClamAV and I haven't changed anything (purposely) with it, but prior to this

Re: [Clamav-users] eicar within tnef

2005-03-22 Thread Nigel Horne
On Tue, 2005-03-22 at 21:26, jef moskot wrote: Is anyone having trouble detecting Test #14 (the TNEF test) from http://www.webmail.us/testvirus ? TNEF is on my list of things to do. To be honest it had slipped my memory, and I have spare time at the moment so I'll have a look. Jeffrey Moskot

Re: [Clamav-users] eicar within tnef

2005-03-22 Thread Jim Maul
Nigel Horne wrote: On Tue, 2005-03-22 at 21:26, jef moskot wrote: Is anyone having trouble detecting Test #14 (the TNEF test) from http://www.webmail.us/testvirus ? TNEF is on my list of things to do. To be honest it had slipped my memory, and I have spare time at the moment so I'll have a look.

Re: [Clamav-users] eicar within tnef

2005-03-22 Thread Daniel J McDonald
On Tue, Mar 22, 2005 at 05:36:04PM -0500, Jim Maul wrote: Nigel Horne wrote: On Tue, 2005-03-22 at 21:26, jef moskot wrote: Is anyone having trouble detecting Test #14 (the TNEF test) from http://www.webmail.us/testvirus ? TNEF is on my list of things to do. To be honest it had slipped