MailScanner 4.72.2-1 and clamavmodule

Jan Elmqvist Nielsen jen at ah.dk
Tue Sep 30 12:22:40 IST 2008


I have used install-Clam-0.94-SA-3.2.5

Clamavmodule dosn't report
ClamAVModule::INFECTED:: Trojan.Agent-52097:: ./m8UAsTP2019721/
in maillog

Only
Virus Scanning: ClamAVModule found 1 infections

MailScanner --lint show
Trying to setlogsock(unix)
Read 850 hostnames from the phishing whitelist
Read 5268 hostnames from the phishing blacklist
Config: calling custom init function MailWatchLogging
Started SQL Logging child
Checking version numbers...
Version number in MailScanner.conf (4.72.2) is correct.

Checking for SpamAssassin errors (if you use it)...
SpamAssassin temporary working directory is /var/spool/MailScanner/incoming/SpamAssassin-Temp
SpamAssassin temp dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp
Using SpamAssassin results cache
Connected to SpamAssassin cache database
SpamAssassin reported no errors.
Using locktype = posix
MailScanner.conf says "Virus Scanners = kaspersky-4.5 avg clamavmodule"
Found these virus scanners installed: clamavmodule, kaspersky-4.5, f-protd-6, f-secure, avg
===========================================================================
Filename Checks:  (1 eicar.com)
Filetype Checks: Allowing 1 eicar.com
Other Checks: Found 1 problems
Virus and Content Scanning: Starting
/var/spool/MailScanner/incoming/23006/1/eicar.com       INFECTED        EICAR-Test-File
Virus Scanning: Kaspersky found 1 infections
Avg: Virus identified EICAR_Test in eicar.com
Virus Scanning: Avg found 1 infections
ClamAVModule::INFECTED:: Eicar-Test-Signature:: ./1/
ClamAVModule::INFECTED:: Eicar-Test-Signature:: ./1/eicar.com
Virus Scanning: ClamAVModule found 2 infections
Infected message 1 came from 10.1.1.1
Virus Scanning: Found 2 viruses
===========================================================================
Virus Scanner test reports:
Kaspersky said "/var/spool/MailScanner/incoming/23006/1/eicar.com       INFECTED        EICAR-Test-File"
Avg said "Found virus EICAR_Test in file eicar.com"
ClamAVModule said "eicar.com was infected: Eicar-Test-Signature"

If any of your virus scanners (clamavmodule,kaspersky-4.5,f-protd-6,f-secure,avg)
are not listed there, you should check that they are installed correctly
and that MailScanner is finding them correctly via its virus.scanners.conf.
Config: calling custom end function MailWatchLogging

Is I missing something in clamd.conf or freshclam.conf?

/Jan Elmqvist Nielsen


More information about the MailScanner mailing list