[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [cobalt-users] RaQ3 and F-Prot



<snip>
> It checked for the latest virus signatures okay then went 
> ahead and scanned 
> the hard drive but it came back with the following...
> 
> //../home/spool/mail/suzanne->NEWPROF.EXE  Infection: 
> W32/Magistr.28672@mm
> Virus-infected files in archives cannot be deleted.
> //../home/spool/mail/candace->MSOOBE.EXE  Infection: 
> W32/Magistr.28672@mm
> Virus-infected files in archives cannot be deleted.
> //../home/spool/mail/teamsports->IANPODIA.EXE  Infection: 
> W32/Hybris.worm.B
> Virus-infected files in archives cannot be deleted.
> 
> Why can't the files be deleted from archives???
> Is this a file permission thing???
</snip>

I suspect this is NOT file permissions, its more likely because of the complexity of un-archiving the file out of the users mailq, deleting the suspect file, re-archiving and then putting the email back into the mail queue! Quite tricky i'd guess :)

Also, which user did you run F-Prot as? I'm presuming you ran as root, in which case file permissions generally can't be the issue.

Regards,

Andy
andy@xxxxxxxxxxxxxxx
http://www.raqpak.com/ <-- Raq/Qube unofficial PKGs and support advice