Odhiambo Washington wrote:
* On 10/09/05 13:47 -0500, Pablo Chamorro C. wrote:
I managed to deploy squid + havp + clamav for antivirus control of web
pages/files, and for my surprise this morning I found:
10/09/2005 13:08:36
http://www.pandasoftware.com/activescan/as5free/motor.cab Virus:
Sirius.Annihilator.272
10/09/2005 13:09:22
http://www.pandasoftware.com/activescan/as5free/motor.cab Virus:
Sirius.Annihilator.272
10/09/2005 13:10:09
http://www.pandasoftware.com/activescan/as5free/motor.cab Virus:
Sirius.Annihilator.272
10/09/2005 13:15:06
http://www.pandasoftware.com/activescan/as5free/motor.cab Virus:
Sirius.Annihilator.272
Some comment?
ClamAv is right about the virus! At least it tells me the same when I
try to download that file. Funnily, I use DansGuardian, not HAVP. We
get the same results. So if anyting is 'wrong', it is clamav.
The file scan'd fine with PcCillin as well.
However, after sending test emails containing the contents of the .cab I
was able to identify "pskavs.dll" as being the file that's being tagged
as being infected.
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
