On Sat, 25 Sep 2004 09:41:01 -0500, Steven Stern <[EMAIL PROTECTED]> wrote:
>After going from .75 to .80rc, I'm finding an error reported by logwatch from >clamav-milter. > >Example: > >Can't rename /var/spool/clamav/040924/msg.ShraVX to >_var_spool_clamav_040924_msg.ShraVX.Worm.SomeFool.P > ># clamd --version >ClamAV 0.80rc/503/Thu Sep 23 14:32:44 2004 > >clamav-milter is run as > ># more clamav-milter >CLAMAV_FLAGS="-lo --max-children=10 --noreject --dont-log-clean >local:/var/run/clamav/clamav-milter.sock --quarantine-dir=/var/spool/clamav " Here are the raw lines from maillog Sep 24 19:12:27 ciscy clamav-milter[6376]: i8P0CQ90011259: /var/spool/clamav/040924/msg.ShraVX: Worm.SomeFool.P Intercepted virus from <[EMAIL PROTECTED]> to <[EMAIL PROTECTED]> Sep 24 19:12:27 ciscy clamav-milter[6376]: Can't rename /var/spool/clamav/040924/msg.ShraVX to _var_spool_clamav_040924_msg.ShraVX.Worm.SomeFool.P Sep 24 19:12:27 ciscy sendmail[11263]: i8P0CR4h011263: from=clamav, size=551, class=0, nrcpts=2, msgid=<[EMAIL PROTECTED]>, [EMAIL PROTECTED] Sep 24 19:12:27 ciscy sendmail[11263]: i8P0CR4h011263: to=postmaster, delay=00:00:00, mailer=relay, pri=60551, stat=queued Sep 24 19:12:27 ciscy sendmail[11263]: i8P0CR4h011263: to=<[EMAIL PROTECTED]>, delay=00:00:00, mailer=relay, pri=60551, stat=queued Sep 24 19:12:27 ciscy clamav-milter[6376]: Quarantined infected mail as /var/spool/clamav/040924/msg.ShraVX and, for the record # ll /var/spool/clamav/040924 total 176 -rw------- 1 clamav clamav 42079 Sep 24 18:27 msg.MZoQlq -rw------- 1 clamav clamav 42679 Sep 24 19:12 msg.ShraVX -rw------- 1 clamav clamav 41857 Sep 24 09:09 msg.uddm4v -rw------- 1 clamav clamav 42689 Sep 24 09:58 msg.YlxLMP -- Steve ------------------------------------------------------- This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170 Project Admins to receive an Apple iPod Mini FREE for your judgement on who ports your project to Linux PPC the best. Sponsored by IBM. Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
