Re: [Clamav-users] Netsky P not being blocked, using 0.70-rc

[Jeff Ramsey]

On Apr 10, 2004, at 5:44 PM, Bill Randle wrote:

On Sat, 2004-04-10 at 16:49, Jeff Ramsey wrote:
On Apr 10, 2004, at 9:27 AM, Colin A. Bartlett wrote:

Jeff Ramsey Sent: Friday, April 09, 2004 4:23 PM

I have done some further testing, and I am blocking Somefool and
Somefool.B, but I am not blocking variant P.
FWIW, this same thing happened to me when I upgraded from Clam .60 to
the
latest version. Apparently I installed it in a different place so
there were
two version of my daily updates and it wasn't using the new one. Are
you
sure your virus signatures are being updated and include the 
SomeFool.P
variant? Run "sigtool --list | grep SomeFool" to see if it's listed.

cheers,
Colin
I ran the command above, and here are the results:

Worm.Somefool
Worm.Somefool.B
Worm.Somefool.B.2
Worm.Somefool.D
Worm.Somefool.E
Worm.Somefool.F
These ones are all working. How can I get freshclam to get the P
variant file?
Thanks,
Jeff
As has been implied earlier, double check your /etc/clamav.conf or
/etc/clamd.conf and verify the DatabaseDirectory matches the
DatabaseDirectory entry in /etc/freshclam.conf. Also, make sure
that when freshclam is run, it is using the freshclam.conf file
or explicitly sets the database directory via the command line to
the place you think it should be.
Here's what mine has in it for SomeFool:

Worm.SomeFool.Gen-unp
Worm.SomeFool.O
Worm.SomeFool.P
Worm.SomeFool.P-dll
Worm.SomeFool.Q
Worm.SomeFool.N
Worm.SomeFool.R
Worm.SomeFool.Q.2
Worm.SomeFool
Worm.SomeFool.B
Worm.SomeFool.B.2
Worm.SomeFool.D
Worm.SomeFool.E
Worm.SomeFool.F
Worm.SomeFool.Gen-1
Worm.SomeFool.Gen-2
Worm.SomeFool.I
Worm.SomeFool.K
Worm.SomeFool.L
Worm.SomeFool.M
	-Bill
It is using the same DatabaseDirectory for both. I still see only the 
same variants of Somefool that I listed above with the sigtool 
command. Any other tips?
Thanks,
Jeff


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users