ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
ClamWin Free Antivirus Forum Index » Virus Scanner
Reply to topic
Why ClamWin doesn't delete trojans?
cosmo


Joined: 27 Apr 2010
Posts: 0
Post Posted: Tue Apr 27, 2010 8:56 pm Reply with quote
Hi, ClamWin reported following trojans:

C:\SWSoft\Plesk\Mail Servers\Mail Enable\Postoffices\marl\MAILROOT\info\Inbox\15D75E46BB32410E8139294166F0A2F9.MAI: no action performed on a mailbox
C:\SWSoft\Plesk\Mail Servers\Mail Enable\Postoffices\mar\MAILROOT\info\Inbox\265665B999E044519736C3BCB0166EA7.MAI: no action performed on a mailbox
C:\SWSoft\Plesk\Mail Servers\Mail Enable\Postoffices\mar\MAILROOT\info\Inbox\37E0976383F944DDAED17B93BD410DB5.MAI: no action performed on a mailbox

C:\SWSoft\Plesk\Mail Servers\Mail Enable\Postoffices\mar\MAILROOT\info\Inbox\15D75E46BB32410E8139294166F0A2F9.MAI: Trojan.Agent-27670 FOUND
C:\SWSoft\Plesk\Mail Servers\Mail Enable\Postoffices\marl\MAILROOT\info\Inbox\265665B999E044519736C3BCB0166EA7.MAI: Trojan.Zbot-1737 FOUND
C:\SWSoft\Plesk\Mail Servers\Mail Enable\Postoffices\marl\MAILROOT\info\Inbox\37E0976383F944DDAED17B93BD410DB5.MAI: Email.Phishing.Webmail-36 FOUND

Now, even if I tell ClamWin to quarantine or delete the infected files, nothing happens. What does it mean "no action performed on a mailbox"?

Regards,
Cosmo
View user's profileSend private message
sherpya


Joined: 22 Mar 2006
Posts: 0
Location: Italy
Post Posted: Wed Apr 28, 2010 3:48 pm Reply with quote
that a special option refuses to remove the file if it is a mailbox, since clamwin is not able to remove only the message with the virus
it would remove all the mailbox, so we opted for this to avoid screwing users mailboxes
View user's profileSend private message
cosmo


Joined: 27 Apr 2010
Posts: 0
Post Posted: Wed Apr 28, 2010 4:01 pm Reply with quote
Sure, but these are single mail messages, not the whole mailbox. Is it possible to activate / deactivate the option you mentioned?
View user's profileSend private message
sherpya


Joined: 22 Mar 2006
Posts: 0
Location: Italy
Post Posted: Thu Apr 29, 2010 9:42 am Reply with quote
I'm not sure alch added it as optional, but it could be a request for next release
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 9
Location: USA
Post Posted: Thu Apr 29, 2010 2:08 pm Reply with quote
If there are individual files in the mailbox, could you do a raw scan (outside of Outlook) with ClamWin and remove the trojans that way, while keeping the "good" files intact?

Regards,
View user's profileSend private message
cosmo


Joined: 27 Apr 2010
Posts: 0
Post Posted: Thu Apr 29, 2010 2:16 pm Reply with quote
GuitarBob wrote:
If there are individual files in the mailbox, could you do a raw scan (outside of Outlook) with ClamWin and remove the trojans that way, while keeping the "good" files intact?

Regards,


I don't think this can be done. As sherpya suggested, this should be optional. I'm using it on a server, so there is no risk in breaking the whole mailbox, cause all messages are stored as separate files for each mailbox.
View user's profileSend private message
sherpya


Joined: 22 Mar 2006
Posts: 0
Location: Italy
Post Posted: Fri Apr 30, 2010 11:52 am Reply with quote
but maybe the serve can keep an "index" or "cache" of message files, so it may not be so happy of this, anyway I think it would be good to have this feature as optional and enabled by default, maybe putting in advanced setting with a warning in the tooltip
View user's profileSend private message
Why ClamWin doesn't delete trojans?
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
 		All times are GMT  
Page 1 of 1  
  
  
ClamWin Free Antivirus Forum Index » Virus Scanner
 Reply to topic