Micha Silver wrote:

Last night I made a small change to qmail-scanner.pl- I added 'worm.sco.a'
to the array $silent_viruses_array. (To prevent sending Virus Found messages
to innocent "sender" addresses)
It now looks like:

my
@silent_viruses_array=('klez','bugbear','worm.sco.a','hybris','yaha','braid'
,'nimda','tanatos','sobig','winevar','palyh','fizzer','gibe','cailont','love
lorn','swen','dumaru','sober','hawaii','holar-i');

From that moment on, clamav stopped recognizing virii. Disallowed extensions
- *.scr etc. - were still being blocked. I was running clamdscan as the
clamscan_binary in the Q-S.pl script. This morning I change back to calling
the regular clamscan for each virus, and immediately CLAMSCAN:Worm.SCO.A
started appearing in the logs.

I'd like to go back to clamdscan to save memory and scanning time. What
might I have done to cause clamdscan to fail??

TIA
--Micha


------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users




Micha,

Use 'sco' instead of 'worm.sco.a' and check for any typos. Made same changes yesterday.


Regards



John



Sysadmin Highway Internet Services


------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to