Antivir and Clam patches

[Julian Field]

<x-flowed>
And did you have the permissions etc setup so that the clamav user could
read the files when running the unrar program. And have you told it where
to find the unrar program?
What did your logs say when you scanned the eicar.rar--->eicar.com file?

At 12:05 16/08/2004, you wrote:
>Hi there,
>
>
>
>On Fri, 13 Aug 2004, Julian Field wrote:
>
> > It is often very difficult (as it is in this case) to attempt to extract
> > the virus name, sorry.
> >
>i see..
>but what i am wondering, is the following:
>
>The same file as virus as ordinary file was tagged as this
>eicar-test-file.
>The exact same file, within a zip got tagged as eicar-test-file.
>But only within the rar-file, the exact same file, did not state as
>eicar-test-file.
>
>There is no difference within the file or the contained test-file.
>The only difference is the way it got through..
>once directly..then within a zip and then within a rar..
>and directly and as zip the file got scanned and the real virus-name was
>mentioned..
>
>only as rar-file this does not work
>
>i hope you will be able to understand me :) as it is hot here.. ;)
>
>Greetings
>
>Marcel
>
>------------------------ MailScanner list ------------------------
>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>'leave mailscanner' in the body of the email.
>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
</x-flowed>