UNKNOWN CLAMD RETURN
UxBoD
uxbod at splatnix.net
Thu Jul 19 12:17:52 IST 2007
Okay, found what is going off now :) It is when a virus is found in the header :-
Jul 19 07:13:32 bianchi MailScanner[4309]: ERROR1:: ./90FB07CF20C.CB775.header/Email.Hdr.Sanesecurity.07012400 FOUND
Jul 19 07:13:32 bianchi MailScanner[4309]: ERROR1:: ./90FB07CF20C.CB775.header/Email.Hdr.Sanesecurity.07012400 FOUND
Jul 19 07:13:32 bianchi MailScanner[4309]: ERROR1:: ./90FB07CF20C.CB775.header/Email.Hdr.Sanesecurity.07012400 FOUND
Jul 19 07:13:32 bianchi MailScanner[4309]: ERROR1:: ./90FB07CF20C.CB775.header/Email.Hdr.Sanesecurity.07012400 FOUND
Jul 19 07:13:32 bianchi MailScanner[4309]: ERROR1:: ./90FB07CF20C.CB775.header/Email.Hdr.Sanesecurity.07012400 FOUND
Jul 19 07:14:11 bianchi MailScanner[4303]: ERROR1:: ./6C8967CEC4E.D9FD0/pic68.jpg/MSRBL-Images/3-0-_Hw FOUND
Jul 19 07:13:32 bianchi MailScanner[4309]: ERROR1:: ./90FB07CF20C.CB775.header/Email.Hdr.Sanesecurity.07012400 FOUND
Jul 19 07:14:11 bianchi MailScanner[4303]: ERROR1:: ./6C8967CEC4E.D9FD0/pic68.jpg/MSRBL-Images/3-0-_Hw FOUND
Jul 19 07:13:32 bianchi MailScanner[4309]: ERROR1:: ./90FB07CF20C.CB775.header/Email.Hdr.Sanesecurity.07012400 FOUND
Jul 19 07:14:11 bianchi MailScanner[4303]: ERROR1:: ./6C8967CEC4E.D9FD0/pic68.jpg/MSRBL-Images/3-0-_Hw FOUND
Jul 19 07:14:33 bianchi MailScanner[4234]: ERROR1:: ./B818C7CF20C.575C6/msg-4234-4.html/Html.Loan.Gen006.Sanesecurity.06120200 FOUND
as you can see if its a header the second element does not get set ie. <filename.jpg>|<filename.html>.
----- Original Message -----
From: "UxBoD" <uxbod at splatnix.net>
To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
Sent: Thursday, July 19, 2007 11:52:45 AM (GMT) Europe/London
Subject: Re: UNKNOWN CLAMD RETURN
[root at bianchi ~]# clamscan -v --debug /tmp
LibClamAV debug: Initializing the engine (0.91)
----- Original Message -----
From: "René Berber" <r.berber at computer.org>
To: mailscanner at lists.mailscanner.info
Sent: Thursday, July 19, 2007 11:37:49 AM (GMT) Europe/London
Subject: Re: UNKNOWN CLAMD RETURN
Gareth wrote:
> Are you running 0.91 or 0.91.1.
> The build number matches mine which is 0.91.1 :-
That's not a build number, it's the database version.
--
René Berber
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner
Before posting, read http://wiki.mailscanner.info/posting
Support MailScanner development - buy the book off the website!
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner
Before posting, read http://wiki.mailscanner.info/posting
Support MailScanner development - buy the book off the website!
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
More information about the MailScanner
mailing list