Here's a couple of parameters I personally use for Clam-AV:
 
--max-ratio 0 --max-space 1M
 
 
max ratio sets a maximum ratio for compressed files. I've had zip files that contained txt files get false positives. Setting it to 0 disables this test.
 
max space sets the maximum amount of megabytes to extract for a compressed file. I figured no need to over scan compressed files especially with more than one scanner.
----- Original Message -----
Sent: Friday, March 03, 2006 4:15 PM
Subject: [Declude.Virus] clamwin second scanner error

I added clamav as a second scanner to my virus.cfg file as follows:
 
SCANFILE  C:\F-Prot\fpcmd.exe -TYPE -SILENT -NOMEM -ARCHIVE=5 -DUMB -NOBOOT -REPORT=report.txt
VIRUSCODE 3
VIRUSCODE 6
VIRUSCODE 8
REPORT    Infection:
 
SCANFILE C:\progra~1\clamwin\bin\clamscan.exe --quiet --log-verbose --no-summary --max-ratio 0  -l report.txt
VIRUSCODE 1
 
 
 
 
Now I get the folowing error in the virus log:
03/03/2006 17:11:59.307 qbf260199000090d6.smd Vulnerability flags = 862
03/03/2006 17:12:09.448 qbf260199000090d6.smd Could not find parse string Infection: in report.txt
03/03/2006 17:12:09.448 qbf260199000090d6.smd Error 50 in virus scanner 1.
03/03/2006 17:12:09.448 qbf260199000090d6.smd Your virus scanner DOES NOT EXIST (at  D:\IMail\spool\proc\work\DBF260~1.VIR\); NOT SCANNING ATTACHMENTS! [2] Error String: [The system cannot find the file specified.]
03/03/2006 17:12:09.448 qbf260199000090d6.smd Scanned: Error starting scanner
 
Any idea what I did wrong?
 
thank you

Harry Vanderzand
inTown Internet & Computer Services
11 Belmont Ave. W., Kitchener, ON,N2M 1L2
519-741-1222

 

Reply via email to