ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
ClamWin didn't found Viruses attached in Emails!
Desaster


Joined: 30 Nov 2005
Posts: 6
Location: Langeoog
Reply with quote
Hy,
i have ClamWin v0.87.1 with the VirusDatabase from 01 Dez 2005 installed. Now i receive Emails with Viruses "Worm.SomeFool.Gen-1" attached in the mail and ClamWin say nothing.Embarassed

After i safed the Mail on my Desktop and scan ClamWin found the Virus.
But i think the attached Virus shoud be deleted befor the Virus arrived my Mailbox.

I Test it more than 5 times allways the same. ClamWin didn't Scan the Mails or didn't found the Virus
ClamAV installed on my Webserver does the Job right.
Maybe its a little Brainbug!

Greets from Germany
Desaster

PS. The rest of his job does ClamWin real good no we need it in German Cool
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 1748
Reply with quote
Which Email client do you use? It is clearly written on clamwin webiste that it will only scan emails on-the-fly in Micorosft Outlook, not Outlook Express or others.
View user's profileSend private message
Desaster


Joined: 30 Nov 2005
Posts: 6
Location: Langeoog
Reply with quote
alch wrote:
Which Email client do you use? It is clearly written on clamwin webiste that it will only scan emails on-the-fly in Micorosft Outlook, not Outlook Express or others.


Yes i no that ClamWin only scan Viruses on the Fly with Microsoft Outlook I read the FAQ's befor i start the thread here!. Very Happy
Sorry, my Email Client is "Microsoft Outlook 2002" but ClamWin do realy nothing on the Fly.
What to do now?

Greets from the Island Langeoog
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 1748
Reply with quote
Sorry I had to say it here as it is one of teh most frequent reasons. Do you see Clamwin splashscreen and Help-About Clamwin in the menu?
View user's profileSend private message
Desaster


Joined: 30 Nov 2005
Posts: 6
Location: Langeoog
Reply with quote
alch wrote:
Sorry I had to say it here as it is one of teh most frequent reasons. Do you see Clamwin splashscreen and Help-About Clamwin in the menu?


Ok, It was my mistake. Normaly i shoud right that i work mit MS Outlook. Mea Culpa
I now the problem with the most people they didn't read anything befor they ask. No Problem Smile

Yes I see the SplashScreen and the Help-About Clamwin in the menu. It look like that it works realy and the installation done well right.

Greets
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 1748
Reply with quote
can you save one of the messages where clamwin does not detect the virus as .msg file, then zip it with password "clamwin" and send to my email address: [alch at users.sourcforge.net]
View user's profileSend private message
Desaster


Joined: 30 Nov 2005
Posts: 6
Location: Langeoog
Reply with quote
Ok i will do this next time when a Virus arrived me.

Greets
View user's profileSend private message
Desaster


Joined: 30 Nov 2005
Posts: 6
Location: Langeoog
Reply with quote
Hi alch,
the mail comes back with a error from q-mail.

The error:
Quote:
Remote host said: 552 5.7.0 Illegal Attachment i16si8469531wxd


Ok, i create tar-Ball and store it on my Webspace.

take a look in the mail i send to your mailaccount.

Greets
View user's profileSend private message
alch
Site Admin

Joined: 27 Nov 2005
Posts: 1748
Reply with quote
Quote:
After i safed the Mail on my Desktop and scan ClamWin found the Virus.
But i think the attached Virus shoud be deleted befor the Virus arrived my Mailbox.

I got your files and I think I know what the problem is. Outlook XP and higher will block potentially unsafe attachments (.pif files, etc). Therefore an attachment cannot be accessed by a user or clamwin and is not scanned. This is normal, as the blocked attachment does not pose any security threat.
You may notice a yellow line under the toolbar with "Outlook blocked access..." when you open the message.
View user's profileSend private message
Desaster


Joined: 30 Nov 2005
Posts: 6
Location: Langeoog
Reply with quote
Embarassed I am so crazy i forgott the Oulook feature.

You are right!!

I disable the Outlook feature and open the mail again and now it works real good.
The Virus was found in the mail and was replaced with a txt-file here the content of that file:
--------------------------------------
Scan started: Tue Dec 6 19:49:20 2005

all_document_pif: Worm.SomeFool.Gen-1 FOUND

-- summary --
Known viruses: 41434
Engine version: 0.87.1
Scanned directories: 0
Scanned files: 1
Infected files: 1
Data scanned: 0.02 MB
Time: 1.278 sec (0 m 1 s)


and it also works with zipped Viruses like Trojan.Danmec

Now it is time to throw NAV over board and ship with Clamwin

Thanks and greets

PS. merry x-mas and happy new year
View user's profileSend private message
ClamWin didn't found Viruses attached in Emails!
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic