Clamav not work for scan email, but ok for scan directory.

Post Reply
Katombe10
Posts: 1
Joined: Wed Jun 29, 2022 8:11 am

Hi all,
first,i want to say thank you for @dpeca have fork myvestacp. i really love it.

So i just install myvesta to new VPS with proper spec so i can get all feature of myvestacp.
Recently use myvesta without clamav, now im using with clamav. After 1 month i discover clamav not work properly. here my case :

1. Incloming mail with attachment has scanned by clamav but status OK no virus found and eichar not detect too. In fact at those email have attachment and attachment contain virus, attachment can be zip, gz, rar etc and no warning or anything. Log /var/log/clamav/clamav.log :

Code: Select all

Wed Jun 29 13:38:14 2022 -> /var/spool/exim4/scan/1o6RL5-001Yky-7R/1o6RL5-001Yky-7R.eml: OK
Wed Jun 29 13:39:10 2022 -> /var/spool/exim4/scan/1o6RLz-001Yro-GM/1o6RLz-001Yro-GM.eml: OK
2. So for testing clamav , im download the attachment and scan with clamscan -r --remove and puff virus found :lol:
here the result :

Code: Select all

 clamscan -r --remove vault/
/home/vault/ID-Statement of   _Account_s-XXXXX1045-290620222002256862.Gz: OK
/home/vault/eicar_com.zip: {HEX}EICAR.TEST.3.UNOFFICIAL FOUND
/home/vault/eicar_com.zip: Removed.

----------- SCAN SUMMARY -----------
Known viruses: 8803786
Engine version: 0.103.6
Scanned directories: 1
Scanned files: 2
Infected files: 1
Data scanned: 4.07 MB
Data read: 0.48 MB (ratio 8.55:1)
Time: 28.658 sec (0 m 28 s)
Start Date: 2022:06:29 12:38:23
End Date:   2022:06:29 12:38:51
for this file Account_s-XXXXX1045-290620222002256862.Gz: OK this is a virus and detect with windows defender as Trojan. Wacatac.B!ml.

Anyone exprience this case like me?
If yes please tell me where i missin the config.

Note : I test with https://emailsecuritytester.com/ Libraesva and mail test pass clamav so i recived all virus test.
libravesta.png
libravesta.png (15.01 KiB)

Tags:
Post Reply