Hello Kristof, thank you VERY much for your response. I tried what you suggested and it did not find the virus. I also have mail scanning on.
One other person replied and requested I send them the .zip file and clamAV did not detect it as worm.somefool.B This is what they detected: The virus detector said this about the message: ClamAV: found_id.zip contains Worm.SomeFool.B AntiVir: ALERT: [Worm/NetSky.C worm] found_id.zip <<< Contains signature of the worm Worm/NetSky.C F-Prot: found_id.zip->found_id.txt.pif Infection: W32/[EMAIL PROTECTED] McAfee: found_id.zip/FOUND_ID.TXT.PIF Found the W32/[EMAIL PROTECTED] virus !!! So this would mean I am missing something. My updates are up to date. What else would prevent it from detecting the virus? Compression issues? --- Kristof Hardy <[EMAIL PROTECTED]> wrote: > Ninetwoaccord wrote: > > I wanted to make sure my archive scanning settings > > were correct for clamd. I searched these email > > archives and found that Archive support should be > > turned on (it was) as well as StreamSaveToDisk (it > > wasn't). I tested with StreamSaveToDisk and it > still > > did not find the virus. > > is mailbox scanning active? > try: clamscan --mbox yep.msg > if that works, make sure the parameter ScanMail is > active in your > clamav.conf. > > If it doesn't work, feel free to make that file > available somewhere on > the net, but I suppose it's a setting somewhere.. > > -- > > Best regards, > Kristof > > > ------------------------------------------------------- > SF.Net is sponsored by: Speed Start Your Linux Apps > Now. > Build and deploy apps & Web services for Linux with > a free DVD software kit from IBM. Click Now! > http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click > _______________________________________________ > Clamav-users mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/clamav-users __________________________________ Do you Yahoo!? Get better spam protection with Yahoo! Mail. http://antispam.yahoo.com/tools ------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
