[Avcheck] Re: a way to circumvent checks by AVP

[Ralf Hildebrandt]

On Thu, Jul 25, 2002 at 06:24:08PM +0400, Michael Tokarev wrote:

> But please wait.  Eicar.com?  In .rtf?  What for?  This combo should
> NOT be detected.  Just like eicar.com inseted into plaintext email.
> There was some discussions about this very issue: as stated in eicar.msg
> file in avcheck distro, avp will detect eicar ONLY when it is an
> application/octet-stream, and ONLY with .com extension.  There may
> be different opinions about if this is right or not.

Let's try a real virus then!
I've got some shit here.

-- 
Ralf Hildebrandt (Im Auftrag des Referat V A)   Ralf.Hildebrandt@charite.de
Charite Campus Virchow-Klinikum                 Tel.  +49 (0)30-450 570-155
Referat V A - Kommunikationsnetze -             Fax.  +49 (0)30-450 570-916
"f u cn rd ths, u cn gt a gd jb n cmptr prgmmng."  -Anon.