Re: [Clamav-users] MyDoom.M Starting to get through

2004-09-06 Thread Scott Ryan
On Friday 03 September 2004 07:13, Scott Ryan wrote: > I had an issue with this a while back which was fixed by upgrading to > latest devel and then eventually 0.75-1. > I run qmail-scanner which in turn calls clamdscan. If i cat the message and > pipe through clamdscan manually, clam reports that

Re: [Clamav-users] MyDoom.M Starting to get through

2004-09-06 Thread Nigel Horne
On Monday 06 Sep 2004 09:44, Scott Ryan wrote: > Would it be possible for someone to check that this mail is trapped by clamav > through a mail scanner? I can send it as an email file passwd zipped if it > helps password zipped e-mail to me will be fine. > Much appreciated. -Nigel -- Nigel

Re: [Clamav-users] MyDoom.M Starting to get through

2004-09-06 Thread Scott Ryan
On Friday 03 September 2004 16:42, Chris Meadors wrote: > On Fri, 2004-09-03 at 11:47 +0200, Scott Ryan wrote: > > Maybe you want to read the mail i sent again. > > I use clamdscan not clamscan > > > > # man clamdscan > > Then do you have the "ScanMail" option set in the clamav.conf file set? Yes -

Re: [Clamav-users] MyDoom.M Starting to get through

2004-09-04 Thread Matt
Nigel Horne wrote: > > I once had a problem where the virus wouldn't be detected by Clam in > > certain emails if any attachments had been extracted first, but would > > find the virus fine if fed the email intact. > > This problem was fixed a long time ago. > > > Matt > > -Nigel > Sorry. I

RE: [Clamav-users] MyDoom.M Starting to get through

2004-09-04 Thread Nigel Horne
> I once had a problem where the virus wouldn't be detected by Clam in > certain emails if any attachments had been extracted first, but would find > the virus fine if fed the email intact. This problem was fixed a long time ago. > Matt -Nigel

Re: [Clamav-users] MyDoom.M Starting to get through

2004-09-04 Thread Matt
Scott Ryan wrote: > stream: Worm.Mydoom.M FOUND > > --- SCAN SUMMARY --- > Infected files: 1 > Time: 0.023 sec (0 m 0 s) > [EMAIL PROTECTED] root]# cat testmail.eml | clamdscan - > stream: Worm.Mydoom.M FOUND > > --- SCAN SUMMARY --- > Infected files: 1 > Time: 0.

Re: [Clamav-users] MyDoom.M Starting to get through

2004-09-03 Thread Chris Meadors
On Fri, 2004-09-03 at 11:47 +0200, Scott Ryan wrote: > Maybe you want to read the mail i sent again. > I use clamdscan not clamscan > > # man clamdscan Then do you have the "ScanMail" option set in the clamav.conf file set? -- Chris --- Thi

Re: [Clamav-users] MyDoom.M Starting to get through

2004-09-03 Thread Scott Ryan
On Friday 03 September 2004 11:18, Rob MacGregor wrote: > On Fri, 3 Sep 2004 10:26:49 +0200, Scott Ryan <[EMAIL PROTECTED]> wrote: > > No because I dont use mbox format. I cat the email message and pipe it > > through clamdscan. It picks up that it has to scan scanning mail messages > > from my /e

Re: [Clamav-users] MyDoom.M Starting to get through

2004-09-03 Thread Rob MacGregor
On Fri, 3 Sep 2004 10:26:49 +0200, Scott Ryan <[EMAIL PROTECTED]> wrote: > No because I dont use mbox format. I cat the email message and pipe it through > clamdscan. It picks up that it has to scan scanning mail messages from > my /etc/clamav.conf You may want to RTFM: --mbox Enable scanning of

Re: [Clamav-users] MyDoom.M Starting to get through

2004-09-03 Thread Scott Ryan
On Friday 03 September 2004 07:50, ralf bosz wrote: > Are you using the "--mbox" option when manually scanning the mailfiles? > No because I dont use mbox format. I cat the email message and pipe it through clamdscan. It picks up that it has to scan scanning mail messages from my /etc/clamav.conf

Re: [Clamav-users] MyDoom.M Starting to get through

2004-09-02 Thread ralf bosz
Are you using the "--mbox" option when manually scanning the mailfiles? On Fri, 3 Sep 2004 07:13:53 +0200, Scott Ryan <[EMAIL PROTECTED]> wrote: > I had an issue with this a while back which was fixed by upgrading to latest > devel and then eventually 0.75-1. > I run qmail-scanner which in turn ca