On Monday 13 September 2004 23:13, Adam Bernstein wrote: > Howdy. We have a strange problem: We're running the latest > stable, 0.75.1, with virus definitions updated via freshclam > every hour (the latest log entry shows "version 488". We have > a virus that keeps getting through, but it is recognized by > your online virus submission scanner as MyDoom.M, so clearly > the ClamAV run by that script (a -devel version) detects this > virus while the release version apparently doesn't. > > Or is it just our installation for some reason? Anyone else > seen this problem? Do we have any other recourse than moving > to the development version, which we would rather not do, > unless it really is very stable?
I have the exact same problem - in my case, it is a zipped zip file called transcript.zip. The online scanner, as pointed out yesterday, is running latest stable and not devel version. The only way i could get clamav to trap the virus was by installing devel version and upgrading qmail-scanner to latest version. Only then was it captured. But I am not running this setup in production yet. The weird thing was that if i piped the email message through clamdscan, then it detected the virus. Please let me know how you get on here. ------------------------------------------------------- This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170 Project Admins to receive an Apple iPod Mini FREE for your judgement on who ports your project to Linux PPC the best. Sponsored by IBM. Deadline: Sept. 13. Go here: http://sf.net/ppc_contest.php _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
