<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=US-ASCII">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2656.60">
<TITLE>MS 4.2x + ClamAV</TITLE>
</HEAD>
<BODY>
<P ALIGN=LEFT><FONT SIZE=2>I am still seeing some oddities with the latest stable release of ClamAV within MS.</FONT> <FONT SIZE=2>And</FONT> <FONT SIZE=2>I believe its an MS issue,</FONT> <FONT SIZE=2>I am getting the following in the maillog:<BR>
</FONT></P>
<P ALIGN=LEFT><FONT SIZE=2>Jun 27 11:47:31 spambox MailScanner[2498]: Virus and Content Scanning: Starting<BR>
</FONT></P>
<P ALIGN=LEFT><FONT SIZE=2>Yet nothing following as to any actions, etc. Yet when</FONT> <FONT SIZE=2>I run clamscan against my HAM and SPAM archives</FONT> <FONT SIZE=2>I</FONT> <FONT SIZE=2>DO in fact get a ton of</FONT> <FONT SIZE=2>"hits" for various virii, as in the following:<BR>
</FONT></P>
<P ALIGN=LEFT><FONT SIZE=2>$clamscan -r -l scan.txt .<BR>
./nonspam/h5R2GLoi025793: OK<BR>
./nonspam/h5R2VVoi027725: OK<BR>
./nonspam/h5R2Cpoi024788: Exploit.IFrame FOUND<BR>
./nonspam/h5R2Fvoi025725: OK<BR>
./nonspam/h5R2UEoi027576: OK<BR>
./nonspam/h5R2E1oi025134: OK</FONT></P>
<P ALIGN=LEFT><FONT SIZE=2>./nonspam/h5R2Emoi025373: OK<BR>
./nonspam/h5R2VHoi027687: OK<BR>
./nonspam/h5R2E2oi025140: OK<BR>
./nonspam/h5R2QVoi027269: OK<BR>
./nonspam/h5R2Gnoi025894: OK<BR>
./nonspam/h5R2Ukoi027655: OK<BR>
./nonspam/h5R2PNoi027167: Exploit.IFrame FOUND<BR>
</FONT></P>
<P ALIGN=LEFT><FONT SIZE=2>Does anyone have any ideas?<BR>
</FONT></P>
<P ALIGN=LEFT><FONT SIZE=2>Thanks in advance<BR>
Michael Weiner</FONT></P>
</BODY>
</HTML>