Clamd throwing ClamAVModule log entries

[Julian Field]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Stef Morrell wrote:
> Hello,
>
> I've just switched over from Clam 0.92.1 + ClamAVModule to 0.93 and
> Clamd and am seeing entries in the log such as
>
> May  1 12:36:44 fedecks MailScanner[24892]: ClamAVModule::INFECTED::
> Email.Hdr.Sanesecurity.08022900 FOUND :: ./8DEBD3741C2.4D00E/ 
> May  1 12:36:44 fedecks MailScanner[24892]: ClamAVModule::INFECTED::
> Email.Hdr.Sanesecurity.08022900 FOUND :: ./D02EC37419C.E60B6/ 
> May  1 12:36:45 fedecks MailScanner[24892]: Virus Scanning: Clamd found
> 2 infections 
>
> I'm not massively worried as the system appears to be working correctly,
> but I am slightly confused. I presume this is a 'feature' rather than a
> 'bug' ?
>   
Yes, sorry, it's down to the way the parsers interact with each other. I 
use the same parser for clamavmodule, clamd and sophossavi, and 
sometimes it gets the name wrong :-(
> Regards
>
> Stef
> Stefan Morrell          | Operations Director
> Tel: 0845 3452820       | Alpha Omega Computers Ltd
> Fax: 0845 3452830       | Incorporating Level 5 Internet
> stef at aoc-uk.com         | stef at l5net.net
>
> Alpha Omega Computers Ltd, Unit 57, BBTC, Grange Road, Batley, WF17 6ER.
> Registered in England No. 3867142.  VAT No. GB734421454
>   

Jules

- -- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

Need help customising MailScanner?
Contact me!
Need help fixing or optimising your systems?
Contact me!
Need help getting you started solving new requirements from your boss?
Contact me!

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.8.2 (Build 3005)
Comment: Use Enigmail to decrypt or check this message is legitimate
Charset: ISO-8859-1

wj8DBQFIGeS3EfZZRxQVtlQRAsU9AJ9lA+oiI3HxGZzGR/Onbaf9PfUQEwCfWdF3
25zLpBPAQpbj3ObHaSasNJM=
=FmF7
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.