Scan options for clamscan or other AV

[Brent Bolin]

<x-flowed>
>>Did have to edit virus.scanners.conf to get clamav to work
>>had to add bin /usr/local/bin
>
>That's fine, that's a config file :-)
>
>>Still having problems getting vexira to work.  Works from the command line
>>but /var/log/maillog dosen't detect any eicar virus.
>
>What does
>
>cd /tmp
>/usr/lib/MailScanner/vexira-wrapper /usr/lib/Vexira --allfiles -s -z
>-noboot -nombr -r1 -rs -lang=EN --alltypes .
>
>produce? (don't forget the "." on the end)
>
>Any errors? If not, what version of Vexira are you using?
>Please can you send me the output of the above command. Might help if you
>put a copy of eicar.com in a subdirectory of /tmp so that it has something
>to find.

I have three virus files in the /tmp directory.

Eicar
Worm/Netsky.D.Dam worm
Worm/Mydoom.M worm

When I use the arguments you gave me(from SweepViruses.pm) vexira detects 
all three.  With no arguments it only finds eicar.com

No errors are displayed by running vexira from the command line or 
/var/log/maillog

vexira --version
6.27.0.6
operating system: FreeBSD
product version:  2.2.1-14
engine version:   6.27.0.6
packlib version:  2.0.3.13 (supports 24 formats)
vdf version:      6.27.0.21

product:          Vexira Antivirus Server
key file:         LICENSE.KEY
registered user:
serial number:    2003000000
key expires:      13 Feb 2006
run mode:         COMMERCIAL

product:          Vexira Antivirus Workstation
key file:         LICENSE.KEY
registered user:
serial number:    2003000000
key expires:      13 Feb 2006
run mode:         COMMERCIAL

product:          Vexira Antivirus (command line scanner)
key file:         LICENSE.KEY
registered user:
serial number:    2003000000
key expires:      13 Feb 2006
run mode:         COMMERCIAL

_________________________________________________________________
Don^Òt just search. Find. Check out the new MSN Search! 
http://search.msn.click-url.com/go/onm00200636ave/direct/01/

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

</x-flowed>