Joe,

Thanks for the problem resolution.  I was in the same boat and I made both
DatabaseDirectory directive in the freshclam.conf and clamd.conf the same.
I then restarted clam and checked the version, all is good.  I then checked
the logs and clam caught 10 Worm.Sober.P in 3 minutes.

Thanks,

Gord

CONFIDENTIALITY WARNING:  The information in the e:mail is confidential and
privileged.  It is intended only for the use of the individual or entity it
is addressed to.  If the reader of this message is not the intended
recipient, or the authorized agent thereof, the reader is hereby notified
that the retention, dissemination, distribution or copying of this
transmission is strictly prohibited.  If you have received this
communication in error, please notify me immediately by telephone or fax
and delete all copies of the original message.



                                                                           
             Joe Kletch                                                    
             <[EMAIL PROTECTED]>                                              
             Sent by:                                                   To 
             clamav-users-boun         ClamAV users ML                     
             [EMAIL PROTECTED]         <clamav-users@lists.clamav.net>     
             net                                                        cc 
                                                                           
                                                                   Subject 
             05/04/2005 08:18          Re: [Clamav-users] Maybe a virus    
             AM                        Sober.P                             
                                                                           
                                                                           
             Please respond to                                             
              ClamAV users ML                                              
             <[EMAIL PROTECTED]                                             
              ts.clamav.net>                                               
                                                                           
                                                                           





On May 4, 2005, at 9:09 AM, Bowie Bailey wrote:

> From: Joe Kletch [mailto:[EMAIL PROTECTED]
>>
>> I am still not catching this one on two of my four servers. Any
>> pointers to troubleshooting will be immediately pursued.
>>
>> Data from one that doesn't work:
>>
>> Definitions are current:
>> mail joe $ freshclam
>> ClamAV update process started at Wed May  4 08:27:53 2005
>> main.cvd is up to date (version: 31, sigs: 33079, f-level: 4,
>> builder:
>> tkojm)
>> daily.cvd is up to date (version: 866, sigs: 1070, f-level:
>> 4, builder:
>> arnaud)
>>
>> ClamAV is current:
>> mail joe $ clamscan -V
>> ClamAV 0.84/858/Thu Apr 28 09:02:38 2005
>
> Freshclam is up to date and ClamAV is current, but if you look closely,
> you'll notice that ClamAV's database is not current.
>
> Freshclam reports version 866 as current.
> ClamAV is using version 858.
>

Thanks a million for this gentle kick in the but. freshclam.conf was
pointing to the wrong location for daily.cvd. I updated it to point to
/var/db/clamav and now the virus is identified.

Joe Kletch

_______________________________________________
http://lurker.clamav.net/list/clamav-users.html


_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

Reply via email to