Mailscanner Version 4.71.10-1 / ClamAV 0.94 infection reporting.

[Alex Broens]

Good day All,

Mailscanner Version 4.71.10-1 / ClamAV 0.94 using ClamD


MailScanner --lint:

Virus and Content Scanning: Starting
ClamAVModule::INFECTED:: Eicar-Test-Signature FOUND :: ./1/
ClamAVModule::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com
Virus Scanning: Clamd found 2 infections
Infected message 1 came from 10.1.1.1
Virus Scanning: Found 2 viruses
Filename Checks:  (1 eicar.com)

Doesn't seem right/elegant to me.

It causes Mailwatch 1.x to report:

Clamd: message was infected: Trojan.Fakealert-532 FOUND
Clamd: Late.Night.rar was infected: Trojan.Fakealert-532


Can anybody reproduce running "MailScanner --lint"

Jules?

thanks

Alex