-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Am 01.09.2011 21:25, schrieb Anne Wilson:
> On Thursday 01 Sep 2011 G.W. Haywood wrote:
>>
>> The reports are not about 'infections'.  They're about junk mail.
>>
> Of course, although the report calls them two infected files.

That's the joy of (ab)using a virus scanner for junk mail filtering.

>  Even so, if I 
> disagreed with their definition of junk I should be able to tell it so.

You can. But as it's a virus scanner, you'll have to use the procedure
for false positive virus detections, which are not very well adapted to
handling false positive junk mail detection. Specifically, you can:
- - report the false positive to the signature creator and wait for a
  corrected signature
- - whitelist the file that's wrongly reported as infected by its MD5 sum
- - set the signature on your local ignore list (local.ign)
(See http://www.clamav.net/doc/latest/signatures.pdf ch. 3.8 for the
latter two.) But probably the easiest solution for your would be to
just stop using the Sanesecurity signatures.

> My mail is not in  
> /home/anne/.kde/share/apps/kmail/imap/.1687036093.directory/.INBOX.directory/Newsletters
>  
> but in ~/Maildir.  
> 
> ls: cannot access 
> /home/anne/.kde/share/apps/kmail/imap/.1687036093.directory/.INBOX.directory/Newsletters:
>  
> No such file or directory

That looks like a temporary working directory of KMail. Perhaps you
should exclude .kde/share/apps/kmail/imap from ClamAV scans. Most mail
applications do not take it kindly when virus scanners operate on their
innards.

HTH
Tilman

- -- 
Tilman Schmidt
Phoenix Software GmbH
Bonn, Germany
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.12 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk5gpOgACgkQ780oymN0g8NuagCfe66SANoNHkRYcZCsGO/5P0Bu
ebYAoMvso2N7BGcSW8KSAcMTHP7XIfJt
=2Haz
-----END PGP SIGNATURE-----
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to