On Mon, 16 Aug 2010 04:39:59 +0000 James Brown <[email protected]> wrote:
> I have ClamAV 0.96.1/11559 on my vds-server under FreeBSD 8.1-STABLE > and on my laptop under Debian Lenny AMD64. > I have the next problem with my clamav on my vds under FreeBSD. > Some days ago my clamscan found the next: > clamscan -ir / > /home/user/data/email/somename.com/name_of_mailbox/mbox: > HTML.Phishing.Bank-485 FOUND > Killed > As we see after founding that virus my clamav was fallen. > Such problem was found and on my desktop under Debian because I > receive my mail from my server to my email-client > (mozilla-thunderbird) on my laptop. > But I have no problem with autokilling clamscan process on my laptop. > Furthermore, such autokilling happens with running commands clamscan > -[iv]r /, clamscan -[iv]r /home, clamscan -[iv]r /usr and clamscan > -[iv]r /var. > When I scanning other FS (/boot, /etc, /root, /tmp etc.) I have no > such problem too. > What can it be, how I can to fight with it? Try running with -v (so clamscan -rv /usr), and write down the last file it was scanning prior to the crash. Then try rescanning just that single file. If it still crashes you found the culprit: file a bugreport. If not then enable coredumps (ulimit -c unlimited), run clamscan till it crashes, and use gdb to get a stacktrace from it (gdb -c <corefile> /usr/bin/clamscan; (gdb) backtrace full) Best regards, --Edwin _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
