[Clamav-users] virus detected using clamscan but not with Mail::ClamAV perl module

[Per Jessen]

I guess this is really for the author of the Mail::ClamAV module, but
just in case anyone has seen this before: 

(1) I scan the file using clamscan:

# clamscan /tmp/1135265287.V902I5e924.thorium
/tmp/1135265287.V902I5e924.thorium: Worm.Sober.U FOUND

----------- SCAN SUMMARY -----------
Known viruses: 41469
Engine version: 0.87.1
Scanned directories: 0
Scanned files: 1
Infected files: 1
Data scanned: 0.18 MB
Time: 3.422 sec (0 m 3 s)


(2) I scan the same file using the Mail::ClamAV interface

snippet of perl code:

my $status = $clam->scan("/tmp/1135265287.V902I5e924.thorium",
             CL_ARCHIVE|CL_MAIL);

# $status is an overloaded object
die "Failed to scan: $status" unless $status;
if ($status->virus) {
      print "identified virus \"$status\".\n";
}
else
{
      print "no virus identified: $status\n";
}

# ./perlclamscan
no virus identified: Clean





/Per Jessen, Zürich


_______________________________________________
http://lurker.clamav.net/list/clamav-users.html