On Sat, Mar 06, 2004 at 11:30:58AM -0700, Lucas Albers said:
> There are two virus's that clamscan detects, and clamdscan does not.
> using clamav .67-6 via the debian package.
> 
> clamscan -r --stdout --disable-summary --mbox --infected ./
> ENTIRE_MESSAGE: Worm.Mydoom.F FOUND
> LibClamAV Warning: Multipart MIME message contains no boundary lines
> ENTIRE_MESSAGE: Worm.SomeFool.Gen-1 FOUND
> 
> 
> clamdscan -r --stdout --disable-summary --mbox --infected ./
> ./: OK
> 
> I have all the pertinent options enabled in clamav.conf, and am not sure
> why it does not detect it.
> 
> #To reconfigure clamd run #dpkg-reconfigure clamav-daemon
> LocalSocket /var/run/clamd.ctl
> StreamMaxLength 15M
> ArchiveMaxFileSize 15M
> ArchiveMaxRecursion 5
> ArchiveMaxFiles 1500
> ScanArchive
> StreamSaveToDisk
> ArchiveMaxRecursion 5
> ArchiveMaxFiles 1000
> ArchiveMaxFileSize 10M
> ThreadTimeout 180
> MaxThreads 5
> MaxConnectionQueueLength 15
> PidFile /var/run/clamd.pid
> DataDirectory /var/lib/clamav/
> SelfCheck 3600

clamdscan does not understand --mbox.  you need ScanMail in clamav.conf.
See if that works.

-- 
 --------------------------------------------------------------------------
|  Stephen Gran                  | People respond to people who respond.   |
|  [EMAIL PROTECTED]             |                                         |
|  http://www.lobefin.net/~steve |                                         |
 --------------------------------------------------------------------------

Attachment: pgp00000.pgp
Description: PGP signature

Reply via email to