Rick Macdougall wrote:
> Hi,
> 
> I just got an email that contains a virus.
> 
> clamdscan does not find it but clamscan does.
> 
> Any ideas ?


To follow up, I extracted the zip file from the mail message using 
ripmime.  clamdscan does NOT detect the virus but clamscan does.

Can anyone point to what I may be doing wrong ?

Latest ClamAV 0.92, with a basic config file (the full config was 
contained in my last message).

[EMAIL PROTECTED] tmp]# clamdscan -V
ClamAV 0.92/5639/Fri Feb  1 09:42:34 2008


Output of both clamdscan and clamscan follows.

[EMAIL PROTECTED] tmp]# clamdscan screensaver.zip
/tmp/screensaver.zip: OK

----------- SCAN SUMMARY -----------
Infected files: 0
Time: 0.018 sec (0 m 0 s)



[EMAIL PROTECTED] tmp]# clamscan screensaver.zip
screensaver.zip: Worm.SomeFool.P FOUND

----------- SCAN SUMMARY -----------
Known viruses: 218384
Engine version: 0.92
Scanned directories: 0
Scanned files: 1
Infected files: 1
Data scanned: 0.03 MB
Time: 2.106 sec (0 m 2 s)

Regards,

Rick

_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Reply via email to