On Friday 03 September 2004 07:50, ralf bosz wrote: > Are you using the "--mbox" option when manually scanning the mailfiles? > No because I dont use mbox format. I cat the email message and pipe it through clamdscan. It picks up that it has to scan scanning mail messages from my /etc/clamav.conf
# cat testmail.eml | clamdscan --mbox - WARNING: Ignoring option -m (--mbox): please edit clamav.conf instead. stream: Worm.Mydoom.M FOUND ----------- SCAN SUMMARY ----------- Infected files: 1 Time: 0.023 sec (0 m 0 s) [EMAIL PROTECTED] root]# cat testmail.eml | clamdscan - stream: Worm.Mydoom.M FOUND ----------- SCAN SUMMARY ----------- Infected files: 1 Time: 0.023 sec (0 m 0 s) I have tried installing latest snapshot and clam still doesnt pick up this particular zip file containing the my.Doom.M virus. I dont think that it is a problem with qmail scanner as i am picking up thousands of mails a day - like i said earlier, i even have records in my logs that clam is catching some my.doom.M viruses. > On Fri, 3 Sep 2004 07:13:53 +0200, Scott Ryan <[EMAIL PROTECTED]> wrote: > > I had an issue with this a while back which was fixed by upgrading to > > latest devel and then eventually 0.75-1. > > I run qmail-scanner which in turn calls clamdscan. If i cat the message > > and pipe through clamdscan manually, clam reports that the message > > contains the virus myDoom.m, but it is not being trapped by clamav when > > invoked by the scanner. > > > > What is strange is: In my virus logs, i do see the virus my.Doom.m being > > trapped and quite a lot... > > > > The actual attachment is a zipped zip file, and in my clamav.conf i have > > archiveMaxRecursion set to 5 & ScanMail - but that is not the issue or > > clam would not have been able to capture the virus when run manually. > > > > Does anyone have any ideas or should I submit this as a bug? > > > > Many thanks > > -- > > +-------------------------------------+ > > (0> Scott Ryan > > //\ Unix/Linux Systems Engineer > > V_/_ Telkom Internet - SA > > +-------------------------------------+ > > Email: [EMAIL PROTECTED] > > Cell: +27721164832 > > Work: +27126807835 > > +-------------------------------------+ > > > > ------------------------------------------------------- > > This SF.Net email is sponsored by BEA Weblogic Workshop > > FREE Java Enterprise J2EE developer tools! > > Get your free copy of BEA WebLogic Workshop 8.1 today. > > http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click > > _______________________________________________ > > Clamav-users mailing list > > [EMAIL PROTECTED] > > https://lists.sourceforge.net/lists/listinfo/clamav-users > > ------------------------------------------------------- > This SF.Net email is sponsored by BEA Weblogic Workshop > FREE Java Enterprise J2EE developer tools! > Get your free copy of BEA WebLogic Workshop 8.1 today. > http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click > _______________________________________________ > Clamav-users mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/clamav-users ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
