Is there a way to verify that memory scanning works as it should? Can you use the EICAR test file for that?

Regards.

currently eicar runs end exits, you could use clam.exe the clamav team test pattern that displays a message box saying "Hello worm"
and waits for user to press ok, if you don't press ok it will be resident in memory.
You can directly download it from:



sorry url tag doesn't work

Thanks. I saved the code to a file on my desktop and executed it. ClamWin took it off the desktop and quarantined it as configured. It works!

Regards,