[clamav-win32] Getting started with ClamAV for Windows as aservice

[Ryan]

Either way - The result is the same so I went for the modified "ClamWin" 
option since it seemed more straightforward to me. My 2¢ regarding positive 
detection is: Just delete the e-mail w/o recipient notify. I used to notify 
but it's effectively spam since most virii are spewed out from zombie hosts 
anyway. But I digress...

As far as testing clamd goes - The GUI didn't immediately work for me and I 
didn't spend any time looking into it since I only need hMailServer & script 
support. I test clamd at the cmd line the same way you use it in 
hMailServer: "path\clamdscan.exe path\eicar.txt". If clamd detection works 
but the errorlevel is still 0 then you know you have the "bad" 0.92 build 
and should download it again.

Ryan


----- Original Message ----- 
From: "Jeff Dunlap" <jeff_j_dunlap at yahoo.com>
To: <clamav-win32 at lists.clamav.net>
Sent: Friday, December 21, 2007 09:18
Subject: Re: [clamav-win32] Getting started with ClamAV for Windows as 
aservice


> Hi Ryan,
>
>  I noticed that you have ClamWin checked, and in fact I had read a message 
> on this forum about checking that for ClamAV for Windows, but it seemed a 
> little weird to me since we are not using ClamWin.
>
>  What I had done was to ensure that the ClamWin tab is totally blank (no 
> checkmarks nor any info in the fields).
>
>  In the External virus scanner tab, I checked 'Use external scanner'
>
>  Scanner Executable:
>  "c:\program files\clamav\clamdscan.exe" "%FILE%"
>
>  Return Value
>  1
>
>  In the General tab, I chose to 'Notifiy recipient' and to delete 
> attachments.
>
>  What this configuration does is delete any infected attachments yet the 
> message is sent.  The subject is automatically prefixed with VIRUS 
> DETECTED, and a short message indicating that the attachment was deleted.
>
>  Best Regards,
>
>  Jeff Dunlap
>