Hi all,
 
On the ClamWin forum (http://forums.clamwin.com/viewtopic.php?p=1535#1535),
one of the users reported the following problem, which we traced back into
the code of Clamscan.exe :
 
- When an infected file is found, it is moved to quarantine.
- If the same file is found a second time, clamscan.exe detects that it is
already in quarantine.  At this moment, the file should be removed, but it
seems to stay in the original folder anyway, while it should be removed.
 
Looking at the clamscan code, we found the following lines :
 
if(fstat.st_ino == mfstat.st_ino) { /* It's the same file*/ 
            mprintf("File excluded '%s'\n", filename); 
            logg("File excluded '%s'\n", filename); 
            claminfo.notmoved++; 
            free(movefilename); 
            return; 
 
Clamscan reports that the file is excluded, but it does not remove the file.
 
Is this a bug or is there some reason for this behaviour (and in that case :
what is it ?) ?
 
Thanks in advance for any comments,
 
budtse
 
P.S. Am i posting in the right list here, or should i post to the
clamav-devel list in stead ?
 
ClamAV is great software !
_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-win32

Reply via email to