MailScanner 4.72.2-1 and clamavmodule

Jan Elmqvist Nielsen jen at
Tue Sep 30 12:22:40 IST 2008

I have used install-Clam-0.94-SA-3.2.5

Clamavmodule dosn't report
ClamAVModule::INFECTED:: Trojan.Agent-52097:: ./m8UAsTP2019721/
in maillog

Virus Scanning: ClamAVModule found 1 infections

MailScanner --lint show
Trying to setlogsock(unix)
Read 850 hostnames from the phishing whitelist
Read 5268 hostnames from the phishing blacklist
Config: calling custom init function MailWatchLogging
Started SQL Logging child
Checking version numbers...
Version number in MailScanner.conf (4.72.2) is correct.

Checking for SpamAssassin errors (if you use it)...
SpamAssassin temporary working directory is /var/spool/MailScanner/incoming/SpamAssassin-Temp
SpamAssassin temp dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp
Using SpamAssassin results cache
Connected to SpamAssassin cache database
SpamAssassin reported no errors.
Using locktype = posix
MailScanner.conf says "Virus Scanners = kaspersky-4.5 avg clamavmodule"
Found these virus scanners installed: clamavmodule, kaspersky-4.5, f-protd-6, f-secure, avg
Filename Checks:  (1
Filetype Checks: Allowing 1
Other Checks: Found 1 problems
Virus and Content Scanning: Starting
/var/spool/MailScanner/incoming/23006/1/       INFECTED        EICAR-Test-File
Virus Scanning: Kaspersky found 1 infections
Avg: Virus identified EICAR_Test in
Virus Scanning: Avg found 1 infections
ClamAVModule::INFECTED:: Eicar-Test-Signature:: ./1/
ClamAVModule::INFECTED:: Eicar-Test-Signature:: ./1/
Virus Scanning: ClamAVModule found 2 infections
Infected message 1 came from
Virus Scanning: Found 2 viruses
Virus Scanner test reports:
Kaspersky said "/var/spool/MailScanner/incoming/23006/1/       INFECTED        EICAR-Test-File"
Avg said "Found virus EICAR_Test in file"
ClamAVModule said " was infected: Eicar-Test-Signature"

If any of your virus scanners (clamavmodule,kaspersky-4.5,f-protd-6,f-secure,avg)
are not listed there, you should check that they are installed correctly
and that MailScanner is finding them correctly via its virus.scanners.conf.
Config: calling custom end function MailWatchLogging

Is I missing something in clamd.conf or freshclam.conf?

/Jan Elmqvist Nielsen

More information about the MailScanner mailing list