Tomasz Kojm wrote the following on 12/7/2006 2:01 AM -0800:
> On Wed, 6 Dec 2006 21:27:27 -0600
> Chris <[EMAIL PROTECTED]> wrote:
>
>   
>> AhHa, this looks suspicious:
>>
>> Wed Dec  6 08:21:28 2006 -> SelfCheck: Database modification detected.
>> Forcing reload.
>> Wed Dec  6 08:21:28 2006 -> Reading databases from /var/lib/clamav
>> Wed Dec  6 08:21:28 2006 -> Accepted connection on port 2003, fd 12
>> Wed Dec  6 08:21:31 2006 -> ERROR: reload db failed: Malformed database
>>     
> [...]
>   
>> This appears to have been the culpert
>>
>> gunzip: /var/lib/clamav/scam.ndb.gz: unexpected end of file
>>     
>
> You should be more careful with what you're downloading into the database
> directory. For the official database freshclam makes a number of tests to
> prevent installing broken files. For 3rd party databases I'd suggest calling
> 'clamscan -d file.ndb' before installing file.ndb in the database dir and/or
> asking the creator to provide you with online checksum for the file.

I must be doing something wrong here.  I am running Fedora Core 3 with:

    clamscan -V
    ClamAV 0.88.6/2312/Sat Dec  9 10:46:45 2006

However, when I attempt to scan an individual file as Tomasz  shows
above, I get all files in the directory scanned:

    clamscan -d scam.ndb
    /var/tmp/clamdb/phish.ndb: OK
    /var/tmp/clamdb/MSRBL-Images.hdb: OK
    /var/tmp/clamdb/phish.ndb.gz: OK
    /var/tmp/clamdb/scam.ndb: OK
    /var/tmp/clamdb/MSRBL-SPAM.ndb: OK
    /var/tmp/clamdb/scam.ndb.gz: OK
   
    ----------- SCAN SUMMARY -----------
    Known viruses: 3841
    Engine version: 0.88.6
    Scanned directories: 1
    Scanned files: 6
    Infected files: 0
    Data scanned: 6.27 MB
    Time: 2.852 sec (0 m 2 s)

This does not allow me to detect a problem with a specific database
file.  Any suggestions?

Thanks,

Bill
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Reply via email to