On 09/12/2006 23:29, Bill Landry wrote:
Tomasz Kojm wrote the following on 12/7/2006 2:01 AM -0800:
On Wed, 6 Dec 2006 21:27:27 -0600
Chris <[EMAIL PROTECTED]> wrote:
AhHa, this looks suspicious:
Wed Dec 6 08:21:28 2006 -> SelfCheck: Database modification detected.
Forcing reload.
Wed Dec 6 08:21:28 2006 -> Reading databases from /var/lib/clamav
Wed Dec 6 08:21:28 2006 -> Accepted connection on port 2003, fd 12
Wed Dec 6 08:21:31 2006 -> ERROR: reload db failed: Malformed database
[...]
This appears to have been the culpert
gunzip: /var/lib/clamav/scam.ndb.gz: unexpected end of file
You should be more careful with what you're downloading into the database
directory. For the official database freshclam makes a number of tests to
prevent installing broken files. For 3rd party databases I'd suggest calling
'clamscan -d file.ndb' before installing file.ndb in the database dir and/or
asking the creator to provide you with online checksum for the file.
I must be doing something wrong here. I am running Fedora Core 3 with:
clamscan -V
ClamAV 0.88.6/2312/Sat Dec 9 10:46:45 2006
However, when I attempt to scan an individual file as Tomasz shows
above, I get all files in the directory scanned:
clamscan -d scam.ndb
/var/tmp/clamdb/phish.ndb: OK
/var/tmp/clamdb/MSRBL-Images.hdb: OK
/var/tmp/clamdb/phish.ndb.gz: OK
/var/tmp/clamdb/scam.ndb: OK
/var/tmp/clamdb/MSRBL-SPAM.ndb: OK
/var/tmp/clamdb/scam.ndb.gz: OK
----------- SCAN SUMMARY -----------
Known viruses: 3841
Engine version: 0.88.6
Scanned directories: 1
Scanned files: 6
Infected files: 0
Data scanned: 6.27 MB
Time: 2.852 sec (0 m 2 s)
This does not allow me to detect a problem with a specific database
file. Any suggestions?
The -d option loads a specific database. What you see above is the
result of scanning all the files in the current directory for viruses
using that database. You could pass it a specific file to scan to avoid
scanning everything in the current directory:
touch emptyfile
clamscan -d scam.ndb emptyfile
--
-=( Ian Abbott @ MEV Ltd. E-mail: <[EMAIL PROTECTED]> )=-
-=( Tel: +44 (0)161 477 1898 FAX: +44 (0)161 718 3587 )=-
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
