UNKNOWN CLAMD RETURN

[Rick Cooper]

 > -----Original Message-----
 > From: mailscanner-bounces at lists.mailscanner.info 
 > [mailto:mailscanner-bounces at lists.mailscanner.info] On 
 > Behalf Of UxBoD
 > Sent: Thursday, July 19, 2007 6:18 AM
 > To: MailScanner discussion
 > Subject: Re: UNKNOWN CLAMD RETURN
 > 
 > Sorry here is what versions running :-
 > 
 > MailScanner 4.62.3 (RPM)
 > ClamAV 0.91/3697/Wed Jul 18 20:18:47 2007 (RPM)
 > 
 > Cheers,
 > ----- Original Message -----
 > From: "UxBoD" <uxbod at splatnix.net>
 > To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
 > Sent: Thursday, July 19, 2007 11:12:51 AM (GMT) Europe/London
 > Subject: Re: UNKNOWN CLAMD RETURN
 > 
 > I have added a couple of extra debug lines to SweepViruses.pm :-
 > 
 > print "ERROR:: UNKNOWN CLAMD RETURN $results :: $ScanDir\n";
 > print "ERROR2:: $rest\n";
 > print "ERROR3:: $results\n";
 > 
 > and get the following :-
 > 
 > Jul 19 06:05:08 bianchi MailScanner[11482]: ERROR2::  
 > Jul 19 06:05:08 bianchi MailScanner[11482]: ERROR3:: 
 > ./9F1F37CF28F.C25E5.header/Email.Hdr.Sanesecurity.07061900 FOUND 
 > 
[...]

That line is really formated wrong, the filename is missing from the output.
Should be something like
./1IBU5l-0003RA-Ru/eicar.com/Eicar-Test-Signature FOUND
^        ^             ^             ^
Dot      Child         File          rest

Could you scan an eicar test file from the command line with clamdscan and
see how the output looks?

Rick


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.