[EMAIL PROTECTED] wrote:
The Disc Shop wrote:
It's not being recognised on my email server either.
# sigtool -l|grep -i Sober.U
Worm.Sober.U
# clamd -V
ClamAV 0.87.1/1198/Tue Nov 29 20:05:20 2005
I have checked that the Database Directory is correct in both the
clamd.conf and freshclam.conf
So I don't understand why it's still letting the virus emails through.
Does clamscan recognize it? clamscan doesn't use the settings in either
clamd.conf or freshclam.conf... but clamscan does accept a
--database=/var/db/clamav command-line option.
Yes, clamscan recognizes it. I ran clamscan on the spool file for one of
our email addresses. and it came back with this result
clamscan --database=/var/lib/clamav abc
abc: Worm.Sober.U FOUND
----------- SCAN SUMMARY -----------
Known viruses: 41292
Engine version: 0.87.1
Scanned directories: 0
Scanned files: 1
Infected files: 1
Data scanned: 0.18 MB
Time: 2.695 sec (0 m 2 s)
So if clamscan is picking it up why is it still coming through.
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
