weirdness in FC1 (was: Re: [Clamav-users] clam devel-20031223 has mime decoding problems)

[René Bellora]

Nigel Horne wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Tuesday 23 Dec 2003 4:10 pm, René Bellora wrote:
 

hi!

   i upgraded from clam 0.65 to clam devel-20031223. After the upgrade,
i checked some archived infected mails. I found the '--mbox' option miss
some viruses it used to catch. Once unpacked, clamscan detects the virus
   

I downloaded your file and got this:

[EMAIL PROTECTED] tmp]$ clamscan --mbox 2251.0.mailpack
2251.0.mailpack: W32/BugBear.A FOUND
[EMAIL PROTECTED] tmp]$ clamscan --version
clamscan / ClamAV version devel-20031223
- -Nigel

 

I upgraded to devel-20031229, and that problem went away. But now, i 
found the following, with another virus:

# clamscan --version
clamscan / ClamAV version devel-20031229
# freshclam -v
Current working dir is /usr/local/share/clamav
ClamAV update process started at Mon Dec 29 12:21:44 2003
Connected to database.clamav.net (209.204.175.217).
Reading CVD header (main.cvd): OK
Downloading main.cvd [*]
main.cvd updated (version: 12, sigs: 11867, f-level: 1, builder: tkojm)
Connected to database.clamav.net (209.204.175.217).
Reading CVD header (daily.cvd): OK
Downloading daily.cvd [*]
daily.cvd updated (version: 68, sigs: 115, f-level: 1, builder: ddm)
Database updated (11982 signatures) from database.clamav.net 
(209.204.175.217).
Freeing option list...done

# clamscan desde.exe
desde.exe: OK
----------- SCAN SUMMARY -----------
Known viruses: 11982
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 0.07 MB
I/O buffer size: 131072 bytes
Time: 2.491 sec (0 m 2 s)
so, i went to report 'desde.exe', which i knew it was a Magistr variant, 
but the test-clamav web interface do detect it... Then, i do another 
'freshclam -v', tried again, but clamscan continues saying 'OK'

regards,
René
-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id78&alloc_id371&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users