* Securiteinfo.com <[EMAIL PROTECTED]> [20050531 16:27]: wrote: > Le mardi 31 Mai 2005 14:58, Odhiambo Washington a écrit : > > * Christopher X. Candreva <[EMAIL PROTECTED]> [20050531 15:31]: wrote: > > > On Tue, 31 May 2005, Odhiambo Washington wrote: > > > > I am just wondering why clamscan rightly detects the trojan in the mail > > > > while clamdscan doesn't. > > > > > > Check the output of clamscan -V and clamdscan -V -- make sure they report > > > the same database version number. > > > > This doesn't seem to be the problem! They both report the same thing: > > > > ClamAV 0.85.1/900/Tue May 31 13:50:19 2005 > > Please, set the "Debug" flag in your clamd.conf, rescan the sample, and send > us the logs.
I cannot do that on the box where this phenomena is manifesting itself because it's a production box, processing large volumes of mail. I'll probably not get you the correct data because of that, since by the time I come to scan the file after starting clamd in debug mode, the log file containing the debug info will be full with other stuff. I've tried it though, and I have the file - image.zip, and some output from the debug file - current.txt, posted here: http://ns2.wananchi.com/~wash/Clamav/ The md5 checksum of the image.zip file is as below: MD5 (image.zip) = c699f8df6514bce0dc69d1384ac81e42 -Wash http://www.netmeister.org/news/learn2quote.html -- +======================================================================+ |\ _,,,---,,_ | Odhiambo Washington <[EMAIL PROTECTED]> Zzz /,`.-'`' -. ;-;;,_ | Wananchi Online Ltd. www.wananchi.com |,4- ) )-,_. ,\ ( `'-'| Tel: +254 20 313985-9 +254 20 313922 '---''(_/--' `-'\_) | GSM: +254 722 743223 +254 733 744121 +======================================================================+ You have the capacity to learn from mistakes. You'll learn a lot today. _______________________________________________ http://lurker.clamav.net/list/clamav-users.html