Some problems thanks to Clamav 0.93.1

Dave Shariff Yadallee - System Administrator a.k.a. The Root of the Problem root at doctor.nl2k.ab.ca
Fri Jul 4 23:42:09 IST 2008


I understand Clamav 0.93.2 could be coming.

Interesting:  I got

MailScanner.conf says "Virus Scanners = clamav clamavmodule  clamd"
Found these virus scanners installed: clamavmodule
===========================================================================
Virus and Content Scanning: Starting
trap: Illegal number: EXIT
/var/spool/MailScanner/incoming/2724/./1/eicar.com: Eicar-Test-Signature FOUND

trap: Illegal number: EXIT
Virus Scanning: ClamAV found 1 infections
ClamAVModule::INFECTED:: Eicar-Test-Signature:: ./1/eicar.com
Virus Scanning: ClamAVModule found 1 infections
Cannot find Socket (/tmp/clamd) Exiting! at /opt/MailScanner/lib/MailScanner/SweepViruses.pm line 3461
Virus Scanning: Clamd found 1 infections
Infected message 1 came from 10.1.1.1
Virus Scanning: Found 1 viruses
Filename Checks:  (1 eicar.com)
Other Checks: Found 1 problems
===========================================================================
Virus Scanner test reports:
ClamAV said "eicar.com contains Eicar-Test-Signature"
ClamAVModule said "eicar.com was infected: Eicar-Test-Signature"

If any of your virus scanners (clamavmodule)
are not listed there, you should check that they are installed correctly
and that MailScanner is finding them correctly via its virus.scanners.conf. 


Also in MailScanner.conf for clamav users thanks to Clamav 0.93.2 you need:

Monitors for ClamAV Updates = /usr/contrib/share/clamav/*.inc/* /usr/contrib/share/clamav/*.cvd /usr/contrib/share/clamav/*.cld   

Of course replace contrib with local but .cld is the new extenstion.

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



More information about the MailScanner mailing list