On 8/10/10 5:45 AM, "Steve Thompson" <s...@cbe.cornell.edu> wrote:
>> it's possible that the signature was not available at the time mail was >> received but it is available now. > > Yes, this is true in general, but in my case the available signatures were > the same in both cases (clamscan was run only an hour or two after the > e-mail had been delivered, and the clamscan was run on the same system > that delivered the e-mail, and freshclam had not been run in the > meantime). clamd loads the database on launch and does not update it unless notified by freshclam that an update has taken place. Did your last freshclam run say that clamd was notified? Also, FYI this is the full signature from the daily: 64000:cf67977184776b9dbe86e5a0405a2b05:Trojan.Agent-167068 -Al- -- Al Varnell Mountain View, CA _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
