I also have the same problem. Apparently, I have two locations where the updates are stored. ClamAV was using /usr/local/share/clamav and freshclam was storing updates in /var/lib/clamav. So I made clamav.conf point to /var/lib/clamav also.
And just to make sure that nothing is using /usr/local/share/clamav anymore, I changed the directory name to something else. I restarted clamd, amavisd and all went ok. But when I run sigtool --list it tells me ERROR: Can't open directory /usr/local/share/clamav How can I make it point to the new location of the database files? And how can I make sure that my clamd is now looking at the new location? --- Bill Randle <[EMAIL PROTECTED]> wrote: > On Sat, 2004-04-10 at 16:49, Jeff Ramsey wrote: > > On Apr 10, 2004, at 9:27 AM, Colin A. Bartlett > wrote: > > > > > Jeff Ramsey Sent: Friday, April 09, 2004 4:23 PM > > > > > >> I have done some further testing, and I am > blocking Somefool and > > >> Somefool.B, but I am not blocking variant P. > > > > > > FWIW, this same thing happened to me when I > upgraded from Clam .60 to > > > the > > > latest version. Apparently I installed it in a > different place so > > > there were > > > two version of my daily updates and it wasn't > using the new one. Are > > > you > > > sure your virus signatures are being updated and > include the SomeFool.P > > > variant? Run "sigtool --list | grep SomeFool" to > see if it's listed. > > > > > > cheers, > > > Colin > > > > > I ran the command above, and here are the results: > > > > Worm.Somefool > > Worm.Somefool.B > > Worm.Somefool.B.2 > > Worm.Somefool.D > > Worm.Somefool.E > > Worm.Somefool.F > > > > These ones are all working. How can I get > freshclam to get the P > > variant file? > > > > Thanks, > > Jeff > > As has been implied earlier, double check your > /etc/clamav.conf or > /etc/clamd.conf and verify the DatabaseDirectory > matches the > DatabaseDirectory entry in /etc/freshclam.conf. > Also, make sure > that when freshclam is run, it is using the > freshclam.conf file > or explicitly sets the database directory via the > command line to > the place you think it should be. > > Here's what mine has in it for SomeFool: > > Worm.SomeFool.Gen-unp > Worm.SomeFool.O > Worm.SomeFool.P > Worm.SomeFool.P-dll > Worm.SomeFool.Q > Worm.SomeFool.N > Worm.SomeFool.R > Worm.SomeFool.Q.2 > Worm.SomeFool > Worm.SomeFool.B > Worm.SomeFool.B.2 > Worm.SomeFool.D > Worm.SomeFool.E > Worm.SomeFool.F > Worm.SomeFool.Gen-1 > Worm.SomeFool.Gen-2 > Worm.SomeFool.I > Worm.SomeFool.K > Worm.SomeFool.L > Worm.SomeFool.M > > -Bill > > > > > ------------------------------------------------------- > This SF.Net email is sponsored by: IBM Linux > Tutorials > Free Linux tutorial presented by Daniel Robbins, > President and CEO of > GenToo technologies. Learn everything from > fundamentals to system > administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click > _______________________________________________ > Clamav-users mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/clamav-users __________________________________ Do you Yahoo!? Yahoo! Tax Center - File online by April 15th http://taxes.yahoo.com/filing.html ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
