Problem with MailScanner and ClamAV

[Sven]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Hi,

i got a problem with my MailScanner and ClamAV. I used F-Prot normaly to
Scan my Emails. After i noticed that F-Prot doesent detect a special
Virus called "HTML.Phishing.Bank-107" i looked for another Scanner and
found ClamAV.

Now my Problem. ClamAV detects the Virus now. MailScanner also detects
this but the Attachment doesent get filtered. If i use Eicar.com in a
zipped archive there is no problem,.. I have disabled the File checks so
Eicar gets filtered because its a virus and not a executable File or
some File ending up with .com

Some Entries from my Configfile:
MailScanner.conf
Silent Viruses = HTML-IFrame All-Viruses
Still Deliver Silent Viruses = no

and the infos from logfile:

Apr 14 08:25:42 linux MailScanner[26476]: New Batch: Scanning 1
messages, 8661 bytes
Apr 14 08:25:47 linux MailScanner[26476]: Virus and Content Scanning:
Starting
Apr 14 08:25:50 linux MailScanner[26476]:
/tmp/clamav.26492/clamav-944d9e5c16ead0f4/Phish/OA0_1112672959_NT_MAIL_1/message.txt:
HTML.Phishing.Bank-107 FOUND
Apr 14 08:25:50 linux MailScanner[26476]:
/tmp/clamav.26492/clamav-944d9e5c16ead0f4/Phish/OA1_1112672961_NT_MAIL_1/message.txt:
HTML.Phishing.Bank-107 FOUND
Apr 14 08:25:50 linux MailScanner[26476]: Virus Scanning: ClamAV found 2
infections
Apr 14 08:25:50 linux MailScanner[26476]: Virus Scanning: Found 2 viruses
Apr 14 08:25:50 linux MailScanner[26476]: Requeue: 0755CA143.7CF31 to
763B114149
Apr 14 08:25:50 linux MailScanner[26476]: Uninfected: Delivered 1 messages

My Versions are:
MailScanner:
Running on
Linux mscan 2.4.21-144-default #1 Fri Nov 14 00:01:36 UTC 2003 i686 i686
i386 GNU/Linux
This is SuSE Linux 9.0 (i586)
This is Perl version 5.008001 (5.8.1)
This is MailScanner version 4.40.11

ClamAV:
ClamAV 0.83/830/Thu Apr 14 22:44:31 2005

Im using clamscan and removed clamscand from the System.

Hope someone can help me.

Regards, Sven

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!