Menu

#4 Stops a 2nd virus scan if the 1st scan found a virus

closed-accepted
nobody
Bugfix (3)
5
2008-03-21
2008-01-10
No

I have discovered that when an infected mail is found by clamav it is once again being scanned by trophie/sophie/sophos.

Now its my understanding from the code that a positive hit from one virus scanner is enough to have the mail canned, so in that case performing a second scan is a total waste of time if the first scan was positive.

I attach a patch with overcomes this by simply checking the existing FoundVirus variable before doing a second virus scan.

While running in debug, no second trophie scan is being perfomed after a positive clamAV scan, when testing with the eicar test virus.

Discussion

  • Gerard Earley

    Gerard Earley - 2008-01-10
     
  • Jason Frisvold

    Jason Frisvold - 2008-03-21

    Logged In: YES
    user_id=1201957
    Originator: NO

    Added to current CVS

     
  • Jason Frisvold

    Jason Frisvold - 2008-03-21
    • status: open --> closed-accepted
     

Log in to post a comment.

MongoDB Logo MongoDB