For TEST 17, Whatever the technical vulnerability is called - there is a copy of eicar encoded in the headers that Outlook (at least) can see - haven't tested OE or others.
Symantec and Trend gateways catch it, as do the command line scanners previously noted. Jerry > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry > Sent: Monday, December 20, 2004 3:08 PM > To: Declude.Virus@declude.com > Subject: RE: Re[6]: [Declude.Virus] testvirus.org #22 > > > > >I turned if off and it still got through. > > > >======================================== > >This test message contains: > > > >Test #17: Eicar virus hidden using the "CR Vulnerability" > (attachment > >can be opened by all versions of Microsoft Outlook and > Outlook Express) > ... > > I just checked this one, and it got through here, too. I > examined the raw > source of the E-mail, and there doesn't appear to be a lone > CR character in > it, so it doesn't appear to actually contain the Outlook "CR > Vulnerability". > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail > mailservers > since 2000. > Declude Virus: Ultra reliable virus detection and the leader > in mailserver > vulnerability detection. > Find out what you've been missing: Ask for a free 30-day evaluation. > > > ---- > This outgoing message is guaranteed to be authentic by > Message Level users. Guarantee the authenticity of your email > @ http://www.messagelevel.com. > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
