On Wednesday 14 April 2004 8:08 pm, Oscar A. Valdez wrote:

> I just installed ClamAV, but Worm.SomeFool.P (in a zip file) is getting
> through, although the online scanner at
> http://www.gietl.com/test-clamav/ detects it.
>
> Am I missing something in my configuration?

Try sending yourself an email containing the Eicar Anti-Virus Test String (try 
both raw and zipped versions in different emails) and see if they get 
detected.

http://www.eicar.org/anti_virus_test_file.htm

If both do, the problem is that your ClamAV signatures aren't up to date.   
(Run freshclam)

If the raw one gets picked up and the zipped one goes through, there's 
something wrong with the way your mail software and ClamAV are handling 
files.   Give us more details about how you're trying to do this.

If neither gets picked up, then just try a plain clamscan on a file containing 
Eicar - something's badly wrong with either your ClamAV installation or the 
configuration of how emails are supposed to get scanned by it.

Regards,

Antony.

-- 
In science, one tries to tell people
in such a way as to be understood by everyone
something that no-one ever knew before.

In poetry, it is the exact opposite.

 - Paul Dirac

                                                     Please reply to the list;
                                                           please don't CC me.



-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to