On 2009-03-19 22:46, Bill Landry wrote: > Just a curiosity question. The last database reload in my clamd.log > file shows: > > Database correctly reloaded (1159852 signatures) > > But when I use clamscan to scam a file, it reports: > > ----------- SCAN SUMMARY ----------- > Known viruses: 1159340 > Engine version: 0.95rc2 > > Why the difference in the number of "signatures" versus "Known viruses" > reported? What makes up the 512 difference between the two reports? >
They are the PUA signatures that are not loaded by default (you need DetectPUA yes in clamd.conf to load them): $ sigtool -l|grep PUA|wc -l 512 Best regards, --Edwin _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
