How to test SpamAssassin or antivirus software in Plesk?

Question

How to test SpamAssassin and Plesk Premium Antivirus antiviruses?

Where can you see if the message is blocked by an antivirus program?

Answer

SpamAssassin

To test SpamAssassin, it is necessary to send a test email containing the following string of characters in the message body (in upper case and with no spaces or line breaks):

CONFIG_TEXT: XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X

Note: The test email should be sent from a mailbox that is not located on the server.

While testing, note that Gtube test email gives +1000 scores to spam. So, even if a mailbox is in the whitelist, mail still be detected as spam because whitelisted email gets -100 scores. Detailed information about scores can be found in an email header. The output will look similar to:

CONFIG_TEXT: X-Spam-Report:
* -100 USER_IN_WHITELIST From: address is in the user's white-list
* -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
* 1000 GTUBE BODY: Generic Test for Unsolicited Bulk Email
* 0.0 TVD_SPACE_RATIO No description available.

Antiviruses

To test Plesk Premium Antivirus or any other antivirus download and attach to email a special test file: eicar.zip.

The file that already contains a special string and provided by Kaspersky Labs: https://support.kaspersky.com/common/diagnostics/7399 

Alternatively attach a test file with file extension ".com" that contains this special string:

CONFIG_TEXT: X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

On Plesk for Windows, the results can be seen in the file %plesk_dir%admin\logs\plesklog_avstat<date>.log.

Note: Plesk application debug should be enabled in the registry: set the value of the DWORD parameter debug to 1 in HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\PLESK\PSA Config\Config.