On Tue, Apr 20, 2004 at 11:07:05AM -0600, Lucas Albers said: > I'm running debian clamav-daemon 0.69-0.70-rc-1 > > Does not detect netsky.x variant. > I submitted the virus to the clamav webpage and they detected it, but my > current install does not detect it with these scan switches: > > clamscan -r --mbox --stdout --disable-summary --infected > Download the message from here: > http://www.cs.montana.edu/support/ENTIRE_MESSAGE.netsky.X.zip
[EMAIL PROTECTED]:~$ clamscan --mbox ENTIRE_MESSAGE.netsky.X.zip ENTIRE_MESSAGE.netsky.X.zip: Worm.SomeFool.Y FOUND ----------- SCAN SUMMARY ----------- Known viruses: 21157 Scanned directories: 0 Scanned files: 1 Infected files: 1 Data scanned: 0.02 MB I/O buffer size: 131072 bytes Time: 0.870 sec (0 m 0 s) [EMAIL PROTECTED]:~$ dpkg -l clamav Desired=Unknown/Install/Remove/Purge/Hold | Status=Not/Installed/Config-files/Unpacked/Failed-config/Half-installed |/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: uppercase=bad) ||/ Name Version Description +++-=================================-=================================-================================================================================== ii clamav 0.70-1 Antivirus scanner for Unix Please upgrade - There is not a substantial code base difference between the two versions, but that _might_ be the problem. Virus definitions, could, of course be the problem as well. > I've already filed a bug against the debian version of this. > What version of clamscan or options, do I need to detect this? I have also not yet gotten a report of the bug, nor do I see it on the web page. How long ago did you file it? (This portion of the conversation can be kept off list, if you prefer) -- -------------------------------------------------------------------------- | Stephen Gran | Life is difficult because it is non- | | [EMAIL PROTECTED] | linear. | | http://www.lobefin.net/~steve | | --------------------------------------------------------------------------
pgp00000.pgp
Description: PGP signature
