testvirus.org

Dalibor lugos at ice.si
Tue Jul 13 13:18:15 CEST 2004


Sprobal sem www.testvirus.org in sem od 25 možnih načinov pošiljanja 
eicar virusa dobil 5.

In to so:
-Test #8: Eicar virus sent using BinHex encoding within a MIME segment
-Test #12: Eicar virus within a password protected ZIP file
-Test #22: Eicar virus within zip file hidden using the "MIME 
Continuation Vulnerability" (attachment can be opened by all versions of 
Microsoft Outlook and Outlook Express)
- Test #24: Test for the "Partial (Fragmented) Vulnerability". This does 
not include Eicar virus, but your mail server still must block this 
since it can break a virus into multiple emails and reassemble it in 
your inbox. (attachment can be opened by virtually any mail program)
- Test #25: Attachment with a CLSID extension which may hide the real 
file extension. This does not include Eicar virus, but your mail server 
still must block this since it can hide the true extension of a file. 
(attachment can be opened by any Windows computer)

Uporabljam postfix - amavisd-new - spamassassin z Clamav in Sophos AV.

Kako naj se rešim vseh teh problemov?

lp
dalibor



More information about the lugos-list mailing list