RE: [Clamav-users] Problems detecting Worm.SomeFool.Y

2004-04-21 Thread Andreas Haase
Hello, > I must have missed where you stated this. Sigtool uses a hardcoded database > directory which is determined at compile time. Thats what I meant being the "actual state". Why using hardcoded directories if there is a possibility to change it in the config files? > You may want to smylin

RE: [Clamav-users] Problems detecting Worm.SomeFool.Y

2004-04-21 Thread Jim Maul
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Andreas > Haase > Sent: Tuesday, April 20, 2004 6:55 PM > To: [EMAIL PROTECTED] > Subject: RE: [Clamav-users] Problems detecting Worm.SomeFool.Y > > > Hello, > > >

RE: [Clamav-users] Problems detecting Worm.SomeFool.Y

2004-04-20 Thread Andreas Haase
Hello, > Have you tried to locate or find *.cvd? Are there other copies somewhere? yes, there are also files located in /usr/local/share/clamav/. These could be from a former installation. But the new directory is /var/lib/clamav/. > What about: > > sigtool -l|grep SomeFool > > [SomeFool list]

RE: [Clamav-users] Problems detecting Worm.SomeFool.Y

2004-04-20 Thread Jim Maul
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Andreas > Haase > Sent: Tuesday, April 20, 2004 2:46 PM > To: [EMAIL PROTECTED] > Subject: RE: [Clamav-users] Problems detecting Worm.SomeFool.Y > > > Hello, > >

RE: [Clamav-users] Problems detecting Worm.SomeFool.Y

2004-04-20 Thread Andreas Haase
Hello again, > This smells of freshclam downloading the virus definitions to one location > and clamav using a copy in a different location. Make sure > "DatabaseDirectory" has the same location in both /etc/freshclam.conf and > /etc/clamav.conf. Mine is DatabaseDirectory /var/lib/clamav that r

RE: [Clamav-users] Problems detecting Worm.SomeFool.Y

2004-04-20 Thread Andreas Haase
Hello, > > Version 0.67 detects the virus correctly, 0.70 doesn't. Comparing the > > amount of known virus, there is a difference of about 75 viruses. Needless > > to say that I updated the signatures several times using freshclam, which > > was successfull (no error messages) but the diff between

Re: [Clamav-users] Problems detecting Worm.SomeFool.Y

2004-04-20 Thread Andreas Haase
On Tue, 20 Apr 2004, Niek wrote: > > Version 0.67 detects the virus correctly, 0.70 doesn't. Comparing the > > amount of known virus, there is a difference of about 75 viruses. Needless > > to say that I updated the signatures several times using freshclam, which > > was successfull (no error mess

Re: [Clamav-users] Problems detecting Worm.SomeFool.Y

2004-04-20 Thread Niek
Andreas Haase wrote: Hello, I have several installations of clamav. Versions are 0.67 or 0.70. A customer sent an infected file with the virus named in the subject. Version 0.67 detects the virus correctly, 0.70 doesn't. Comparing the amount of known virus, there is a difference of about 75 virus

RE: [Clamav-users] Problems detecting Worm.SomeFool.Y

2004-04-20 Thread Jim Maul
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Andreas > Haase > Sent: Tuesday, April 20, 2004 8:42 AM > To: [EMAIL PROTECTED] > Subject: [Clamav-users] Problems detecting Worm.SomeFool.Y > > > Hello, > > I

[Clamav-users] Problems detecting Worm.SomeFool.Y

2004-04-20 Thread Andreas Haase
Hello, I have several installations of clamav. Versions are 0.67 or 0.70. A customer sent an infected file with the virus named in the subject. Version 0.67 detects the virus correctly, 0.70 doesn't. Comparing the amount of known virus, there is a difference of about 75 viruses. Needless to say t