Clam AV - Beware

[Ivan Mirisola]

Dear Mr. Gavin,

I tested the same virus on vx.netlux.org with clamAV 0.51 and it also
failed to discover. I have reported this issue to clamAV's site and hope
to see some fix very soon.

-----------------------------------------------------------------------------------
Nov  6 16:55:48 nucci sendmail[9060]: gA6Jtlp09060:
from=<ivan at nucci.com.br>, size=44395, class=0, nrcpts=1,
msgid=<000d01c285cf$05c31270$0502a8c0 at C5>, proto=SMTP, daemon=MTA, Nov
6 16:55:48 nucci MailScanner[9358]: New Batch: Scanning 1 messages,
44802 bytes
Nov  6 16:55:50 nucci MailScanner[9358]: Virus and Content Scanning:
Starting
Nov  6 16:55:50 nucci MailScanner[9358]: Uninfected: Delivered 1 messages
-----------------------------------------------------------------------------------

Thanks again,
Ivan


Gavin Nelmes-Crocker wrote:

>I know its currently unsupported in code status by mailscanner and this
>doesn't technically alter that but beware if you are planning to use it on a
>production box with no other scanners.
>
>My findings so far with regard to virus detecting is poor we have pushed
>several real virii through it and it hasn't detected them when f-prot,sophos
>and kaspersky all have and I'm not talking new ones here one of the ones we
>are playing with is Melissa which is 2 years old.  We have up to date virus
>definitions for Clamav and it is working as it detects its own test file but
>not some of the others that I would expect it to.
>
>Regards
>
>Gavin
>
>