[clamav-win32] Clamav not detecting eicar?

[Owen Dare]

I have posted this message on the ASSP mailing list too as I'm not quite sure where the problem lies.


I have recently upgraded ASSP and Clamav so I could try running clamav from ASSP rather than as a pickup event at the MTA like I have been in the past.
I changed over to W32.clamav (I was formerly using SOSDG version).
If I send myself the eicar test file, or the clamav test file(s) it is not detected.
If I scan the files using either clamdscan or clamscan they are detected (even in the SPAM & NOSPAM folders) so it would seem to me to be something to do with how ASSP is calling Clamav perhaps?
Interestingly the VBS exploits from GFI test page are detected.

Anyone have any ideas?

Some details of my config below.

Nov-22-06 19:27:24 Starting as a service
Nov-22-06 19:27:25 ASSP version 1.2.6(30) (Perl 5.008007) initializing 
Nov-22-06 19:27:25 File::Scan::ClamAV module version 1.8 installed and available
Nov-22-06 19:27:25 ASSP running on server: GLAD-UPSTAIRS 
Nov-22-06 19:27:25 Net::LDAP module not installed
Nov-22-06 19:27:25 Net::DNS module version 0.55 installed and available
Nov-22-06 19:27:25 Email::Valid module version 0.15 installed and available
Nov-22-06 19:27:25 Mail::SPF::Query module version 1.998 installed and available
Nov-22-06 19:27:25 Mail::SRS module version 0.30 installed - Sender Rewriting Scheme available
Nov-22-06 19:27:25 Compress::Zlib module version 1.41 installed - HTTP compression available
Nov-22-06 19:27:25 Digest::MD5 module version 2.33 installed - delaying will use MD5 keys for
                   hashes
Nov-22-06 19:27:25 File::ReadBackwards module version 1.04 installed - searching of log files
                   enabled
Nov-22-06 19:27:25 Time::HiRes module version 1.76 installed - CPU usage statistics available
Nov-22-06 19:27:25 PerlIO::scalar module version 0.02 installed - chroot savy
Nov-22-06 19:27:25 Sys::Syslog module not installed.
Nov-22-06 19:27:25 Win32::Daemon module version 20030617 installed - can run as Win32 service
Nov-22-06 19:27:25 Listening for mail connections at 25 and admin connections at 55555

cheers,

Owen