Try clamscan rather than clamdscan.  I was having a similar problem and
it started working when I used clamscan rather than clamdscan.  I
assumed it was a config issue on my part, but....

On Tue, 2004-01-27 at 12:05, Erik Bourget wrote:
> I have no idea how this mail got so messed up, heh.  I guess I'll try again.
> 
> Hey,
> 
> Clam does catch other viruses but is failing to catch this sco.a thing for
> some reason.  Does anyone have any insight?
> 
> The only two kinds of malware caught this morning are Worm.Gibe.F and
> Exploit.IFrame.Gen, in case that's symptomatic of something.
> 
> I'm using clamav 0.65 from the debian packages distributed on the site.
> 
> Clamav is being run from a .qmail file as:
> | /usr/bin/clamdscan -; [ $? != 1 ] || exit 99
> | /usr/bin/spamc -d filtercluster1 | /usr/bin/maildrop
> 
> freshclam just now updated to:
> 
> -rw-r--r--    1 clamav   clamav      48969 Jan 27 11:31 daily.cvd
> -rw-r--r--    1 clamav   clamav    1037239 Jan 27 11:31 main.cvd
> 
> ClamAV update process started at Tue Jan 27 11:29:12 2004
> main.cvd updated (version: 19, sigs: 19987, f-level: 1, builder: ddm)
> daily.cvd updated (version: 108, sigs: 593, f-level: 1, builder: ddm)
> Database updated (20580 signatures) from database.clamav.net (195.70.36.141).
> 
> Scanning a saved e-mail that Symantec flags correctly:
> 
> # clamdscan - < virus 
> stream: OK
> 
> clamav.conf file:
> LocalSocket /var/run/clamd.ctl
> ScanArchive
> StreamSaveToDisk
> ArchiveMaxRecursion 5
> ArchiveMaxFiles 1000
> ArchiveMaxFileSize 10M
> ThreadTimeout 180
> MaxThreads 5
> MaxConnectionQueueLength 15
> PidFile /var/run/clamd.pid
> DataDirectory /var/lib/clamav/
> SelfCheck 3600
> 
> 
> 
> 
> -------------------------------------------------------
> The SF.Net email is sponsored by EclipseCon 2004
> Premiere Conference on Open Tools Development and Integration
> See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
> http://www.eclipsecon.org/osdn
> _______________________________________________
> Clamav-users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/clamav-users
-- 
Go to http://www.digium.com/index.php?menu=documentation and look at
the "Unofficial Links" section.  This section has links to a wide
variety of 3rd party Asterisk related pages.  My page is the
"Asterisk Resource Pages".

BTEL Consulting 504-899-1387 or 850-484-4545 or 877-677-9643



-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to