> There are many ways to do this - using the --mbox option should detect > the virus if the _full_ e-mail is scanned by ClamAV.
Well - let me clarify this situation very carefully : (v0.70)-clamscan --mbox does *NOT* recognized the _full_ email as a virus. snapshot-clamscan --mbox does *NOT* recognized the _full_ email as a virus. clamscan --mbox does *NOT* recognized the included corrupted email as a virus. clamscan does recognized the included script (the virus itself) as a virus. Fprot does recognize tha _full_ email as a virus Fprot does recognized the included corrupted email as a virus. Fprot does recognized the included script (the virus itself) as a virus. your on-line scanner does recognize tha _full_ email as a virus your on-line scanner does *NOT* recognized the included corrupted email as a virus. I suppose that your on-line scanner does recognized the included script (the virus itself) as a virus. Honest: I am convinced we face a bug here. Rgds, Flynn ------------------------------------------------------- This SF.Net email is sponsored by Sleepycat Software Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to deliver higher performing products faster, at low TCO. http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3 _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users