[clamav-users] INSTREAM + eicar not well detected?
G.W. Haywood
clamav at jubileegroup.co.uk
Thu Mar 3 15:48:59 UTC 2022
Hi there,
On Thu, 3 Mar 2022, G.W. Haywood wrote:
> ... Perhaps you can post the output of 'clamconf -n' ...
On Thu, 3 Mar 2022, Kris Deugau wrote:
> ...
> There are quite the proliferation of hash signatures, but ...
> The only one that would match within a larger
> file or datastream is the bytecode signature Eicar-Signature.{}
> ...
> Check if you have bytecode signatures disabled ...
Good catch Kris. This has me wondering - does some equivalent of
'clamconf -n'
exist in the Windows versions of ClamAV?
--
73,
Ged.
More information about the clamav-users
mailing list