[EMAIL PROTECTED] wanted us to know: >I just installed clamav for the first time today, so please bear with me. >Although clamscan finds a lot of HTML naztyness, the Virus #1, I�m receiving >Netsky.P totally gets away.
Clam named the virus SomeFool before the mainstream media latched onto the name Netsky. The Clam group does not change a name once it has settled on it. >I don�t know if it�s normal but freshclam is only downloading 2 files >main.cvd (version 24), and daily.cvd (version 399) >There are no viruses.db or viruses.db2 files.. That's normal. The viruses.db and viruses.db2 files are from older versions of clamav. >I have put a sample of the Netsky.P virus at http://www.biodef.org/Viri if >someone wants to see if their version catches it Take it down, it's already detected and has been for a long time. >************* Scanning this file with clamscan results in the following >report. >Viri: OK >----------- SCAN SUMMARY ----------- >Known viruses: 45142 >Scanned directories: 0 >Scanned files: 1 >Infected files: 0 >Data scanned: 0.04 MB >I/O buffer size: 131072 bytes >Time: 0.746 sec (0 m 0 s) Is the message a mail message? If so, you need to use --mbox on the commandline so that it knows to extract it out of an email format. Also make sure that your clamscan and clamd are using the same virus databases as the ones that are being downloaded (ie your freshclam is downloading to /var/lib/clamav and your binaries are trying to use /usr/local/clamav/ or something like that). This is a FAQ and is online somewhere, I just can't remember where. -- Regards... Todd They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. --Benjamin Franklin Linux kernel 2.6.3-8mdkenterprise 2 users, load average: 0.02, 0.13, 0.12 ------------------------------------------------------- This SF.Net email sponsored by Black Hat Briefings & Training. Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
