hello all,

i'm new to this list, so I may be missed already covered topic, but I have the 
same problem with several qmail servers.
You probably know virus, which  clamav knows as W32.PWS.Prostor.A. 
It sends a link to a zip file, http://www.sismodular.com/screensaver.zip, 
which contains virus.
The problem is that qmailscanner doesn't detect it. I user Clamav 0.87 with 
qmailscanner. (1.25st)
The I scan downloaded zip file, no problem
[EMAIL PROTECTED] tmp]clamdscan
/tmp/screensaver.zip: Trojan.W32.PWS.Prostor.A FOUND

----------- SCAN SUMMARY -----------
Infected files: 1
Time: 0.074 sec (0 m 0 s)
The same with clamscan.

But the qmailscanner process the email message and doesn't find anyfthing.
Fri, 23 Sep 2005 12:03:14 EEST:4660: +++ starting debugging for process 4660 
(ppid=4658) by uid=502
Fri, 23 Sep 2005 12:03:14 EEST:4660: w_c: elapsed time from start 0.00296 secs
Fri, 23 Sep 2005 12:03:14 EEST:4660: return-path='[EMAIL PROTECTED]', 
recips='[EMAIL PROTECTED]'
Fri, 23 Sep 2005 12:03:14 EEST:4660: from='Liutauras Adomaitis 
<[EMAIL PROTECTED]>', subj='virus', via SMTP from 212.59.31.78
Fri, 23 Sep 2005 12:03:14 EEST:4660: clamdscan: finished scan in 0.012837 secs
Fri, 23 Sep 2005 12:03:14 EEST:4660: SA: finished scan in 0.186374 secs - 
hits=-2.5/5.0
Fri, 23 Sep 2005 12:03:14 EEST:4660: p_s: finished scan in 0.023414 secs
Fri, 23 Sep 2005 12:03:14 EEST:4660: ini_sc: finished scan of 
"/var/spool/qmailscan/tmp/mymailserver1274661947224660"...
Fri, 23 Sep 2005 12:03:14 EEST:4660: ------ Process 4660 finished. Total of 
0.275653 secs

How to make qmailscanner detect whose viruses?


--------------------------------
Liutauras Adomaitis

Infosaitas
+370 650 82554
www.infosaitas.lt


-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
Qmail-scanner-general mailing list
Qmail-scanner-general@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to