Paul,
I know what you mean. We had encountered this type of behavior when we were
adding the byte-compare signature feature and we initially put in a change
(specific to byte-compare) to prevent the 2nd scan from occurring. We ended up
reverting that change when we realized that we really nee
Hi Micah
I can code to handle this but basing handling code on "appears to
behaviour" is far from an ideal start.
The multiple matches on test/clam.mail from the clamav 101.1 sources
with Clamav.Test.File-6 reported twice sure looks like a bug to me.
Regards Paul
On 14/02/2019 19:46, Mi
Paul,
You may be seeing cases where a signature match of the raw file also matches
the file after it has been:
* normalized (for html or other text files)
* extracted (eg uncompressed archives or archives where compression has little
effect)
* or otherwise parsed (eg where a signature written to
Paul wrote:
Hi
I have been looking at using the -z option on either clamdscan or
clamscan and stumbled onto some odd behavior.
This is with version 101.1. 101.0 also behaves the same.
Take 2 paultest-010E110713-000 is constructed from test/clam.mail with
the addition of a line of text to
Hi
I have been looking at using the -z option on either clamdscan or
clamscan and stumbled onto some odd behavior.
This is with version 101.1. 101.0 also behaves the same.
Take 1
clamscan -z ./clamav-0.101.1/test/clam.mail
./clamav-0.101.1/test/clam.mail: Clamav.Test.File-6 FOUND
./clamav
I have mail folder name VIR that containts 43 mail attach with Netsky and
2 mail attach with Bagle.
My FC1 has 0.83 and i do this :
clamscan VIR
clamdscan VIR
cat VIR | clamscan -
but it says no viruses.
Can anybody tell me why clam cannot found the viruses ?
Thanx
__
Micha Silver wrote:
Last night I made a small change to qmail-scanner.pl- I added 'worm.sco.a'
to the array $silent_viruses_array. (To prevent sending Virus Found messages
to innocent "sender" addresses)
It now looks like:
my
@silent_viruses_array=('klez','bugbear','worm.sco.a','hybris','yaha','br
Micha Silver [mailto:[EMAIL PROTECTED]
> Sent: Thursday, January 29, 2004 11:14 AM
> To: [EMAIL PROTECTED]
> Subject: [Clamav-users] Clamscan; clamdscan
>
>
> Last night I made a small change to qmail-scanner.pl- I added
> 'worm.sco.a' to the array $silent_viruses_a
Hello Micha,
Thursday, January 29, 2004, 10:13:41 AM, you wrote:
MS> Last night I made a small change to qmail-scanner.pl- I added 'worm.sco.a'
MS> to the array $silent_viruses_array. (To prevent sending Virus Found messages
MS> to innocent "sender" addresses)
did you edit it with something lik
Last night I made a small change to qmail-scanner.pl- I added 'worm.sco.a'
to the array $silent_viruses_array. (To prevent sending Virus Found messages
to innocent "sender" addresses)
It now looks like:
my
@silent_viruses_array=('klez','bugbear','worm.sco.a','hybris','yaha','braid'
,'nimda','tanat
On Tue, 27 Jan 2004 13:14:42 -0500
"Brian Bruns" <[EMAIL PROTECTED]> wrote:
> Hello,
>
> The --remove and --move options in clamscan and clamdscan do not
> appear to be working in the latest CVS build as of about 5 minutes
> ago.
They work only in clamscan and are not yet implemented in clamdsca
Hello,
The --remove and --move options in clamscan and clamdscan do not appear to be
working in the latest CVS build as of about 5 minutes ago.
Any ideas?
--
Brian Bruns
The Summit Open Source Development Group
Open Solutions For A Closed World / Anti-Spam Resources
http://www.sosdg.org
The AHB
12 matches
Mail list logo
