Re: [Clamav-users] Why does ClamAV does not detect this via amavisd-new

2009-10-27 Thread Tomasz Kojm
On Mon, 26 Oct 2009 22:46:49 +0200 Jari Fredriksson wrote: > Detected by F-Prot and BitDefender, but not ClamAV. > > But then manually scanning the attachement, clamscan detects it. This is > strange. It happens only with these DHL postings. Hi Jari, please report the problem to the amavisd-ne

Re: [Clamav-users] Why does ClamAV does not detect this via amavisd-new

2009-10-26 Thread Jari Fredriksson
26.10.2009 19:45, Török Edwin kirjoitti: > On 2009-10-23 19:46, Jari Fredriksson wrote: >> 23.10.2009 17:25, Jari Fredriksson kirjoitti: >> >>> This may or may not be an amavisd-new question, but I start here. >>> >>> >> >> Now things changed a bit. That was detected, but with a MIME erro

Re: [Clamav-users] Why does ClamAV does not detect this via amavisd-new

2009-10-26 Thread Török Edwin
On 2009-10-23 19:46, Jari Fredriksson wrote: > 23.10.2009 17:25, Jari Fredriksson kirjoitti: > >> This may or may not be an amavisd-new question, but I start here. >> >> > > Now things changed a bit. That was detected, but with a MIME error. > Did you change anything, or did it change w

Re: [Clamav-users] Why does ClamAV does not detect this via amavisd-new

2009-10-26 Thread Jari Fredriksson
26.10.2009 13:43, Tomasz Kojm kirjoitti: > On Fri, 23 Oct 2009 17:25:36 +0300 > Jari Fredriksson wrote: > >> This may or may not be an amavisd-new question, but I start here. > [...] >> This DHL payload is only malware which behaves like this for me. Any ideas? > > Hi Jari, > > you need to un

Re: [Clamav-users] Why does ClamAV does not detect this via amavisd-new

2009-10-26 Thread Tomasz Kojm
On Fri, 23 Oct 2009 17:25:36 +0300 Jari Fredriksson wrote: > This may or may not be an amavisd-new question, but I start here. [...] > This DHL payload is only malware which behaves like this for me. Any ideas? Hi Jari, you need to uncomment this line in amavisd-new config file: qr'^MAIL$',

Re: [Clamav-users] Why does ClamAV does not detect this via amavisd-new

2009-10-23 Thread Jari Fredriksson
23.10.2009 17:25, Jari Fredriksson kirjoitti: > > This may or may not be an amavisd-new question, but I start here. > Now things changed a bit. That was detected, but with a MIME error. Cheers. -- A virus was found: Bad header

[Clamav-users] Why does ClamAV does not detect this via amavisd-new

2009-10-23 Thread Jari Fredriksson
This may or may not be an amavisd-new question, but I start here. --- A virus was found: W32/Bredolab!Generic Banned name: .exe,.exe-ms,DHL_print_label_107f1.exe Scanners detecting a virus: F-PROT Antivirus for UNIX, BitDefender C