hi this is not a configuration issue
the actual file name is Xerox_doc.exe if i use clamscan for scanning the file directly, even then clam does not detect the virus ################## [r...@ns1 ~]# /usr/bin/clamscan Xerox_doc.exe Xerox_doc.exe: OK ----------- SCAN SUMMARY ----------- Known viruses: 817679 Engine version: 0.96.2 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 0.05 MB Data read: 0.05 MB (ratio 1.00:1) Time: 8.089 sec (0 m 8 s) ################## your can download and chk it from here http://24x7server.net/v.zip thanks rajesh > On 25/08/2010 8:25 AM, Rajesh M wrote: >> hi >> >> >> one of our customers are getting virus email as an exe, zipped up >> >> my clam on my mailserver is uptodate >> >> this is not being detected by clam >> >> to double check i uploaded the file to my mail server >> >> /usr/bin/clamscan v.zip >> >> where file.zip is the virus file >> >> and clam reported as follows >> >> v.zip: OK >> ----------- SCAN SUMMARY ----------- >> Known viruses: 817679 >> Engine version: 0.96.2 >> Scanned directories: 0 >> Scanned files: 1 >> Infected files: 0 >> Data scanned: 0.09 MB >> Data read: 0.04 MB (ratio 2.44:1) >> Time: 5.008 sec (0 m 5 s) >> >> in my local office computer >> Kaspersky detects this as >> trojan win32.agent2.lnw >> >> this is happening for the last 3 weeks >> >> could somebody please guide me as to how i can resolve this problem >> >> rajesh >> >> >> >> >> >> >> --------------------------------------------------------------------------------- >> Qmailtoaster is sponsored by Vickers Consulting Group >> (www.vickersconsulting.com) >> Vickers Consulting Group offers Qmailtoaster support and >> installations. >> If you need professional help with your setup, contact them >> today! >> --------------------------------------------------------------------------------- >> Please visit qmailtoaster.com for the latest news, updates, and >> packages. >> >> To unsubscribe, e-mail: >> qmailtoaster-list-unsubscr...@qmailtoaster.com >> For additional commands, e-mail: >> qmailtoaster-list-h...@qmailtoaster.com >> >> > Check on clamd.conf > > ## > ## Archives > ## > # ClamAV can scan within archives and compressed files. > # Default: yes > #ScanArchive yes > > If ScanArchive is set to 'no' comment the line or set it to 'yes' > > then check 'Limits' section if the file is larger than your limits > settings no scan will be made. > > > > -- > T.Bogdan > > > --------------------------------------------------------------------------------- > Qmailtoaster is sponsored by Vickers Consulting Group > (www.vickersconsulting.com) > Vickers Consulting Group offers Qmailtoaster support and > installations. > If you need professional help with your setup, contact them today! > --------------------------------------------------------------------------------- > Please visit qmailtoaster.com for the latest news, updates, and > packages. > > To unsubscribe, e-mail: > qmailtoaster-list-unsubscr...@qmailtoaster.com > For additional commands, e-mail: > qmailtoaster-list-h...@qmailtoaster.com > > > --------------------------------------------------------------------------------- Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! --------------------------------------------------------------------------------- Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
