Following up on discussion yesterday about option --mbox not being able to detect virus I've found another sample.
Since the sample has been sent to ClamAV through the ClamAV submission system, I've remove any private information from the sample that can be downloaded at http://www.softscan.dk/samples/sample.zip. Please note that sample is zipped with the password: sample. [EMAIL PROTECTED] virus]# clamscan --mbox ./sample.eml ./sample.eml: OK ----------- SCAN SUMMARY ----------- Known viruses: 12013 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 0.09 MB I/O buffer size: 131072 bytes Time: 0.765 sec (0 m 0 s) [EMAIL PROTECTED] virus]# reformime -e -s 1.2 < sample.eml > sample.bin [EMAIL PROTECTED] virus]# clamscan --mbox ./sample.bin ./sample.bin: Yaha.K FOUND ----------- SCAN SUMMARY ----------- Known viruses: 12013 Scanned directories: 0 Scanned files: 1 Infected files: 1 Data scanned: 0.03 MB I/O buffer size: 131072 bytes Time: 0.748 sec (0 m 0 s) [EMAIL PROTECTED] virus]# clamscan --version clamscan / ClamAV version devel-20031102 DB version: main.cvd is up to date (version: 12, sigs: 11867, f-level: 1, builder: tkojm) daily.cvd is up to date (version: 72, sigs: 146, f-level: 1, builder: ddm) Any DB maintainers that want to take a look at the original this is submission 412. Best regards, Diego d'Ambra
smime.p7s
Description: S/MIME cryptographic signature
