I had a couple of viruses slip through clam this morning. When I tried to sumbit them, I get a note that it's already recognized.
Here's what freshclam says: [EMAIL PROTECTED] root]# freshclam ClamAV update process started at Tue Mar 29 08:54:43 2005 main.cvd is up to date (version: 30, sigs: 31086, f-level: 4, builder: tkojm) daily.cvd is up to date (version: 792, sigs: 1099, f-level: 4, builder: ccordes) The virus (when I submit it) is recognized like this: Result: This virus is already recognized by ClamAV 0.83/792/Tue Mar 29 00:10:20 2005 as Worm.Mytob.Gen-1 . Be careful when submitting samples and remember to run freshclam! Checking the milter process I see this: [EMAIL PROTECTED] root]# ps -ef |egrep -i clam clamav 1602 1 0 Mar25 ? 00:11:58 /usr/local/sbin/clamd clamav 2279 1 0 Mar25 ? 00:01:19 /usr/local/sbin/clamav-milter -lo -Q, --external [EMAIL PROTECTED] /var/run/clamav/clmilter.sock Clam missed this when it came through email zipped in a dcoument.zip file, and as file.pif. I don't want to sound like I'm complaining...I'm just reporting this in case it's something that should be looked at, and am trying to help. Thanks Sam -- Sam Morris, Owner Loganet Internet Service Logan IA, United States of America 712-644-3578 _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
