I hope that there is someone that can help me with this, i have been going quite crazy trying to figure it out myself.
I am running clamav using the setup from www.qmailrocks.org. ClamAV 0.65 FreshClam output: ClamAV update process started at Wed Jan 28 09:59:38 2004 Reading CVD header (main.cvd): OK main.cvd is up to date (version: 19, sigs: 19987, f-level: 1, builder: ddm) Reading CVD header (daily.cvd): OK daily.cvd is up to date (version: 110, sigs: 596, f-level: 1, builder: tomek) I have a /var/spool/qmailscan/quarantine Maildir with about 50 emails in it all containing attachments of some sort. Manually looking at them, i can see that about 40 have the SCO.A/Novarg virus. However, running clamdscan (or clamscan for that matter) on this Maildir directory tells me that there are no infected files. I have tried restarting clamd as someone has suggested but that has not helped. I really dont know what could be causing this. The only thing i can think of is at one point on the qmailrocks setup there is a step that says to rename clamdscan to clamdscan.orig and then copy a new clamdscan into its place. What this does is cause qmail-scanner to use clamuko instead of regular clam. Could this be the problem? I have tried running the clamdscan.orig instead but when i do that, i get the following error: /var/spool/qmailscan/quarantine/new: Can't access the file ERROR ----------- SCAN SUMMARY ----------- Infected files: 0 Time: 0.000 sec (0 m 0 s) I have tried everything that i can think of and it has not helped. Can anyone offer any ideas or insight into this problem? A virus scanner which scans an infected email and tells me its clean is not much help at all. Thank you. Jim Maul Eastern Long Island Hospital 631-477-5417
smime.p7s
Description: S/MIME cryptographic signature