On Sat, 2004-04-10 at 16:49, Jeff Ramsey wrote:
> On Apr 10, 2004, at 9:27 AM, Colin A. Bartlett wrote:
>
> > Jeff Ramsey Sent: Friday, April 09, 2004 4:23 PM
> >
> >> I have done some further testing, and I am blocking Somefool and
> >> Somefool.B, but I am not blocking variant P.
> >
> > FWIW, this same thing happened to me when I upgraded from Clam .60 to
> > the
> > latest version. Apparently I installed it in a different place so
> > there were
> > two version of my daily updates and it wasn't using the new one. Are
> > you
> > sure your virus signatures are being updated and include the SomeFool.P
> > variant? Run "sigtool --list | grep SomeFool" to see if it's listed.
> >
> > cheers,
> > Colin
> >
> I ran the command above, and here are the results:
>
> Worm.Somefool
> Worm.Somefool.B
> Worm.Somefool.B.2
> Worm.Somefool.D
> Worm.Somefool.E
> Worm.Somefool.F
>
> These ones are all working. How can I get freshclam to get the P
> variant file?
>
> Thanks,
> Jeff
As has been implied earlier, double check your /etc/clamav.conf or
/etc/clamd.conf and verify the DatabaseDirectory matches the
DatabaseDirectory entry in /etc/freshclam.conf. Also, make sure
that when freshclam is run, it is using the freshclam.conf file
or explicitly sets the database directory via the command line to
the place you think it should be.
Here's what mine has in it for SomeFool:
Worm.SomeFool.Gen-unp
Worm.SomeFool.O
Worm.SomeFool.P
Worm.SomeFool.P-dll
Worm.SomeFool.Q
Worm.SomeFool.N
Worm.SomeFool.R
Worm.SomeFool.Q.2
Worm.SomeFool
Worm.SomeFool.B
Worm.SomeFool.B.2
Worm.SomeFool.D
Worm.SomeFool.E
Worm.SomeFool.F
Worm.SomeFool.Gen-1
Worm.SomeFool.Gen-2
Worm.SomeFool.I
Worm.SomeFool.K
Worm.SomeFool.L
Worm.SomeFool.M
-Bill
-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
