> -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Andreas > Haase > Sent: Tuesday, April 20, 2004 6:55 PM > To: [EMAIL PROTECTED] > Subject: RE: [Clamav-users] Problems detecting Worm.SomeFool.Y > > > Hello, > > > Have you tried to locate or find *.cvd? Are there other copies > somewhere? > > yes, there are also files located in /usr/local/share/clamav/. These could > be from a former installation. But the new directory is /var/lib/clamav/. >
Having two copies of the database is just asking for trouble. I would remove the ones in /usr/local/share/clamav/ if you are not using them. This is almost definitely causing the problem > > What about: > > > > sigtool -l|grep SomeFool > > > > [SomeFool list] > > > > Do you have SomeFool.Y listed? > > No, clamscan seems to use the wrong signature files as I state in an > earlier mail. > I must have missed where you stated this. Sigtool uses a hardcoded database directory which is determined at compile time. You may want to smylink the old database directory to the new one to attempt to get sigtool to use the newly freshclam'd virus files. I dont know if this is the best solution, but it would probably work. > > have you tried clamscan -m <message>? > > That makes no sense and no difference ;-) ... The file is not in mbox > format but the real *.pif containig the virus. > Indeed..i was not aware that it was just a pif. > > Thats because clamscan doesnt use clamav.conf only clamd/clamdscan > > Is there _any_ good reason for that? Why can I configure a alternative > DatabaseDir for clamd and freshclam, if clamscan isn't using it? Sorry, > but that seems to be a mistake in concept. Either there has to be a config > file for clamscan as for the others, or clamscan has to use options out of > clamav.conf to operate correctly. > I guess the reason for this is that clamscan expects all arguments on the command line. I honestly dont know as i did not develop clamav. All i know is that this is the case...why, im not sure. This is the exact reason why i suggested renaming clamav.conf to clamd.conf since clamd is the only program using it. > Please tell me if I'm completely wrong, but the actual state is > unsatisfactory. Im not sure what you mean by "the actual state" Jim ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
