I just did and NAV didn't catch it but a quote from the e-mail is: "This E-mail contains the test eicar.com file in a dynamic encoded .ZIP file. It is expected that no AV program will block this E-mail due to the eicar.com file in it."
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Sent: Tuesday, March 16, 2004 6:18 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] NAV 2003 catches passworded virus?? On 16 Mar 2004 at 17:20, marc catuogno wrote: Marc, I do not have Norton so I cannot test it - have you sent to your desktop the EicarDynamicEncodedZip from Scott's site? Results? http://www.declude.com/tools/mailsend.html >From what I understand static zips are easy its the the dynamic zip/rars that are the challenge -Nick Hayer > > Sorry, I know ITve brought this up before but ITm befuddled as to how plan old Norton Antivirus > 2003 on my XP desktop using outlook 2002 can pick up this virus within a passworded file without > the password. > > This was held in the virus directory by Declude and I released it to see if it would be caught, and it > was - before it was opened. > Again, this isnTt really important, but ITd like to know how it is happening. Any theories??? > > Marc > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > Sent: Tuesday, March 16, 2004 2:54 PM > To: [EMAIL PROTECTED] > Subject: Re: Document > > Your file is attached. > > > Password - > This was the replacement attachment: > Norton AntiVirus removed the attachment: Info.zip. > The attachment was infected with the [EMAIL PROTECTED] virus. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
