Hy,
i have ClamWin v0.87.1 with the VirusDatabase from 01 Dez 2005 installed. Now i receive Emails with Viruses "Worm.SomeFool.Gen-1" attached in the mail and ClamWin say nothing.

After i safed the Mail on my Desktop and scan ClamWin found the Virus.
But i think the attached Virus shoud be deleted befor the Virus arrived my Mailbox.

I Test it more than 5 times allways the same. ClamWin didn't Scan the Mails or didn't found the Virus
ClamAV installed on my Webserver does the Job right.
Maybe its a little Brainbug!

Greets from Germany
Desaster

PS. The rest of his job does ClamWin real good no we need it in German

Which Email client do you use? It is clearly written on clamwin webiste that it will only scan emails on-the-fly in Micorosft Outlook, not Outlook Express or others.

Yes i no that ClamWin only scan Viruses on the Fly with Microsoft Outlook I read the FAQ's befor i start the thread here!.
Sorry, my Email Client is "Microsoft Outlook 2002" but ClamWin do realy nothing on the Fly.
What to do now?

Greets from the Island Langeoog

Sorry I had to say it here as it is one of teh most frequent reasons. Do you see Clamwin splashscreen and Help-About Clamwin in the menu?

Ok, It was my mistake. Normaly i shoud right that i work mit MS Outlook. Mea Culpa
I now the problem with the most people they didn't read anything befor they ask. No Problem

Yes I see the SplashScreen and the Help-About Clamwin in the menu. It look like that it works realy and the installation done well right.

Greets

can you save one of the messages where clamwin does not detect the virus as .msg file, then zip it with password "clamwin" and send to my email address: [alch at users.sourcforge.net]

Ok i will do this next time when a Virus arrived me.

Greets

Hi alch,
the mail comes back with a error from q-mail.

The error:


Ok, i create tar-Ball and store it on my Webspace.

take a look in the mail i send to your mailaccount.

Greets

I got your files and I think I know what the problem is. Outlook XP and higher will block potentially unsafe attachments (.pif files, etc). Therefore an attachment cannot be accessed by a user or clamwin and is not scanned. This is normal, as the blocked attachment does not pose any security threat.
You may notice a yellow line under the toolbar with "Outlook blocked access..." when you open the message.

I am so crazy i forgott the Oulook feature.

You are right!!

I disable the Outlook feature and open the mail again and now it works real good.
The Virus was found in the mail and was replaced with a txt-file here the content of that file:
--------------------------------------
Scan started: Tue Dec 6 19:49:20 2005

all_document_pif: Worm.SomeFool.Gen-1 FOUND

-- summary --
Known viruses: 41434
Engine version: 0.87.1
Scanned directories: 0
Scanned files: 1
Infected files: 1
Data scanned: 0.02 MB
Time: 1.278 sec (0 m 1 s)


and it also works with zipped Viruses like Trojan.Danmec

Now it is time to throw NAV over board and ship with Clamwin

Thanks and greets

PS. merry x-mas and happy new year