Today I found a virus passed through the clamav-milter, and I tried to
manual scan it with "clamscan --mbox", but it passed too.

I'm sure my virus definition is updated and I'm using
clamscan / ClamAV version 0.70



Scan in "Online scanner" does detect it:

/tmp/phpv4Ottk: Worm.SomeFool.Q FOUND

And found something:
* Worm.SomeFool.Q


/etc/clamav.conf

LogFile /tmp/clamd.log
LogFileMaxSize 2M
LogSyslog
PidFile /var/run/clamd.pid
TemporaryDirectory /tmp
DatabaseDirectory /usr/local/share/clamav
LocalSocket /tmp/clamd
FixStaleSocket
StreamSaveToDisk
StreamMaxLength 10M
MaxThreads 20
MaxDirectoryRecursion 15
FollowFileSymlinks
SelfCheck 600
User clamav
ScanOLE2
ScanMail
ScanArchive
ArchiveMaxFileSize 30M
ArchiveMaxRecursion 5
ArchiveMaxFiles 10000
ArchiveMaxCompressionRatio 200
UpdateLogFile /var/log/clam-update.log
ClamukoScanOnOpen
ClamukoScanOnClose
ClamukoScanOnExec
ClamukoIncludePath /home
ClamukoMaxFileSize 1M
ClamukoScanArchive

*


-------------------------------------------------------
This SF.Net email is sponsored by Sleepycat Software
Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to 
deliver higher performing products faster, at low TCO.
http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to