[Mimedefang] quick heads up: tampered zip passes viruscheck

Kevin A. McGrail kmcgrail at pccc.com
Fri Oct 22 09:04:12 EDT 2004


Thanks for the heads-up and as an FYI, McAfee Uvscan does detect it as
Exploit-ZIP trojan.

Scan engine v4.3.20 for Linux.
Virus data file v4400 created Oct 20 2004

Regards,
KAM

> > From: Jan Pieter Cornet [mailto:johnpc at xs4all.nl]
> >
> > http://www.xs4all.nl/~johnpc/eicar-hidden2.zip
> >
> > It's a tampered .zip file which includes a copy of EICAR. You might
> > want to test how your virus scanners handle it. At least "zip" from
> > InfoZip unpacks it, albeit with a warning, producing a "real"
> > virus (EICAR).




More information about the MIMEDefang mailing list