Problem with ClamAVModule
Denis.Beauchemin at USHERBROOKE.CA
Thu Oct 27 16:24:27 IST 2005
[ The following text is in the "ISO-8859-1" character set. ]
[ Your display is set for the "US-ASCII" character set. ]
[ Some characters may be displayed incorrectly. ]
Julian Field wrote:
>-----BEGIN PGP SIGNED MESSAGE-----
>On 27 Oct 2005, at 14:01, John Wilcock wrote:
>>Denis Beauchemin wrote:
>>>John Wilcock wrote:
>>>>Looks like your clamav is using a French locale, whereas
>>>>MailScanner is no doubt looking for clam's standard English
>>>ClamAV's message is in English:
>>>Oct 26 15:07:08 126.96.36.199 MailScanner:
>>>ClamAVModule::INFECTED:: HTML.Phishing.Bank-1:: ./j9QJ6iY3027535/
>>>I agree that MS runs with French locale but it doesn't cause any
>>>problem with McAfee or Bitdefender. Why would it act this way
>>Sorry, I had a vague recollection of problems parsing certain virus
>>scanner output with the system locale set to French, but on closer
>>inspection I think I was barking up the wrong tree there.
>When using either of the module-based virus scanners, the output you
>are seeing from Clam is actually generated by MailScanner itself, and
>there is no provision for translation of the syntax of these lines.
>So, though it might be a problem when using "clamav", the locale does
>not affect "clamavmodule" or "sophossavi".
Then how could we explain the fact that MS logged an infected file but
sent it anyways to the user? Do I have something amiss in my config?
°v° Denis Beauchemin, analyste
/(_)\ Université de Sherbrooke, S.T.I.
^ ^ T: 819.821.8000x2252 F: 819.821.8045
------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
Support MailScanner development - buy the book off the website!
More information about the MailScanner