Results 1 to 8 of 8

Thread: Manually Scanning for Viruses

Threaded View

  1. #1
    Join Date
    Jan 2008
    Location
    127.0.0.1, Virginia, USA
    Posts
    42
    Rep Power
    7

    Default Manually Scanning for Viruses

    Hello everyone,

    Recently, we have been hit with a large amount of viruses that have not been detected by clam. However, they are now reported. So, would it be possible to rescan the entire message database overnight with clam? That is: /opt/store.

    I want to get rid of any residual viruses that got past our filter because people are still opening week-old emails and getting infected.

    Here's what I found when I ran the following:
    Code:
    ./clamscan -r -i -d /opt/zimbra/data/clamav/db /opt/zimbra/store/*
    Here's a snippet of what was found:
    Code:
    /opt/zimbra/store/0/17/msg/3/13127-17639.msg: Email.Phishing.RB-3469 FOUND
    /opt/zimbra/store/0/17/msg/3/12961-17451.msg: Email.Phishing.RB-3469 FOUND
    /opt/zimbra/store/0/17/msg/3/13687-18288.msg: Trojan.Downloader.Agent-1297 FOUND
    /opt/zimbra/store/0/17/msg/3/12776-17248.msg: Email.Phishing.Bank-72 FOUND
    /opt/zimbra/store/0/17/msg/3/13757-18365.msg: Trojan.Downloader.Agent-1298 FOUND
    /opt/zimbra/store/0/17/msg/3/13235-17757.msg: Trojan.Agent-57252 FOUND
    Would it cause corruption if I had clamscan just remove the infected messages? Anyone have experience with this?

    One other question: Does anyone know how to find out what virus definitions that clam is using to scan the incoming emails with?
    When I type zmclamdctl status, it gives no output.

    One additional thing to note: I upgraded to 0.94.1 and pointed the symlink "clamav" to the directory that I placed in /opt/zimbra.
    Last edited by cyberdeath; 11-13-2008 at 07:38 AM.
    cyberdeath

Similar Threads

  1. Replies: 7
    Last Post: 02-19-2010, 05:34 AM
  2. Outgoing Virus Scanning
    By neemers in forum Installation
    Replies: 4
    Last Post: 10-28-2009, 07:45 AM
  3. Manually add address to a GAL?
    By Meowmixjinx in forum Users
    Replies: 1
    Last Post: 01-30-2008, 01:00 PM
  4. Manually importing LDAP entries..
    By tamilnandhu in forum Installation
    Replies: 1
    Last Post: 01-06-2008, 09:41 PM
  5. Help needed to setup up third party Antivirus scanning
    By curious_guy in forum Installation
    Replies: 1
    Last Post: 10-01-2006, 06:15 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •