UNKNOWN CLAMD RETURN

UxBoD uxbod at splatnix.net
Thu Jul 19 12:17:52 IST 2007


Okay, found what is going off now :)  It is when a virus is found in the header :-

Jul 19 07:13:32 bianchi MailScanner[4309]: ERROR1:: ./90FB07CF20C.CB775.header/Email.Hdr.Sanesecurity.07012400 FOUND 
Jul 19 07:13:32 bianchi MailScanner[4309]: ERROR1:: ./90FB07CF20C.CB775.header/Email.Hdr.Sanesecurity.07012400 FOUND 
Jul 19 07:13:32 bianchi MailScanner[4309]: ERROR1:: ./90FB07CF20C.CB775.header/Email.Hdr.Sanesecurity.07012400 FOUND 
Jul 19 07:13:32 bianchi MailScanner[4309]: ERROR1:: ./90FB07CF20C.CB775.header/Email.Hdr.Sanesecurity.07012400 FOUND 
Jul 19 07:13:32 bianchi MailScanner[4309]: ERROR1:: ./90FB07CF20C.CB775.header/Email.Hdr.Sanesecurity.07012400 FOUND 
Jul 19 07:14:11 bianchi MailScanner[4303]: ERROR1:: ./6C8967CEC4E.D9FD0/pic68.jpg/MSRBL-Images/3-0-_Hw FOUND 
Jul 19 07:13:32 bianchi MailScanner[4309]: ERROR1:: ./90FB07CF20C.CB775.header/Email.Hdr.Sanesecurity.07012400 FOUND 
Jul 19 07:14:11 bianchi MailScanner[4303]: ERROR1:: ./6C8967CEC4E.D9FD0/pic68.jpg/MSRBL-Images/3-0-_Hw FOUND 
Jul 19 07:13:32 bianchi MailScanner[4309]: ERROR1:: ./90FB07CF20C.CB775.header/Email.Hdr.Sanesecurity.07012400 FOUND 
Jul 19 07:14:11 bianchi MailScanner[4303]: ERROR1:: ./6C8967CEC4E.D9FD0/pic68.jpg/MSRBL-Images/3-0-_Hw FOUND 
Jul 19 07:14:33 bianchi MailScanner[4234]: ERROR1:: ./B818C7CF20C.575C6/msg-4234-4.html/Html.Loan.Gen006.Sanesecurity.06120200 FOUND 

as you can see if its a header the second element does not get set ie. <filename.jpg>|<filename.html>.
----- Original Message -----
From: "UxBoD" <uxbod at splatnix.net>
To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
Sent: Thursday, July 19, 2007 11:52:45 AM (GMT) Europe/London
Subject: Re: UNKNOWN CLAMD RETURN

[root at bianchi ~]# clamscan -v --debug /tmp
LibClamAV debug: Initializing the engine (0.91)

----- Original Message -----
From: "René Berber" <r.berber at computer.org>
To: mailscanner at lists.mailscanner.info
Sent: Thursday, July 19, 2007 11:37:49 AM (GMT) Europe/London
Subject: Re: UNKNOWN CLAMD RETURN

Gareth wrote:

> Are you running 0.91 or 0.91.1.
> The build number matches mine which is 0.91.1 :-

That's not a build number, it's the database version.
-- 
René Berber

--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



More information about the MailScanner mailing list