I think the clamav plugin is broken when used with the current release of clamav. I had to put in quite a few patches to get it work with the lastest clamav.
Jim James H. Thompson [EMAIL PROTECTED] ----- Original Message ----- From: "Sam Laffere" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, September 11, 2003 11:42 AM Subject: clamav plugin > I can not get the clamav plugin to catch any viruses that I am attaching and > sending with email. The details of the setup follow first, and then some of > the things I have done to pinpoint the problem. > I think that the problem is one of two places. Either the attachment is > encoded in such a way that it is not detected when passed to clamscan, or > the method of passing it into clamscan is at fault. Not being a programmer, > I am stuck at this point and am looking for help. > > If I have overlooked a source of information regarding setting this up, I > apologize, and would like to shown the link. > > Thank You, > Sam Laffere > > > > System Details > Linux 2.4.20 > qpsmtpd 0.26 > clamav 0.60 > > I have ftp'd the file virus-mimail into my home directory, and clamscan > finds and reports it just fine. > > **************************************************************************** > * > newqmail:/home/clamav# clamscan /home/lafferes/virus-mimail > /home/lafferes/virus-mimail: Trojan.Dropper.C FOUND > > ----------- SCAN SUMMARY ----------- > Known viruses: 9577 > Scanned directories: 0 > Scanned files: 1 > Infected files: 1 > ... > **************************************************************************** > * > > I have modified the plugin line as follows > > **********original********* > my $cmd = > "/usr/local/bin/clamscan --stdout -i --max-recursion=50 --disable-summary > $filename 2>&1"; > results follow: > > 11541 running plugin clamav > 11541 clamav plugin: Running: > /usr/local/bin/clamscan --stdout -i --max-recursion=50 --disable-summary > /tmp/s3FgMwMfFQ 2>&1 > 11541 clamav plugin: clamscan results: > > > *************modified ************ > my $cmd = > "/usr/local/bin/clamscan --stdout -i --max-recursion=50 --disable-summary > /home/username/virus-mimail 2>&1"; > > and the results are thus. > 11471 running plugin clamav > 11471 clamav plugin: Running: > /usr/local/bin/clamscan --stdout -i --max-recursion=50 --disable-summary > /home/lafferes/virus-mimail 2>&1 > 11471 clamav plugin: clamscan results: Trojan.Dropper.C > 11471 clamav plugin: Virus(es) found > > >
