I hope that there is someone that can help me with this, i have been going
quite crazy trying to figure it out myself.

I am running clamav using the setup from www.qmailrocks.org.

ClamAV 0.65

FreshClam output:
ClamAV update process started at Wed Jan 28 09:59:38 2004
Reading CVD header (main.cvd): OK
main.cvd is up to date (version: 19, sigs: 19987, f-level: 1, builder:
ddm)
Reading CVD header (daily.cvd): OK
daily.cvd is up to date (version: 110, sigs: 596, f-level: 1, builder:
tomek)

I have a /var/spool/qmailscan/quarantine Maildir with about 50 emails in
it all containing attachments of some sort.  Manually looking at them, i
can see that about 40 have the SCO.A/Novarg virus.  However, running
clamdscan (or clamscan for that matter) on this Maildir directory tells me
that there are no infected files.  I have tried restarting clamd as
someone has suggested but that has not helped.

I really dont know what could be causing this.  The only thing i can think
of is at one point on the qmailrocks setup there is a step that says to
rename clamdscan to clamdscan.orig and then copy a new clamdscan into its
place.  What this does is cause qmail-scanner to use clamuko instead of
regular clam. Could this be the problem?  I have tried running the
clamdscan.orig instead but when i do that, i get the following error:
/var/spool/qmailscan/quarantine/new: Can't access the file ERROR

----------- SCAN SUMMARY -----------
Infected files: 0
Time: 0.000 sec (0 m 0 s)

I have tried everything that i can think of and it has not helped.  Can
anyone offer any ideas or insight into this problem?  A virus scanner
which scans an infected email and tells me its clean is not much help at
all.

Thank you.

Jim Maul
Eastern Long Island Hospital
631-477-5417

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to