> Hmmm... I don't understand why mail.clamzip is properly detected and
> mail.clamexe isn't. Please double check it's a proper mail file.

Here is how I am testing this, perhaps there is a problem in how I am
doing so?

-----
-rw-r--r--    1 rob-lists rob-lists      544 Oct 17 17:22 clam.exe
-rw-r--r--    1 rob-lists rob-lists      404 Oct 17 17:22 clam.zip

[EMAIL PROTECTED] rob-lists]$ clamscan -V
ClamAV 0.80rc4/533/Sat Oct 16 20:09:44 2004

[EMAIL PROTECTED] rob-lists]$ clamscan clam.exe
clam.exe: ClamAV-Test-File FOUND
<verbosity removed>

[EMAIL PROTECTED] rob-lists]$ clamscan clam.zip
clam.zip: ClamAV-Test-File FOUND
<verbosity removed>

[EMAIL PROTECTED] rob-lists]$ pine -attach clam.exe [EMAIL PROTECTED]
Pine finished

[EMAIL PROTECTED] rob-lists]$ pine -attach clam.zip [EMAIL PROTECTED]
Pine finished

[EMAIL PROTECTED] rob-lists]$ mail
Mail version 8.1 6/6/93.  Type ? for help.
"/var/spool/mail/rob-lists": 9 messages 2 unread
<REMOVED OTHER MAIL>
>U  8 [EMAIL PROTECTED]  Sun Oct 17 19:56  54/2384  "Test clam.exe"
 U  9 [EMAIL PROTECTED]  Sun Oct 17 19:57  50/2179  "Test clam.zip"
& s 8 mail.clamexe
"mail.clamexe" [New file]
& s 9 mail.clamzip
"mail.clamzip" [New file]
& q
Held 7 messages in /var/spool/mail/rob-lists

[EMAIL PROTECTED] rob-lists]$ clamscan mail.clamexe
mail.clamexe: OK
<verbosity removed>

[EMAIL PROTECTED] rob-lists]$ clamscan mail.clamzip
mail.clamzip: ClamAV-Test-File FOUND
<verbosity removed>

[EMAIL PROTECTED] rob-lists]$ mv clam.exe clam.exe.orig

[EMAIL PROTECTED] rob-lists]$ uudeview -i mail.clamexe

Loaded from mail.clamexe: 'Test clam.exe' (clam.exe): clam.exe part 1  
Base64

Found 'clam.exe' State 16 Base64 Parts 1 OK

    File successfully written to /home/rob-lists/clam.exe
1 file decoded from 1 input file, 0 failed

[EMAIL PROTECTED] rob-lists]$ ls -l clam.exe*
-rw-r--r--    1 rob-lists rob-lists      544 Oct 17 20:08 clam.exe
-rw-r--r--    1 rob-lists rob-lists      544 Oct 17 17:22 clam.exe.orig

[EMAIL PROTECTED] rob-lists]$ clamscan clam.exe
clam.exe: ClamAV-Test-File FOUND
<verbosity removed>

-----

Again, Thank you.
Robert Haas



_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Reply via email to