-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
Phil Chambers wrote:
> Further testing has resulted in the following strange resutls:
>
> With the above message in the scan spool directory where exim creates
the copy
> of the message for scanning I cd'd to the spool directory and got:
>
>  clamscan
>  /var/spool/exim/scan/1JAnYa-0006ir-N0/1JAnYa-0006ir-N0.eml:(wraps here)
> Email.Spam.Gen2111.Sanesecurity.08010217 FOUND
>
>  ----------- SCAN SUMMARY -----------
>  Known viruses: 197921
>  Engine version: 0.92
>  Scanned directories: 1
>  Scanned files: 1
>  Infected files: 1
>  Data scanned: 0.00 MB
>  Time: 1.736 sec (0 m 1 s)
>
> Then:
>
>  clamdscan
>
>  ----------- SCAN SUMMARY -----------
>  Infected files: 0
>  Time: 0.002 sec (0 m 0 s)
>
> So, clamscan detects the signature but clamdscan does not!  Note that some
> examples of this signature do get detected by clamd.)
>
> Phil.
> ---------------------------------------
> Phil Chambers ([EMAIL PROTECTED])
> University of Exeter
I can clear up some of the confusion...  clamscan and clamdscan get
and have different defaults for scanning files.

James
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
 
iD8DBQFHfmtxkNLDmnu1kSkRAqmMAJ9A8Pfszw0TnQWaLd/AWlIA5RHamQCfcJId
ZOpM652iIaGJaKYgCdjo400=
=uMIk
-----END PGP SIGNATURE-----

-- 
Scanned by ClamAV - http://www.clamav.net

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Reply via email to