Scott Ryan wrote: > stream: Worm.Mydoom.M FOUND > > ----------- SCAN SUMMARY ----------- > Infected files: 1 > Time: 0.023 sec (0 m 0 s) > [EMAIL PROTECTED] root]# cat testmail.eml | clamdscan - > stream: Worm.Mydoom.M FOUND > > ----------- SCAN SUMMARY ----------- > Infected files: 1 > Time: 0.023 sec (0 m 0 s) > > I have tried installing latest snapshot and clam still doesnt pick up > this particular zip file containing the my.Doom.M virus. I dont think > that it is a problem with qmail scanner as i am picking up thousands of > mails a day - like i said earlier, i even have records in my logs that > clam is catching some my.doom.M viruses.
Does the qmail scanner extract the email before calling clamdscan? or does it give the email intact to clamdscan? I once had a problem where the virus wouldn't be detected by Clam in certain emails if any attachments had been extracted first, but would find the virus fine if fed the email intact. I've no idea how qmail scanner works, but it could be worth checking. Matt ------------------------------------------------------- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE developer tools! Get your free copy of BEA WebLogic Workshop 8.1 today. http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
