{VIRUS?} Re: Updated f-prot not detecting mimail...

[Raymond Dijkxhoorn]

Hi!

> [root at smithers clamav]# ls -l
> total 1236
> -rw-rw-r--    1 clamav   clamav         86 Aug  4 12:09 mirrors.txt
> -rw-r--r--    1 clamav   clamav    1222321 Aug  5 16:04 viruses.db
> -rw-r--r--    1 clamav   clamav      31724 Aug  5 16:04 viruses.db2

> -rw-rw-r--    1 clamav   clamav         86 Jun 21 13:38 mirrors.txt
> -rw-r--r--    1 clamav   clamav    1222321 Jul  7 21:02 viruses.db
> -rw-r--r--    1 clamav   clamav      31724 Aug  5 22:01 viruses.db2

Strange, same size but different dates. An i update it hourly. Might that
be the problem ? PErhaps a virusses.db outdated ?

> Aug  5 01:30:34 vmx10 MailScanner[27280]:
> /var/spool/MailScanner/incoming/27280/./h74NUTSL019087/message.zip:
> Trojan.Dropper.B FOUND
>
> Aug  5 01:12:48 vmx10 MailScanner[27124]:
> /var/spool/MailScanner/incoming/27124/./h74NCjSL004095/message.zip:
> Trojan.Dropper.C FOUND

In my logs i see loads of the above, do you see clam at all in your logs?

Do: grep Clam /var/log/maillog

Bye,
Raymond.