Anti-virus woes...

[Glenn Steen]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

On 30/11/05, Ken Goods <KGoods at aiainsurance.com> wrote:
(snip)
> [root at gw-mail MailScanner]# clamscan
> /var/spool/MailScanner/quarantine/20051129/jATKRZ2n029044/File-packed_dataIn
> fo.exe
> /var/spool/MailScanner/quarantine/20051129/jATKRZ2n029044/File-packed_dataIn
> fo.exe: Worm.Sober.U FOUND
>
> ----------- SCAN SUMMARY -----------
> Known viruses: 41292
> Engine version: 0.87.1
> Scanned directories: 0
> Scanned files: 1
> Infected files: 1
> Data scanned: 0.18 MB
> Time: 6.388 sec (0 m 6 s)
> [root at gw-mail MailScanner]# /usr/lib/MailScanner/clamav-wrapper /usr
> /var/spool/MailScanner/quarantine/20051129/jATKRZ2n029044/File-packed_dataIn
> fo.exe
> /var/spool/MailScanner/quarantine/20051129/jATKRZ2n029044/File-packed_dataIn
> fo.exe: OK
>
> ----------- SCAN SUMMARY -----------
> Known viruses: 30684
> Engine version: 0.87.1
> Scanned directories: 0
> Scanned files: 1
> Infected files: 0
> Data scanned: 0.24 MB
> Time: 3.745 sec (0 m 3 s)
> [root at gw-mail MailScanner]#
>
>
> So it seems that clamscan works fine but the virus is not detected using the
> wrapper.
>
> Thanks for any clues,
> Ken
>
> Ken Goods
> Network Administrator
> AIA/CropUSA Insurance, Inc.

Does "which clamscan" give "/usr/bin/clamscan"?

--
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!