On Sat, Mar 06, 2004 at 11:30:58AM -0700, Lucas Albers said: > There are two virus's that clamscan detects, and clamdscan does not. > using clamav .67-6 via the debian package. > > clamscan -r --stdout --disable-summary --mbox --infected ./ > ENTIRE_MESSAGE: Worm.Mydoom.F FOUND > LibClamAV Warning: Multipart MIME message contains no boundary lines > ENTIRE_MESSAGE: Worm.SomeFool.Gen-1 FOUND > > > clamdscan -r --stdout --disable-summary --mbox --infected ./ > ./: OK > > I have all the pertinent options enabled in clamav.conf, and am not sure > why it does not detect it. > > #To reconfigure clamd run #dpkg-reconfigure clamav-daemon > LocalSocket /var/run/clamd.ctl > StreamMaxLength 15M > ArchiveMaxFileSize 15M > ArchiveMaxRecursion 5 > ArchiveMaxFiles 1500 > ScanArchive > StreamSaveToDisk > ArchiveMaxRecursion 5 > ArchiveMaxFiles 1000 > ArchiveMaxFileSize 10M > ThreadTimeout 180 > MaxThreads 5 > MaxConnectionQueueLength 15 > PidFile /var/run/clamd.pid > DataDirectory /var/lib/clamav/ > SelfCheck 3600
clamdscan does not understand --mbox. you need ScanMail in clamav.conf. See if that works. -- -------------------------------------------------------------------------- | Stephen Gran | People respond to people who respond. | | [EMAIL PROTECTED] | | | http://www.lobefin.net/~steve | | --------------------------------------------------------------------------
pgp00000.pgp
Description: PGP signature