Thoughts about finding viruses in email inboxes

Matthew Flaschen matthew.flaschen at gatech.edu
Sun Mar 29 02:54:37 UTC 2009


Leonard Chatagnier wrote:
> Have the same problem even on a manual test of the HDD.  It reports
> several viruses found but doesn't say what or where they are located.
> In the past, clamav, would list the names and location but now it
> doesn't anymore or I can't find them.

What clamav command are you running, exactly, and what version (of
Ubuntu and the command)?  Have you looked at the manual
(http://www.clamav.net/doc/latest/clamdoc.pdf) or man page to see if it
has the options you want?

I see no sign of a "hidden virus" problem.  i did notice an unrelated
database glitch similar to
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=471643 but upgrading to
0.94.2/8683/Wed from hardy backports solved that.  With the latest
command, this sequence works exactly as expected and documented:

mkdir -p avtest
for i in a b c d;
do
dd if=/dev/urandom count=1 bs=68 of=avtest/$i
done

clamscan -i -r avtest
wget https://secure.eicar.org/eicar.com -O avtest/c
clamscan -i -r avtest

It prints:

avtest/c: Eicar-Test-Signature FOUND

Of course, there are other clamav options you can use, but this one is
simple and in line with what you want.

Matt Flaschen




More information about the ubuntu-users mailing list