Problem with ClamAVModule

[Denis Beauchemin]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

John Wilcock wrote:

> Denis Beauchemin wrote:
>
>> Oct 26 15:06:59 132.210.244.90 MailScanner[28920]: Message 
>> j9QJ6iY3027535 from 80.102.175.24 
>> (kontounterstutzung02 at vr-networld.de) to usherbrooke.ca is est un 
>> polluriel, SpamAssassin (score=10.283, 
>
>                        ^^^^^^^^^^^^^^^^
> Looks like your clamav is using a French locale, whereas MailScanner 
> is no doubt looking for clam's standard English messages...
>
> John.
>
John,

ClamAV's message is in English:
Oct 26 15:07:08 132.210.244.90 MailScanner[28920]: 
ClamAVModule::INFECTED:: HTML.Phishing.Bank-1:: 
./j9QJ6iY3027535/msg-28920-1410.html

I agree that MS runs with French locale but it doesn't cause any problem 
with McAfee or Bitdefender.  Why would it act this way with ClamAV?

I looked in MS' source file SweepViruses.pm but couldn't figure out why 
it didn't see that message as indicating an infection.

Denis

-- 
   _
  °v°   Denis Beauchemin, analyste
 /(_)\  Université de Sherbrooke, S.T.I.
  ^ ^   T: 819.821.8000x2252 F: 819.821.8045

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!