Mailscanner is not detecting eicar

Paul Lamb pal at mssl.ucl.ac.uk
Tue Jul 8 17:39:25 IST 2008


MailScanner version 4.69.9 is not detecting the eicar test "virus".

(This has not worked previously; I downloaded it a couple of weeks ago 
but have only just configured it.)

Eicar is forwarded whether included in the message text

   mail pal < /etc/mail/EICAR-TEST-FILE

or as at attachment
   
   echo test | pine -attach /etc/mail/EICAR-TEST-FILE pal

I have tested with eicar included in the parameter Non-Forging Viruses 
and with it not included.

Please note that MailScanner does detect and quarantine the virus 
W32/MyDoom-O and Sophos sweep does detect eicar

   /usr/lib/MailScanner/sophos-wrapper /usr/local/Sophos EICAR-TEST-FILE 
   [snip]
   >>> Virus 'EICAR-AV-Test' found in file EICAR-TEST-FILE
 
Any suggestions would be appreciated.

Paul Lamb


More information about the MailScanner mailing list