HTTP Anti-Virus Proxy
http://havp.hege.li/forum/

Virus in tgz file not detected
http://havp.hege.li/forum/viewtopic.php?f=3&t=147
Page 1 of 1

Author:  housey [ 30 Jun 2006 13:47 ]
Post subject:  Virus in tgz file not detected

Hi

Using Havp 0.81 on Fedora Core 2 with kaspersky version 5.0.3

I was trying some test viruses I found at

http://dansguardian.org/downloads/2/Var ... st/danger/

My setup detected all of them except biginfected.tgz, I downloaded the file manually and ran

/opt/kav/bin/aveclient -p /var/run/aveserver -s biginfected.tgz

and it correctly determined that it contained the Email-Worm.Win32.NetSky.q virus.

Any suggestions on why it didnt work via HAVP? Ive not got an MAXSCANSIZE 0 and no max file settings in /etc/kav/kav4unix.conf.

Thanks

Paul

Author:  hege [ 30 Jun 2006 14:03 ]
Post subject: 

If aveclient detects it, so should HAVP. They use exact same commands to the daemon..

I tested with kav4mailservers 5.5 and HAVP catched it. You don't see it in access.log? Sure aveserver is enabled in HAVP?

Cheers,
Henrik

Page 1 of 1 All times are UTC + 2 hours [ DST ]
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/