Hello again, On Fri, 2 Sep 2011 Anne Wilson wrote:
> ... > Since these folders are created by KMail, I assume they act as some sort of > pointer but I can't see any clue as to exactly what they are. I have never used KMail and I have no idea what it might be doing. Does ls -l followed by the directory or file name help at all? > The directory that holds Newsletters would indeed have messages such as it > claims to find. That's where I store newsletters from certain companies that > I > deal with, and some of them do indeed have such sales. No matter how you look > at it, that makes them definitely not junk. The other one, from a very > careful > friend, probably has a news item link that it objects to - he often sends me > them. The plot thickens. :) > I repeat, I should not have to see this false statement every day in the > reports - I should be allowed to tell it that it's wrong. Firstly, you don't have to see anything you don't want to see, this is the joy of Open Source. :) Secondly, these are not false statements and you should not be allowed to tell it that it's wrong because it isn't wrong. *I* repeat, it seems likely to me that you aren't yet in possession of all the facts. Thirdly, you could be a lot more forthcoming with information to allow us to help you, but I appreciate that you may not know what many of the questions will be, never mind the answers, so for now just try to slow down a bit. :) ClamAV doesn't invent directories and their contents just to irritate you. If we discount the theory that there's a fault in the software, then at the time that those nauseating messages were gratuitously written into your infuriating logs, the files mentioned in those messages did in fact exist and did contain the strings which triggered the warnings. That leaves two possibilities. Either they're still there unchanged, or they aren't. If they are still there unchanged, then you need to find out why you can't find them when ClamAV could. If they aren't, presumably something modified or deleted them. Perhaps you don't care, but I like to know what's modifying files and directories on my systems, and why. If you just want a sticking plaster to cover up the symptoms, I can't help you. Like you, I just use ClamAV, and for my purposes it works well in the installations which I manage. The main reason that I use it is apparently precisely why you don't like it, that is because it allows me to use the Sanesecurity databases to eliminate mountains of junk mail. You are at liberty not to use them if that's any help. If you don't know what I'm talking about then it means that you need to learn more about how ClamAV works instead of telling us on this list that ClamAV is making false statements -- and in all probablility wasting resources for no good reason. At its simplest you can if you wish just delete the offending databases, but you might also need to modify a script or scripts somewhere in your system, to prevent any database update routines (if they exist) from replacing the deleted databases the next time they run. Alternatively you can create your own list of signatures to be ignored. See section 3 of http://www.clamav.net/doc/latest/phishsigs_howto.pdf Al Varnell wrote: > Don't include the trailing ":" I don't think that's the problem in this case, the trailing colon is added by 'ls' so it would have been doubled in the error message if the OP were inadvertently adding one of her own. -- 73, Ged. _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
