Hi Ken, > First off Thanks!
You're welcome. > I just updated from version 2.8 to 3.2 on a Debian system. Looking at the > clamav-unofficial-sigs.log file I see: > > May 15 09:22:01 INFO - Pausing database file updates for 394 seconds... > May 15 09:28:35 INFO - File removed: /usr/unofficial-dbs/si-dbs/vx.hdb > May 15 09:28:35 INFO - File removed: /var/lib/clamav/vx.hdb > May 15 09:28:35 INFO - File removed: > /usr/unofficial-dbs/si-dbs/antispam.ndb > May 15 09:28:35 INFO - File removed: /var/lib/clamav/antispam.ndb > May 15 09:28:35 INFO - ClamD is running > etc.... > > > Why did it remove these databases? > > In the config file it shows: > > si_dbs=" > antispam.ndb > honeynet.hdb > securiteinfo.hdb > vx.hdb > " > > Did I do something wrong here? The only reason I can think of is that you have 2 config files, one with these database and one without, and you ran the script either manually or via cron and the config file that was used did not include these databases so they were removed? One thing you can look at to confirm this is the difference between the "current-dbs.txt" and "previous-dbs.txt" files. This is the difference between the current script run and the previous one. The difference is written to "db-changes.txt", and if the file is not empty (empty means nothing has changed), then the script detected that a database or databases had been removed from the config file and will write out those databases to the db-changes.txt file and then delete those files from the file system. All three of these files are located in the "configs" dir (/usr/unofficial-dbs/configs). Take a look at them and see what you find. Feel free to contact me off-list if we need to look into this furtner. Bill _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
