Re: [Clamav-users] eicar Identified But Not Moved

2007-10-17 Thread Sean McGlynn
Tilman, Thank you for your reply. Everything is being done as root. Sean - Original Message From: Tilman Schmidt <[EMAIL PROTECTED]> To: ClamAV users ML Sent: Wednesday, October 17, 2007 9:30:23 AM Subject: Re: [Clamav-users] eicar Identified But Not Moved Sean McGlynn s

Re: [Clamav-users] eicar Identified But Not Moved

2007-10-17 Thread Sean McGlynn
bject: Re: [Clamav-users] eicar Identified But Not Moved Hey, I don't know if clamuko should deny access to this file. If you are running Clamuko then disable it please ;-) or show us ls -al /home/justlgn/test/eicar.com /rl Sean McGlynn wrote: > The following is what appears in the trace

Re: [Clamav-users] eicar Identified But Not Moved

2007-10-17 Thread Tilman Schmidt
Sean McGlynn schrieb: > For the record, I can manually move the file: > > OES-FS05:/home/justlgn/test # mv eicar.com /var/log/clam/infected/ Judging from the prompt, you are doing this as root, but beneath your (justlgn's) home directory. > OES-FS05:/home/justlgn/test # ls -al > total 2 > drwxr-

Re: [Clamav-users] eicar Identified But Not Moved

2007-10-17 Thread Thorolf
Hey, I don't know if clamuko should deny access to this file. If you are running Clamuko then disable it please ;-) or show us ls -al /home/justlgn/test/eicar.com /rl Sean McGlynn wrote: > The following is what appears in the trace that I belive is relevant (it is > all that appears relevant

Re: [Clamav-users] eicar Identified But Not Moved

2007-10-17 Thread Sean McGlynn
P.S.S For what it's worth, it wont remove the file either. Same "can't open file" message is displayed. - Original Message From: Török Edvin <[EMAIL PROTECTED]> To: ClamAV users ML Sent: Tuesday, October 16, 2007 3:18:43 PM Subject: Re: [Clamav-users] eica

Re: [Clamav-users] eicar Identified But Not Moved

2007-10-17 Thread Sean McGlynn
root 232 Oct 17 06:56 .. -rw-r--r-- 1 justlgn users 69 Oct 16 10:56 eicar.com Thanks again. - Original Message From: Török Edvin <[EMAIL PROTECTED]> To: ClamAV users ML Sent: Tuesday, October 16, 2007 3:18:43 PM Subject: Re: [Clamav-users] eicar Identified But Not Moved On 10/

Re: [Clamav-users] eicar Identified But Not Moved

2007-10-17 Thread Sean McGlynn
-- From: Török Edvin <[EMAIL PROTECTED]> To: ClamAV users ML Sent: Tuesday, October 16, 2007 3:18:43 PM Subject: Re: [Clamav-users] eicar Identified But Not Moved On 10/16/07, Sean McGlynn <[EMAIL PROTECTED]> wrote: > Just to be certain (It's not my first day with Linux, but I'

Re: [Clamav-users] eicar Identified But Not Moved

2007-10-16 Thread Dennis Peterson
Sean McGlynn wrote: > Just to be certain (It's not my first day with Linux, but I'm still > relatively new > to it), you mean NFS as in Network File System, as in mounting a remote file > system on the Linux server, correct? If correct, then no, NFS is not > involved. > Both the directory bei

Re: [Clamav-users] eicar Identified But Not Moved

2007-10-16 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dennis Peterson wrote: > Sean McGlynn wrote: >> Dennis, >> >> Thank you for taking the time to reply. >> >> Yes, I am running the scan as root. >> >> Sean >> >> > > Is the home directory mounted? > > Dennis

Re: [Clamav-users] eicar Identified But Not Moved

2007-10-16 Thread Török Edvin
On 10/16/07, Sean McGlynn <[EMAIL PROTECTED]> wrote: > Just to be certain (It's not my first day with Linux, but I'm still > relatively new to it), you mean NFS as in Network File System, as in mounting > a remote file system on the Linux server, correct? If correct, then no, NFS > is not invol

Re: [Clamav-users] eicar Identified But Not Moved

2007-10-16 Thread Sean McGlynn
estination directory for quarantine files on on the root filesystem, local to the machine. - Original Message From: Dennis Peterson <[EMAIL PROTECTED]> To: ClamAV users ML Sent: Tuesday, October 16, 2007 2:40:32 PM Subject: Re: [Clamav-users] eicar Identified But Not Moved Se

Re: [Clamav-users] eicar Identified But Not Moved

2007-10-16 Thread Bill Landry
Dennis Peterson wrote: > Sean McGlynn wrote: >> The directory I am trying to scan is mounted, as is the directory to where I >> want the infected files moved, if I am understanding your question. >> >> Thanks again. > > User root is frequently (and correctly) prohibited from deleting files from

Re: [Clamav-users] eicar Identified But Not Moved

2007-10-16 Thread Dennis Peterson
Sean McGlynn wrote: > The directory I am trying to scan is mounted, as is the directory to where I > want the infected files moved, if I am understanding your question. > > Thanks again. User root is frequently (and correctly) prohibited from deleting files from NFS mounted sources. There are m

Re: [Clamav-users] eicar Identified But Not Moved

2007-10-16 Thread Sean McGlynn
:09 PM Subject: Re: [Clamav-users] eicar Identified But Not Moved Dennis Peterson wrote: > Sean McGlynn wrote: >> Dennis, >> >> Thank you for taking the time to reply. >> >> Yes, I am running the scan as root. >> >> Sean >> >> > > I

Re: [Clamav-users] eicar Identified But Not Moved

2007-10-16 Thread Dennis Peterson
Dennis Peterson wrote: > Sean McGlynn wrote: >> Dennis, >> >> Thank you for taking the time to reply. >> >> Yes, I am running the scan as root. >> >> Sean >> >> > > Is the home directory mounted? > Should have said "NFS mounted". dp ___ Help us build

Re: [Clamav-users] eicar Identified But Not Moved

2007-10-16 Thread Dennis Peterson
Sean McGlynn wrote: > Dennis, > > Thank you for taking the time to reply. > > Yes, I am running the scan as root. > > Sean > > Is the home directory mounted? Dennis ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http:/

Re: [Clamav-users] eicar Identified But Not Moved

2007-10-16 Thread Sean McGlynn
Dennis, Thank you for taking the time to reply. Yes, I am running the scan as root. Sean - Original Message From: Dennis Peterson <[EMAIL PROTECTED]> To: ClamAV users ML Sent: Tuesday, October 16, 2007 2:17:38 PM Subject: Re: [Clamav-users] eicar Identified But Not Moved

Re: [Clamav-users] eicar Identified But Not Moved

2007-10-16 Thread Dennis Peterson
Sean McGlynn wrote: > Hello, > > I am testing clamscan, and running the following command: > > clamscan -r --move=/var/log/clam/infected -l /var/log/clam/dailyclamscanSPM > /home/justlgn/test/eicar.com > > The results indicate "can't open file," and that no infected files were > found. The cl

[Clamav-users] eicar Identified But Not Moved

2007-10-16 Thread Sean McGlynn
Hello, I am testing clamscan, and running the following command: clamscan -r --move=/var/log/clam/infected -l /var/log/clam/dailyclamscanSPM /home/justlgn/test/eicar.com The results indicate "can't open file," and that no infected files were found. The clam log file shows that the file was id