On Tue, 21 Jun 2005, jef moskot wrote: > On Sat, 18 Jun 2005, jef moskot wrote: > > If I forward the spam with the attached image to myself, clamscan picks > > it up. If I forward the image itself in a different message to myself, > > clamscan also detects it. > > > > However, if I clamscan the original mail file with the spam in it, > > clamscan doesn't see it. If I take shields down and mail the gif to > > myself, then clamscan the mail file, it doesn't find it. > > (Also if I scan the file directly, it detects it.) > > I just installed 0.86 and I'm still having this problem. I also tested it > with an .exe instead of a .gif and the problem is identical, so it's not > specifically an image thing. > > So, either it's unable to unpack the attachment and see it for what it is > (which is unlikely, since I can scan other mailboxes and detect viruses) > or for some odd reason it's not using my personal database when scanning > mailboxes, but it is using it when scanning regular files. > > Is it possible that it ignores additional .hdb files when scanning mboxes?
Sorry to nag, but since there were never any responses on this topic and it's been a few weeks, I thought I'd ask again... For those of you with local .hdb databases, are they used properly when scanning mbox-format messages? I'm still having the problem of them being detected when the attachment is fed directly to clamscan, but not detected when clamscan tries to scan an mbox with the offending file in the mbox as an attachment. Jeffrey Moskot System Administrator [EMAIL PROTECTED] _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
