Rick Macdougall wrote: > To follow up, I extracted the zip file from the mail message using > ripmime. clamdscan does NOT detect the virus but clamscan does. > > Can anyone point to what I may be doing wrong ? > > Latest ClamAV 0.92, with a basic config file (the full config was > contained in my last message). > > [EMAIL PROTECTED] tmp]# clamdscan -V > ClamAV 0.92/5639/Fri Feb 1 09:42:34 2008 > > > Output of both clamdscan and clamscan follows. > > [EMAIL PROTECTED] tmp]# clamdscan screensaver.zip > /tmp/screensaver.zip: OK > > ----------- SCAN SUMMARY ----------- > Infected files: 0 > Time: 0.018 sec (0 m 0 s) > > > > [EMAIL PROTECTED] tmp]# clamscan screensaver.zip > screensaver.zip: Worm.SomeFool.P FOUND > > ----------- SCAN SUMMARY ----------- > Known viruses: 218384 > Engine version: 0.92 > Scanned directories: 0 > Scanned files: 1 > Infected files: 1 > Data scanned: 0.03 MB > Time: 2.106 sec (0 m 2 s) >
Well thanks to how ever fixed the definitions so that clamdscan now detects the infected file! Was there a reason clamdscan did not detect it and clamscan did ? Regards, Rick _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html