It makes more sense now. I'm running Debian stable, and had installed Luca Gibelli's 0.65-1 backport.
Thanks. I hadn't looked back nearly that far.
Something really odd is going on then. Is it possible all of these folks really are suddenly infected? Something to research...
I had ignored his README, which states very clearly that you need to remove the old-format virus database files. I guess freshclam must use those in preference to the .cvd's. (I wonder why). I found out that a couple of signatures had been removed for that trojan between the date of my old-format files and the latest .cvd's.
Upon obtaining, building, and installing the Debian source testing packages on my system, the problem went away. Turns out that the clamav-freshclam package from them deletes the old-format files upon installation. Kudos to Stephen Gran, the Debian maintainer.
What still doesn't make sense is why I suddenly started seeing the problem.
------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users