AW: Antivir fixed?

[Julian Field]

<x-flowed>
You are getting confused. The Antivir issue is related to the virus scanner 
called "Antivir". You are talking about "ClamAV" and not "Antivir".

If you applied the "Antivir" patch, then I am hardly surprised it didn't 
help your "ClamAV" problem :-)

At 11:34 13/08/2004, you wrote:
>Hi there,
>
>i did as stated below..and still it does not work..
>
>these are the lines within my log:
>
>Aug 13 12:33:05 marcel MailScanner[15790]:
>/var/spool/MailScanner/incoming/15790/./i7DAX1jY015851/eicar.rar: RAR
>module failure
>Aug 13 12:33:05 marcel MailScanner[15790]: ProcessClamAVOutput:
>unrecognised line
>"/var/spool/MailScanner/incoming/15790/./i7DAX1jY015851/eicar.rar: RAR
>module failure". Please contact the authors!
>Aug 13 12:33:05 marcel MailScanner[15790]:
>/tmp/clamav.15864/clamav-5629223b5dd8e81c/eicar.rar: RAR module failure
>Aug 13 12:33:05 marcel MailScanner[15790]: ProcessClamAVOutput:
>unrecognised line "/tmp/clamav.15864/clamav-5629223b5dd8e81c/eicar.rar:
>RAR module failure". Please contact the authors!
>Aug 13 12:33:05 marcel MailScanner[15790]: UNRAR 3.00 freeware
>Copyright (c) 1993-2002 Eugene Roshal
>Aug 13 12:33:05 marcel MailScanner[15790]: ProcessClamAVOutput:
>unrecognised line "UNRAR 3.00 freeware      Copyright (c) 1993-2002 Eugene
>Roshal". Please contact the authors!
>Aug 13 12:33:05 marcel MailScanner[15790]: Extracting from
>/tmp/clamav.15864/clamav-5629223b5dd8e81c/eicar.rar
>Aug 13 12:33:05 marcel MailScanner[15790]: ProcessClamAVOutput:
>unrecognised line "Extracting from
>/tmp/clamav.15864/clamav-5629223b5dd8e81c/eicar.rar". Please contact the
>authors!
>Aug 13 12:33:05 marcel MailScanner[15790]: Extracting  eicar.com
>^H^H^H^H 65%^H^H^H^H^H  OK
>Aug 13 12:33:05 marcel MailScanner[15790]: ProcessClamAVOutput:
>unrecognised line "Extracting  eicar.com
>^H^H^H^H 65%^H^H^H^H^H  OK ". Please contact the authors!
>Aug 13 12:33:05 marcel MailScanner[15790]:
>/tmp/clamav.15864/clamav-3f13d71ec457535f/eicar.com: Eicar-Test-Signature
>FOUND
>Aug 13 12:33:05 marcel MailScanner[15790]:
>/tmp/clamav.15864/clamav-5629223b5dd8e81c/eicar.rar: Infected Archive
>FOUND
>Aug 13 12:33:05 marcel MailScanner[15790]: (Real infected archive:
>/var/spool/MailScanner/incoming/15790/./i7DAX1jY015851/eicar.rar)
>Aug 13 12:33:05 marcel MailScanner[15790]: ProcessClamAVOutput:
>unrecognised line "(Real infected archive:
>/var/spool/MailScanner/incoming/15790/./i7DAX1jY015851/eicar.rar)". Please
>contact the authors!
>Aug 13 12:33:05 marcel MailScanner[15790]: Virus Scanning: ClamAV found 2
>infections
>Aug 13 12:33:06 marcel MailScanner[15790]: Uninfected: Delivered 1
>messages
>Aug 13 12:33:10 marcel sendmail[15885]: i7DAX1jY015851:
>to=<marcel at irc-addicts.de>, delay=00:00:09, xdelay=00:00:04, mailer=local,
>pri=120515, dsn=2.0.0, stat=Sent
>
>
>
>
>On Fri, 13 Aug 2004, Spicer, Kevin wrote:
>
> > > but looks like it´s a problem from clamav ...
> > >
> > > ProcessClamAVOutput: unrecognised line "/var/spool/MailScanner/incoming
> > > /5297/./i7D8XaSe006363/eicar.rar: RAR module failure". Please contact the
> > > authors!
> >
> > The inbuilt RAR handling in clamav doesn't always work.  Install unrar 
> and make sure the clamav-wrapper script has the line containing --unrar 
> uncommented.
> >
> >
> >
> >
> > BMRB International
> > http://www.bmrb.co.uk
> > +44 (0)20 8566 5000
> > _________________________________________________________________
> > This message (and any attachment) is intended only for the
> > recipient and may contain confidential and/or privileged
> > material.  If you have received this in error, please contact the
> > sender and delete this message immediately.  Disclosure, copying
> > or other action taken in respect of this email or in
> > reliance on it is prohibited.  BMRB International Limited
> > accepts no liability in relation to any personal emails, or
> > content of any email which does not directly relate to our
> > business.
> >
> > ------------------------ MailScanner list ------------------------
> > To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> > 'leave mailscanner' in the body of the email.
> > Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> > the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> >
>
>------------------------ MailScanner list ------------------------
>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>'leave mailscanner' in the body of the email.
>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

-- 
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

</x-flowed>