Antivir

Sun Jan 11 20:52:18 GMT 2004

Hi. I downloaded the 4 files from Eicar, and they are placed in /tmp,
but there's still no change in the result:

/tmp # /usr/lib/MailScanner/antivir-wrapper /usr/lib/AntiVir -allfiles
-s -noboot  -rs -z
-bash: /usr/lib/MailScanner/antivir-wrapper: No such file or directory

Erik Jakobsen wrote:
> Antony Stone wrote:
>
>> On Sunday 11 January 2004 8:24 pm, Erik Jakobsen wrote:
>>
>>
>>> On Sun, 11 Jan 2004 15:45:46 +0000, Julian Field
>>>
>>> <mailscanner at ECS.SOTON.AC.UK> wrote:
>>>
>>>> What does this produce?
>>>>
>>>> cd /tmp (or somewhere with some viruses in it)
>>>> .
>>>
>>>
>>> Julian !. I don't know where I have viruses. Or if I have some.
>>
>>
>>
>> Get yourself a test "virus" from
>> http://www.eicar.org/anti_virus_test_file.htm
>
>
> Hello Antony. Thanks for the URL. Will get one from there.
>
>>
>>> /tmp # /usr/lib/MailScanner/antivir-wrapper /usr/lib/AntiVir
>>> -allfiles -s
>>> -noboot  -rs -z
>>> -bash: /usr/lib/MailScanner/antivir-wrapper: No such file or directory
>>
>>
>>
>> Where did you install MailScanner on your system?
>
>
> I installed it here :
> /var/lock/subsys/MailScanner
> /var/run/MailScanner.pid
> /var/spool/MailScanner
> /var/spool/MailScanner/incoming
> /var/spool/MailScanner/incoming/21574
> /var/spool/MailScanner/incoming/17783
> /var/spool/MailScanner/incoming/8193
> /var/spool/MailScanner/incoming/21670
> /var/spool/MailScanner/incoming/22563
> /var/spool/MailScanner/quarantine
>
>
>
>
>
>
>
>
> /etc/sysconfig/MailScanner
> /etc/rc.d/init.d/MailScanner
> /etc/rc.d/rc0.d/K30MailScanner
> /etc/rc.d/rc1.d/K30MailScanner
> /etc/rc.d/rc2.d/S80MailScanner
> /etc/rc.d/rc3.d/S80MailScanner
> /etc/rc.d/rc4.d/S80MailScanner
> /etc/rc.d/rc5.d/S80MailScanner
> /etc/rc.d/rc6.d/K30MailScanner
> /etc/cron.hourly/check_MailScanner
> /etc/MailScanner
> /etc/MailScanner/mcp
> /etc/MailScanner/mcp/10_example.cf
> /etc/MailScanner/mcp/mcp.spam.assassin.prefs.conf
> /etc/MailScanner/reports
> /etc/MailScanner/reports/cy+en
> /etc/MailScanner/reports/cy+en/deleted.filename.message.txt
> /etc/MailScanner/reports/cy+en/deleted.content.message.txt
> /etc/MailScanner/reports/cy+en/deleted.virus.message.txt
> /etc/MailScanner/reports/cy+en/disinfected.report.txt
> /etc/MailScanner/reports/cy+en/inline.sig.html
> /etc/MailScanner/reports/cy+en/inline.sig.txt
> /etc/MailScanner/reports/cy+en/inline.spam.warning.txt
> /etc/MailScanner/reports/cy+en/inline.warning.html
> /etc/MailScanner/reports/cy+en/inline.warning.txt
> /etc/MailScanner/reports/cy+en/languages.conf
> /etc/MailScanner/reports/cy+en/sender.content.report.txt
> /etc/MailScanner/reports/cy+en/sender.error.report.txt
> /etc/MailScanner/reports/cy+en/sender.filename.report.txt
> /etc/MailScanner/reports/cy+en/sender.mcp.report.txt
> /etc/MailScanner/reports/cy+en/sender.spam.rbl.report.txt
> /etc/MailScanner/reports/cy+en/sender.spam.report.txt
> /etc/MailScanner/reports/cy+en/sender.spam.sa.report.txt
> /etc/MailScanner/reports/cy+en/sender.virus.report.txt
> /etc/MailScanner/reports/cy+en/stored.content.message.txt
> /etc/MailScanner/reports/cy+en/stored.filename.message.txt
> /etc/MailScanner/reports/cy+en/stored.virus.message.txt
> /etc/MailScanner/reports/cz
> /etc/MailScanner/reports/cz/deleted.filename.message.txt
> /etc/MailScanner/reports/cz/deleted.content.message.txt
> /etc/MailScanner/reports/cz/deleted.virus.message.txt
> /etc/MailScanner/reports/cz/disinfected.report.txt
> /etc/MailScanner/reports/cz/inline.sig.html
> /etc/MailScanner/reports/cz/inline.sig.txt
> /etc/MailScanner/reports/cz/inline.spam.warning.txt
> /etc/MailScanner/reports/cz/inline.warning.html
> /etc/MailScanner/reports/cz/inline.warning.txt
> /etc/MailScanner/reports/cz/languages.conf
> /etc/MailScanner/reports/cz/sender.content.report.txt
> /etc/MailScanner/reports/cz/sender.error.report.txt
> /etc/MailScanner/reports/cz/sender.filename.report.txt
>
>
>
>
>
> /etc/MailScanner/rules
> /etc/MailScanner/rules/spam.whitelist.rules
> /etc/MailScanner/rules/EXAMPLES
> /etc/MailScanner/rules/README
> /etc/MailScanner/spam.assassin.prefs.conf
> /etc/MailScanner/MailScanner.conf
> /etc/MailScanner/filename.rules.conf
> /etc/MailScanner/filetype.rules.conf
> /etc/MailScanner/virus.scanners.conf
> /etc/MailScanner/spam.lists.conf
> /usr/share/doc/mailscanner-4.24/html/man/MailScanner.8.html
> /usr/share/doc/mailscanner-4.24/html/man/MailScanner.8
> /usr/share/doc/mailscanner-4.24/html/man/MailScanner.conf.5.html
> /usr/share/doc/mailscanner-4.24/html/man/MailScanner.conf.5
> /usr/share/man/man5/MailScanner.conf.5.gz
> /usr/share/man/man8/MailScanner.8.gz
> /usr/lib/MailScanner
> /usr/lib/MailScanner/MailScanner
> /usr/lib/MailScanner/MailScanner/ConfigDefs.pl
> /usr/lib/MailScanner/MailScanner/Config.pm
> /usr/lib/MailScanner/MailScanner/EximDiskStore.pm
> /usr/lib/MailScanner/MailScanner/CustomConfig.pm
> /usr/lib/MailScanner/MailScanner/Exim.pm
> /usr/lib/MailScanner/MailScanner/MCPMessage.pm
> /usr/lib/MailScanner/MailScanner/Lock.pm
> /usr/lib/MailScanner/MailScanner/Log.pm
> /usr/lib/MailScanner/MailScanner/MCP.pm
> /usr/lib/MailScanner/MailScanner/Message.pm
> /usr/lib/MailScanner/MailScanner/Mail.pm
> /usr/lib/MailScanner/MailScanner/MessageBatch.pm
> /usr/lib/MailScanner/MailScanner/PFDiskStore.pm
> /usr/lib/MailScanner/MailScanner/Postfix.pm
> /usr/lib/MailScanner/MailScanner/Quarantine.pm
> /usr/lib/MailScanner/MailScanner/Queue.pm
> /usr/lib/MailScanner/MailScanner/RBLs.pm
> /usr/lib/MailScanner/MailScanner/SA.pm
> /usr/lib/MailScanner/MailScanner/SMDiskStore.pm
> /usr/lib/MailScanner/MailScanner/Sendmail.pm
> /usr/lib/MailScanner/MailScanner/SweepContent.pm
> /usr/lib/MailScanner/MailScanner/SweepOther.pm
> /usr/lib/MailScanner/MailScanner/SweepViruses.pm
> /usr/lib/MailScanner/MailScanner/SystemDefs.pm
> /usr/lib/MailScanner/MailScanner/TNEF.pm
> /usr/lib/MailScanner/MailScanner/WorkArea.pm
> /usr/lib/MailScanner/MailScanner/ZMDiskStore.pm
> /usr/lib/MailScanner/MailScanner/ZMailer.pm
> /usr/lib/MailScanner/antivir-autoupdate
> /usr/lib/MailScanner/MailScanner.pm
> /usr/lib/MailScanner/bitdefender-autoupdate
> /usr/lib/MailScanner/antivir-wrapper
> /usr/lib/MailScanner/kaspersky-autoupdate
>
>
>
>
> /usr/lib/MailScanner/rav-wrapper
> /usr/lib/MailScanner/trend-autoupdate
> /usr/lib/MailScanner/sophos-wrapper
> /usr/lib/MailScanner/trend-wrapper
> /usr/sbin/MailScanner
> /usr/sbin/check_MailScanner
> /usr/sbin/upgrade_MailScanner_conf
> /opt/MailScanner-4.24-5
> /opt/MailScanner-4.24-5/perl-Convert-TNEF-0.17-1.src.rpm
> /opt/MailScanner-4.24-5/perl-File-Spec-0.82-1.src.rpm
> /opt/MailScanner-4.24-5/perl-File-Temp-0.12-1.src.rpm
> /opt/MailScanner-4.24-5/perl-HTML-Parser-3.26-2.src.rpm
> /opt/MailScanner-4.24-5/perl-HTML-Tagset-3.03-1.src.rpm
> /opt/MailScanner-4.24-5/perl-IO-stringy-2.108-1.src.rpm
> /opt/MailScanner-4.24-5/perl-MailTools-1.50-1.src.rpm
> /opt/MailScanner-4.24-5/perl-MIME-Base64-2.12-1.src.rpm
> /opt/MailScanner-4.24-5/perl-MIME-tools-5.411-pl4.2.src.rpm
> /opt/MailScanner-4.24-5/perl-TimeDate-1.1301-2.src.rpm
> /opt/MailScanner-4.24-5/CheckModuleVersion
> /opt/MailScanner-4.24-5/install.sh
> /opt/MailScanner-4.24-5/README
> /opt/MailScanner-4.24-5/ExtUtils-MakeMaker-6.05.tar.gz
> /opt/MailScanner-4.24-5/Update-MakeMaker.sh
> /opt/MailScanner-4.24-5/tnef-1.1.4-sizelimit1.i386.rpm
> /opt/MailScanner-4.24-5/QuickInstall.txt
> /opt/MailScanner-4.24-5/mailscanner-4.24-5.noarch.rpm
> /opt/MailScanner-4.24-5/ExtUtils-MakeMaker-6.05
> /opt/MailScanner-4.24-5/ExtUtils-MakeMaker-6.05/t
> /opt/MailScanner-4.24-5/ExtUtils-MakeMaker-6.05/t/problems.t
> /opt/MailScanner-4.24-5/ExtUtils-MakeMaker-6.05/t/lib
> /opt/MailScanner-4.24-5/ExtUtils-MakeMaker-6.05/t/lib/Test
> /opt/MailScanner-4.24-5/ExtUtils-MakeMaker-6.05/t/lib/Test/Builder.pm
> /opt/MailScanner-4.24-5/ExtUtils-MakeMaker-6.05/t/lib/Test/More.pm
> /opt/MailScanner-4.24-5/ExtUtils-MakeMaker-6.05/t/lib/Test/Simple.pm
> /opt/MailScanner-4.24-5/ExtUtils-MakeMaker-6.05/t/lib/TieOut.pm
> /opt/MailScanner-4.24-5/ExtUtils-MakeMaker-6.05/t/lib/MakeMaker
> /opt/MailScanner-4.24-5/ExtUtils-MakeMaker-6.05/t/lib/MakeMaker/Test
> /opt/MailScanner-4.24-5/ExtUtils-MakeMaker-6.05/t/lib/MakeMaker/Test/Utils.pm
>
> /opt/MailScanner-4.24-5/ExtUtils-MakeMaker-6.05/t/VERSION_FROM.t
> /opt/MailScanner-4.24-5/ExtUtils-MakeMaker-6.05/t/MM_OS2.t
> /opt/MailScanner-4.24-5/ExtUtils-MakeMaker-6.05/t/testlib.t
> /opt/MailScanner-4.24-5/ExtUtils-MakeMaker-6.05/t/Manifest.t
> /opt/MailScanner-4.24-5/ExtUtils-MakeMaker-6.05/t/MM_Unix.t
> /opt/MailScanner-4.24-5/ExtUtils-MakeMaker-6.05/t/MM_Cygwin.t
> /opt/MailScanner-4.24-5/ExtUtils-MakeMaker-6.05/t/Command.t
> /opt/MailScanner-4.24-5/ExtUtils-MakeMaker-6.05/t/writemakefile_args.t
> /opt/MailScanner-4.24-5/ExtUtils-MakeMaker-6.05/t/backwards.t
> /opt/MailScanner-4.24-5/ExtUtils-MakeMaker-6.05/t/MM_BeOS.t
> /opt/MailScanner-4.24-5/ExtUtils-MakeMaker-6.05/t/prefixify.t
> /opt/MailScanner-4.24-5/ExtUtils-MakeMaker-6.05/t/MM_VMS.t
> /opt/MailScanner-4.24-5/ExtUtils-MakeMaker-6.05/t/INST.t
>
>
>> Antony.
>>
>> --
>> "Note: Windows 98, Windows 98SE and Windows 95 are not affected by [MS
>> Blaster].   However, these products are no longer supported.   Users
>> of these
>> products are strongly encouraged to upgrade to later versions."
>>
>> (which *are* affected by MS Blaster...)
>>
>> http://www.microsoft.com/security/security_bulletins/ms03-026.asp
>>
>>                                                      Please reply to
>> the list;
>>                                                            please
>> don't CC me.
>>
>
> --
> Med venlig hilsen - Best regards.
> Erik Jakobsen - eja at urbakken.dk.
> Licensed radioamateur with the callsign OZ4KK.
> SuSE Linux 8.2 Proff.
> Registered as user #319488 with the Linux Counter, http://counter.li.org.
>

--
Med venlig hilsen - Best regards.
Erik Jakobsen - eja at urbakken.dk.
Licensed radioamateur with the callsign OZ4KK.
SuSE Linux 8.2 Proff.
Registered as user #319488 with the Linux Counter, http://counter.li.org.