Hi.
I have been using clam for a long time with great success. However, today I have an issue.
Virus defs are up to date (Run freshclam every two hours):
ClamAV update process started at Sat Sep 11 10:23:14 2004
SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES
Reading CVD header (main.cvd): OK
main.cvd is up to date (version: 26, sigs: 22925, f-level: 2, builder: tomek)
Reading CVD header (daily.cvd): OK
daily.cvd is up to date (version: 486, sigs: 1180, f-level: 2, builder: ccordes)
However, I have had two zip files show up this AM that passed right trough and got snagged by Norton running yesterday's defs. It says that the zip contains the above virus ([EMAIL PROTECTED]). I submitted the zip file through the calm submission form and it returned the it was already recognized in virus dates blah blah (the 8th of Sept., if I remember correctly) as (from memory) mydoom.xx-unp.zip.
I updated my clam to the latest production version (clamd -V --> clamd / ClamAV version 0.75.1) and re-ran clamd, clamdscan & clamscan on that doc.zip file with it being reported OK every time:
[09:[EMAIL PROTECTED]:usr]# clamscan doc.zip doc.zip: OK
----------- SCAN SUMMARY ----------- Known viruses: 23856 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 0.03 MB I/O buffer size: 131072 bytes Time: 6.857 sec (0 m 6 s) [09:[EMAIL PROTECTED]:usr]# clamdscan doc.zip /usr/doc.zip: OK
----------- SCAN SUMMARY ----------- Infected files: 0 Time: 3.052 sec (0 m 3 s)
I am the Sytem Administrator of an ISP here in Billings, MT and have put the .zip extention into the de-fang routine for the moment until I can sort out what is happening. I do not have one of those "unp" thingy's in my clam log on 5 differnt mailservers.
Anyone else out there having this difficulty?
-------------------------------------------------------
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM. Deadline: Sept. 13. Go here: http://sf.net/ppc_contest.php
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
