Scott, Using the test virus sender on your website, the eicar plain file gets caught as a virus, where the eicar in a .zip file gets caught as a banned extension.
I am running Declude 1.78i14 - I just tried 1.78.i20 also, same results.. Here is a section of the log file.. 03/10/2004 08:42:40 Q295c000501aa26d2 Banning .ZIP file with encrypted COM extension. 03/10/2004 08:42:47 Q295c000501aa26d2 Scanned: Banned file extension. [MIME: 2 889] 003/10/2004 08:42:53 Q295c000501aa26d2 From: you-declude.com To: me-knox.edu 03/10/2004 08:42:53 Q295c000501aa26d2 Subject: Test eicar.com file [eicarencodedzip] On the site is mentions it should be caught as a virus. Don --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
