AW: Antivir fixed?

[Marcel Blenkers]

Hi there,

i did as stated below..and still it does not work..

these are the lines within my log:

Aug 13 12:33:05 marcel MailScanner[15790]:
/var/spool/MailScanner/incoming/15790/./i7DAX1jY015851/eicar.rar: RAR
module failure
Aug 13 12:33:05 marcel MailScanner[15790]: ProcessClamAVOutput:
unrecognised line
"/var/spool/MailScanner/incoming/15790/./i7DAX1jY015851/eicar.rar: RAR
module failure". Please contact the authors!
Aug 13 12:33:05 marcel MailScanner[15790]:
/tmp/clamav.15864/clamav-5629223b5dd8e81c/eicar.rar: RAR module failure
Aug 13 12:33:05 marcel MailScanner[15790]: ProcessClamAVOutput:
unrecognised line "/tmp/clamav.15864/clamav-5629223b5dd8e81c/eicar.rar:
RAR module failure". Please contact the authors!
Aug 13 12:33:05 marcel MailScanner[15790]: UNRAR 3.00 freeware
Copyright (c) 1993-2002 Eugene Roshal
Aug 13 12:33:05 marcel MailScanner[15790]: ProcessClamAVOutput:
unrecognised line "UNRAR 3.00 freeware      Copyright (c) 1993-2002 Eugene
Roshal". Please contact the authors!
Aug 13 12:33:05 marcel MailScanner[15790]: Extracting from
/tmp/clamav.15864/clamav-5629223b5dd8e81c/eicar.rar
Aug 13 12:33:05 marcel MailScanner[15790]: ProcessClamAVOutput:
unrecognised line "Extracting from
/tmp/clamav.15864/clamav-5629223b5dd8e81c/eicar.rar". Please contact the
authors!
Aug 13 12:33:05 marcel MailScanner[15790]: Extracting  eicar.com
^H^H^H^H 65%^H^H^H^H^H  OK
Aug 13 12:33:05 marcel MailScanner[15790]: ProcessClamAVOutput:
unrecognised line "Extracting  eicar.com
^H^H^H^H 65%^H^H^H^H^H  OK ". Please contact the authors!
Aug 13 12:33:05 marcel MailScanner[15790]:
/tmp/clamav.15864/clamav-3f13d71ec457535f/eicar.com: Eicar-Test-Signature
FOUND
Aug 13 12:33:05 marcel MailScanner[15790]:
/tmp/clamav.15864/clamav-5629223b5dd8e81c/eicar.rar: Infected Archive
FOUND
Aug 13 12:33:05 marcel MailScanner[15790]: (Real infected archive:
/var/spool/MailScanner/incoming/15790/./i7DAX1jY015851/eicar.rar)
Aug 13 12:33:05 marcel MailScanner[15790]: ProcessClamAVOutput:
unrecognised line "(Real infected archive:
/var/spool/MailScanner/incoming/15790/./i7DAX1jY015851/eicar.rar)". Please
contact the authors!
Aug 13 12:33:05 marcel MailScanner[15790]: Virus Scanning: ClamAV found 2
infections
Aug 13 12:33:06 marcel MailScanner[15790]: Uninfected: Delivered 1
messages
Aug 13 12:33:10 marcel sendmail[15885]: i7DAX1jY015851:
to=<marcel at irc-addicts.de>, delay=00:00:09, xdelay=00:00:04, mailer=local,
pri=120515, dsn=2.0.0, stat=Sent




On Fri, 13 Aug 2004, Spicer, Kevin wrote:

> > but looks like it´s a problem from clamav ...
> >
> > ProcessClamAVOutput: unrecognised line "/var/spool/MailScanner/incoming
> > /5297/./i7D8XaSe006363/eicar.rar: RAR module failure". Please contact the
> > authors!
>
> The inbuilt RAR handling in clamav doesn't always work.  Install unrar and make sure the clamav-wrapper script has the line containing --unrar uncommented.
>
>
>
>
> BMRB International
> http://www.bmrb.co.uk
> +44 (0)20 8566 5000
> _________________________________________________________________
> This message (and any attachment) is intended only for the
> recipient and may contain confidential and/or privileged
> material.  If you have received this in error, please contact the
> sender and delete this message immediately.  Disclosure, copying
> or other action taken in respect of this email or in
> reliance on it is prohibited.  BMRB International Limited
> accepts no liability in relation to any personal emails, or
> content of any email which does not directly relate to our
> business.
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).