| Main Archive Page > Month Archives > clamav-users archives |
Re: [Clamav-users] eicar Identified But Not Moved
From: Sean McGlynn <sean_mcglynn_at_nospam>Date: Wed Oct 17 2007 - 13:16:11 GMT
To: ClamAV users ML <clamav-users@lists.clamav.net>
P.S.S
For what it's worth, it wont remove the file either. Same "can't open file" message is displayed.
- Original Message ---- From: Török Edvin <edwintorok@gmail.com> To: ClamAV users ML <clamav-users@lists.clamav.net> Sent: Tuesday, October 16, 2007 3:18:43 PM Subject: Re: [Clamav-users] eicar Identified But Not Moved
On 10/16/07, Sean McGlynn <sean_mcglynn@yahoo.com> wrote:
> Just to be certain (It's not my first day with Linux, but I'm still relatively new to it), you mean NFS as in Network File System, as in mounting a remote file system on the Linux server, correct? If correct, then no, NFS is not involved. Both the directory being scanned and the destination directory for quarantine files on on the root filesystem, local to the machine.
>
Try this:
$ strace clamscan -r --move=/var/log/clam/infected -l
/var/log/clam/dailyclamscanSPM /home/justlgn/test/eicar.com
Then we'll know exactly what happened. "Can't open file" looks like a message from the scanner, if the file couldn't be moved, it should have said that it cannot move the file.
--Edwin
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html