Hi all,
I'm new to CLAMAV, and have installed it on my OSX machine to test out. I plan to use it as an extra scanner for our CommuiGatePro mailserver.
I have a message that got thru our current setup and wanted to try
if CLAMAV would detect the virus. I saved the message as a raw TXT
file, which holds de binary data of the . zip attachment attached to the email.
If I let CLAMAV scan the raw txt file using the CLI, it does not detect the virus.
If I first decompress the TXT file, and feed CLAMAV the zip file that was attached to the mail message it does detect the virus:
/Users/jona/Desktop/p_message_3897.TXT.zip: Worm.Sober.G FOUND
So it's safe to say that CLAMAV would not have detected it using it as a scanner for our mailserver, right? Since it has to detect it inside the mail message, correct?
Is this a bug, and if so, is it a known one?
clamscan --mbox doesn't detect the txt file as a mail message, probably due to the first line in the file:
>From [EMAIL PROTECTED] Tue May 18 13:01:32 2004
which I suppose is added by your local delivery agent, and probably not present in the mail as originally received.
If that single line is removed, clamscan --mbox correctly detects the virus.
Sounds to me as if clam is working correctly and ready to be used with your CommuniGatePro.
--
Noel Jones
------------------------------------------------------- This SF.Net email is sponsored by: SourceForge.net Broadband Sign-up now for SourceForge Broadband and get the fastest 6.0/768 connection for only $19.95/mo for the first 3 months! http://ads.osdn.com/?ad_id=2562&alloc_id=6184&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
