Topic: clamav daily scan message

[look2sky]

Hello,
I use clamav, installed with script from swert-knudsen, on my sme 6.01.0.1 box. When clamav makes his systemscan, I get the following mesage:
LibClamAV Warning: Unsupported multipart format knowbot' - report to bugs@clamav.net
LibClamAV Warning: Multipart MIME message contains no boundaries
LibClamAV Warning: messageFindArgument: no '=' sign found in MIME header
LibClamAV Warning: Multipart MIME message contains no boundaries
I reported this to bug@clamav.net this morning, hopefully to get a solution.
Parallel I'll try to solve it in this forum.
Has anybody this problem, too?
Can you help me?
Best Regards!
look2sky

[CheahCH]

Author: Nigel Horne
Date: 2004-11-07 22:52 +800
To: ClamAV Development
Subject: Re: [Clamav-devel] LibClamAV Warnings without clamscan's '--no-mail' option
On Sunday 07 Nov 2004 1:51 pm, Robert Allerstorfer wrote:
> Hi,
>
> when clamscan 0.80 is run without its '--no-mail' option, I get
> LibClamAV Warnings on several files:
>
> # clamscan /usr/lib/python2.2/email/test/data/msg_33.txt
> LibClamAV Warning: messageFindArgument: no '=' sign found in MIME header
> LibClamAV Warning: Multipart MIME message contains no boundaries
> /usr/lib/python2.2/email/test/data/msg_33.txt: OK

I am working on RFC2231 at the moment.

> # clamscan /usr/lib/python2.2/test/output/test_MimeWriter
> LibClamAV Warning: Unsupported multipart format knowbot' - report to
> bugs@??? /usr/lib/python2.2/test/output/test_MimeWriter: OK

A workaround for knowbot is already available from CVS.

> # clamscan /var/spool/mail/roal_TRASH/x-mailer.spam
> LibClamAV Warning: Unknown encoding type "quoted" - report to
> bugs@??? /var/spool/mail/roal_TRASH/x-mailer.spam:
> Trojan.Dropper.JS.Zerolin-6 FOUND

Please put this one through the version in CVS. It'll still of course print
a warning, but it should be better.

-Nigel

[djhomeless]

Hmm,
I just upgraded to version .83 and I still get a daily email with the error:

Code: [Select]

LibClamAV Warning: Multipart MIME message contains no boundaries

Clam is doing its job so I don't think its serious.

Geoffrey

[look2sky]

Hi Geoffrey,

I got the same message with version 0.81. on daily email, Clam is working!
I don't think its serious, too.

bye
look2sky