Clam Users/Developers:

First of all, I'd like to thank for all your great work with clam AV.
I currently have a mail server with the following specs:
Mandrake 9.2
clamav version 0.66 (installed from mandrake RPM)
spamassassin
amavis
It runs okay, but I found something strange.

Got an email with strange zip attachment. I submit the attachment to clamav.net for 
checking if the database recognizes the virus. The check result is:

File is valid, and was successfully uploaded. clamav scans the file ... 
Clamav-Output:/tmp/phpjPpvQe: Worm.Bagle.Gen-zippwd FOUND
And found something: Worm.Bagle.Gen-zippwd  

Obviously the amavis in my mail server can't pick it up.
I checked the freshclam log, and I found the database has been updated (hourly):

ClamAV update process started at Thu Mar 11 20:01:00 2004
main.cvd is up to date (version: 21, sigs: 20094, f-level: 1, builder: tkojm)
daily.cvd is up to date (version: 176, sigs: 338, f-level: 1, builder: ddm)

As of March 11 2004, my database is recent. But when I do:
less viruses.db
And I looked for Worm.Bagle.Gen-zippwd, I can't get one. I only found: Worm.Bagle.A

The md5sum of my database is: 4e4f1a294d2748ed19999ee76b232d2e, which I believe 
up-to-date as of march 11 2004.

Any one can give me a hint what's going on with the update?

Thank you.

Regards,
Karis

---------------------------------------------
This e-mail was sent using a CentralPets WebMail account
Get yours at: http://mail.centralpets.com





-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to