UNKNOWN CLAMD RETURN

[Rick Cooper]

 > -----Original Message-----
 > From: mailscanner-bounces at lists.mailscanner.info 
 > [mailto:mailscanner-bounces at lists.mailscanner.info] On 
 > Behalf Of UxBoD
 > Sent: Thursday, July 19, 2007 7:18 AM
 > To: MailScanner discussion
 > Subject: Re: UNKNOWN CLAMD RETURN
 > 
 > Okay, found what is going off now :)  It is when a virus is 
 > found in the header :-
 > 
 > Jul 19 07:13:32 bianchi MailScanner[4309]: ERROR1:: 
 > ./90FB07CF20C.CB775.header/Email.Hdr.Sanesecurity.07012400 FOUND 

Try adding this:

      if ($filename =~ /.+?\sFOUND$/ && $rest eq '') {
        $rest = $filename;
		$filename = $childname
		$childname = '.';
      }

Below my ($dot,$childname,$filename,$rest) = split('/',$results);

I think that shoud catch this and still be safe but what action will be
taken as far as a virus scanner catching a virus that is not in a file, my
guess is this sig is actually catching spam and not a virus. If you can
still test this message try the above and let me know how the messages is
treated.

Julian?

Rick


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.