[clamav-users] FYI clamdmon not working - due to change in Eicar name

[Mark Allan]

Hopefully this is just a bug as the eicar test file isn't really a "win" test; it's just a text file.  I imagine many people will have scripts and test routines set up which expect the name "Eicar-Test-Signature" - I know I do!

Is there any way this can be changed back or does everyone have to update their test cases?

Mark

> On 17 Mar 2016, at 7:56 am, Mark Moshe Kaye <moshe at bgaddict.com> wrote:
> 
> Hi all,
> 
> I use the clamdmon utility for monitoring the health of my clamd daemon.
> 
> Since receiving the new main, daily, and bytecode this evening my clamdmon is no longer working.
> 
> I found the source code for clamdmon which shows the issue. The code is looking for a "Eicar-Test-Signature" string which is now "Win.Test.EICAR_NDB-1". As soon as I hacked the clamdmon code and recompiled it works as it did previously.
> 
> so:
> 1) FYI in case you use clamdmon as i do!
> 2) Can I rely that Win.Test.EICAR_NDB-1 is the new name going forward or is this likely to change back to Eicar-Test-Signature?
> 
> Thank you,
> ~Moshe
> 
> _______________________________________________
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml