Thomas Herzog wrote: > > > Rob MacGregor wrote: >> >> On Wed, Apr 21, 2010 at 16:02, Thomas Herzog <[email protected]> >> wrote: >>> >>> Hello, >>> We're running clamav 0.95.3 with amavisd-new-2.6.1and postfix 2.5.5. >>> >>> Sending a message with a virus attached clamav-daemon didn't find it. -> >> >> http://www.clamav.net/lang/en/sendvirus/ >> >> -- >> Please keep list traffic on the list. >> >> Rob MacGregor >> Whoever fights monsters should see to it that in the process he >> doesn't become a monster. Friedrich Nietzsche >> _______________________________________________ >> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net >> http://www.clamav.net/support/ml >> >> > > Thanks for your reply, just to get this right. > The virus is detected by the binaries clamdscan or clamscan, but not by > the deamon called through amavis -> see the attachment of my first post. > > I've uploaded the the virus anyway as requested. > > Thanks > Thomas H. > > WARNING: Ignoring deprecated option ArchiveLimitMemoryUsage at line 12 > WARNING: Ignoring deprecated option ArchiveLimitMemoryUsage at line 12 > /tmp/UPS_invoice_4557.zip: Suspect.Bredozip-zippwd-5 FOUND > > ----------- SCAN SUMMARY ----------- > Infected files: 1 > Time: 0.004 sec (0 m 0 s) > > LibClamAV Warning: > *********************************************************** > LibClamAV Warning: *** This version of the ClamAV engine is outdated. > *** > LibClamAV Warning: *** DON'T PANIC! Read http://www.clamav.net/support/faq > *** > LibClamAV Warning: > *********************************************************** > /tmp/UPS_invoice_4557.zip: Suspect.Bredozip-zippwd-5 FOUND > > ----------- SCAN SUMMARY ----------- > Known viruses: 757667 > Engine version: 0.95.3 > Scanned directories: 0 > Scanned files: 1 > Infected files: 1 > Data scanned: 0.00 MB > Data read: 0.04 MB (ratio 0.00:1) > Time: 5.698 sec (0 m 5 s) > > Result:
This virus is already recognized by ClamAV 0.96/10781/Thu Apr 22 04:55:30 2010 (timezone: ) as Suspect.Bredozip-zippwd-5 . Be careful when submitting samples and remember to run freshclam! Check the FAQ now -- View this message in context: http://old.nabble.com/clamav-daemon-didn%27t-recognise-attached-virus-tp28288042p28324584.html Sent from the clamav-users mailing list archive at Nabble.com. _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
