How can I see why a virus was not detected ?

[bougatoyta]

Hi,

I received a virus file with a .xz extension (a compressed file apparently)

It was not blocked by ClamAV, all logs files of clamav are empty even if the virus filter is actived.

For spam I can easily see in the original mail why it is blocked / not blocked but how can I do that for virus with PMG ?

Regards

 

[Stoiko Ivanov]

If you don't see in the logs that clamAV detected a virus - then it simply did not detect it - you can check the file again - by copying it to pmg and running
clamdscan /path/to/file.xz

but I guess that clamav simply did not have a matching signature

I hope this helps!