Some problems thanks to Clamav 0.93.1
Dave Shariff Yadallee - System Administrator a.k.a. The Root of the
Problem
root at doctor.nl2k.ab.ca
Fri Jul 4 23:42:09 IST 2008
I understand Clamav 0.93.2 could be coming.
Interesting: I got
MailScanner.conf says "Virus Scanners = clamav clamavmodule clamd"
Found these virus scanners installed: clamavmodule
===========================================================================
Virus and Content Scanning: Starting
trap: Illegal number: EXIT
/var/spool/MailScanner/incoming/2724/./1/eicar.com: Eicar-Test-Signature FOUND
trap: Illegal number: EXIT
Virus Scanning: ClamAV found 1 infections
ClamAVModule::INFECTED:: Eicar-Test-Signature:: ./1/eicar.com
Virus Scanning: ClamAVModule found 1 infections
Cannot find Socket (/tmp/clamd) Exiting! at /opt/MailScanner/lib/MailScanner/SweepViruses.pm line 3461
Virus Scanning: Clamd found 1 infections
Infected message 1 came from 10.1.1.1
Virus Scanning: Found 1 viruses
Filename Checks: (1 eicar.com)
Other Checks: Found 1 problems
===========================================================================
Virus Scanner test reports:
ClamAV said "eicar.com contains Eicar-Test-Signature"
ClamAVModule said "eicar.com was infected: Eicar-Test-Signature"
If any of your virus scanners (clamavmodule)
are not listed there, you should check that they are installed correctly
and that MailScanner is finding them correctly via its virus.scanners.conf.
Also in MailScanner.conf for clamav users thanks to Clamav 0.93.2 you need:
Monitors for ClamAV Updates = /usr/contrib/share/clamav/*.inc/* /usr/contrib/share/clamav/*.cvd /usr/contrib/share/clamav/*.cld
Of course replace contrib with local but .cld is the new extenstion.
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
More information about the MailScanner
mailing list