> -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Andreas > Haase > Sent: Tuesday, April 20, 2004 8:42 AM > To: [EMAIL PROTECTED] > Subject: [Clamav-users] Problems detecting Worm.SomeFool.Y > > > Hello, > > I have several installations of clamav. Versions are 0.67 or 0.70. A > customer sent an infected file with the virus named in the subject. > > Version 0.67 detects the virus correctly, 0.70 doesn't. Comparing the > amount of known virus, there is a difference of about 75 viruses. Needless > to say that I updated the signatures several times using freshclam, which > was successfull (no error messages) but the diff between the installations > keeps as it is. > > I also deleted the signature files and got it completely new. > > Is there anything I'm doing wrong? Or how do I get the newest signatures > that detect this virus? >
This smells of freshclam downloading the virus definitions to one location and clamav using a copy in a different location. Make sure "DatabaseDirectory" has the same location in both /etc/freshclam.conf and /etc/clamav.conf. Mine is DatabaseDirectory /var/lib/clamav Jim ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
