-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Phil Chambers wrote: > Further testing has resulted in the following strange resutls: > > With the above message in the scan spool directory where exim creates the copy > of the message for scanning I cd'd to the spool directory and got: > > clamscan > /var/spool/exim/scan/1JAnYa-0006ir-N0/1JAnYa-0006ir-N0.eml:(wraps here) > Email.Spam.Gen2111.Sanesecurity.08010217 FOUND > > ----------- SCAN SUMMARY ----------- > Known viruses: 197921 > Engine version: 0.92 > Scanned directories: 1 > Scanned files: 1 > Infected files: 1 > Data scanned: 0.00 MB > Time: 1.736 sec (0 m 1 s) > > Then: > > clamdscan > > ----------- SCAN SUMMARY ----------- > Infected files: 0 > Time: 0.002 sec (0 m 0 s) > > So, clamscan detects the signature but clamdscan does not! Note that some > examples of this signature do get detected by clamd.) > > Phil. > --------------------------------------- > Phil Chambers ([EMAIL PROTECTED]) > University of Exeter I can clear up some of the confusion... clamscan and clamdscan get and have different defaults for scanning files.
James -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHfmtxkNLDmnu1kSkRAqmMAJ9A8Pfszw0TnQWaLd/AWlIA5RHamQCfcJId ZOpM652iIaGJaKYgCdjo400= =uMIk -----END PGP SIGNATURE----- -- Scanned by ClamAV - http://www.clamav.net _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
