[clamav-users] INSTREAM + eicar not well detected?

G.W. Haywood clamav at jubileegroup.co.uk
Thu Mar 3 15:48:59 UTC 2022


Hi there,

On Thu, 3 Mar 2022, G.W. Haywood wrote:

> ... Perhaps you can post the output of 'clamconf -n' ...

On Thu, 3 Mar 2022, Kris Deugau wrote:

> ...
> There are quite the proliferation of hash signatures, but ...
> The only one that would match within a larger 
> file or datastream is the bytecode signature Eicar-Signature.{}
> ...
> Check if you have bytecode signatures disabled ...

Good catch Kris.  This has me wondering - does some equivalent of

'clamconf -n'

exist in the Windows versions of ClamAV?

-- 

73,
Ged.


More information about the clamav-users mailing list