Joe, Thanks for the problem resolution. I was in the same boat and I made both DatabaseDirectory directive in the freshclam.conf and clamd.conf the same. I then restarted clam and checked the version, all is good. I then checked the logs and clam caught 10 Worm.Sober.P in 3 minutes.
Thanks, Gord CONFIDENTIALITY WARNING: The information in the e:mail is confidential and privileged. It is intended only for the use of the individual or entity it is addressed to. If the reader of this message is not the intended recipient, or the authorized agent thereof, the reader is hereby notified that the retention, dissemination, distribution or copying of this transmission is strictly prohibited. If you have received this communication in error, please notify me immediately by telephone or fax and delete all copies of the original message. Joe Kletch <[EMAIL PROTECTED]> Sent by: To clamav-users-boun ClamAV users ML [EMAIL PROTECTED] <clamav-users@lists.clamav.net> net cc Subject 05/04/2005 08:18 Re: [Clamav-users] Maybe a virus AM Sober.P Please respond to ClamAV users ML <[EMAIL PROTECTED] ts.clamav.net> On May 4, 2005, at 9:09 AM, Bowie Bailey wrote: > From: Joe Kletch [mailto:[EMAIL PROTECTED] >> >> I am still not catching this one on two of my four servers. Any >> pointers to troubleshooting will be immediately pursued. >> >> Data from one that doesn't work: >> >> Definitions are current: >> mail joe $ freshclam >> ClamAV update process started at Wed May 4 08:27:53 2005 >> main.cvd is up to date (version: 31, sigs: 33079, f-level: 4, >> builder: >> tkojm) >> daily.cvd is up to date (version: 866, sigs: 1070, f-level: >> 4, builder: >> arnaud) >> >> ClamAV is current: >> mail joe $ clamscan -V >> ClamAV 0.84/858/Thu Apr 28 09:02:38 2005 > > Freshclam is up to date and ClamAV is current, but if you look closely, > you'll notice that ClamAV's database is not current. > > Freshclam reports version 866 as current. > ClamAV is using version 858. > Thanks a million for this gentle kick in the but. freshclam.conf was pointing to the wrong location for daily.cvd. I updated it to point to /var/db/clamav and now the virus is identified. Joe Kletch _______________________________________________ http://lurker.clamav.net/list/clamav-users.html _______________________________________________ http://lurker.clamav.net/list/clamav-users.html