Were you able to scan with versions of ClamAV prior to 0.97.5? Can you send me some samples?
Thanks, Shawn On Thu, Sep 6, 2012 at 6:15 AM, Victor Sudakov <v...@mpeks.tomsk.su> wrote: > Colleagues, > > AFAIK clamd can parse Communigate Pro message spool format, where the > message itself is preceded by several extra lines like > > P I 06-09-2012 08:53:14 0000 ____ ____ <suda...@sibptus.tomsk.ru> > O LH > A sibptus.tomsk.ru [212.73.124.5] > S SMTP [212.73.125.240] > R W 06-09-2012 08:53:14 0000 ____ _FY_ <suda...@sibptus.tomsk.ru> > > However, I have found a condition when this parser fails on > clamav-0.97.5 and clamd reports OK though there is a known virus in > the message. I can provide samples and more details. > > Who do I contact about it? Thank you in advance. > > -- > Victor Sudakov, VAS4-RIPE, VAS47-RIPN > sip:suda...@sibptus.tomsk.ru > _______________________________________________ > Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net > http://www.clamav.net/support/ml > _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
