[Mimedefang] quick heads up: tampered zip passes viruscheck
Kevin A. McGrail
kmcgrail at pccc.com
Fri Oct 22 09:04:12 EDT 2004
Thanks for the heads-up and as an FYI, McAfee Uvscan does detect it as
Exploit-ZIP trojan.
Scan engine v4.3.20 for Linux.
Virus data file v4400 created Oct 20 2004
Regards,
KAM
> > From: Jan Pieter Cornet [mailto:johnpc at xs4all.nl]
> >
> > http://www.xs4all.nl/~johnpc/eicar-hidden2.zip
> >
> > It's a tampered .zip file which includes a copy of EICAR. You might
> > want to test how your virus scanners handle it. At least "zip" from
> > InfoZip unpacks it, albeit with a warning, producing a "real"
> > virus (EICAR).
More information about the MIMEDefang
mailing list