On Sat, 10 Apr 2004 16:49:52 -0700 Jeff Ramsey <[EMAIL PROTECTED]> wrote:
> > On Apr 10, 2004, at 9:27 AM, Colin A. Bartlett wrote: > > > Jeff Ramsey Sent: Friday, April 09, 2004 4:23 PM > > > >> I have done some further testing, and I am blocking Somefool and > >> Somefool.B, but I am not blocking variant P. > > > > FWIW, this same thing happened to me when I upgraded from Clam .60 > > to the > > latest version. Apparently I installed it in a different place so > > there were > > two version of my daily updates and it wasn't using the new one. Are > > > > you > > sure your virus signatures are being updated and include the > > SomeFool.P variant? Run "sigtool --list | grep SomeFool" to see if > > it's listed. > > > > cheers, > > Colin > > > I ran the command above, and here are the results: > > Worm.Somefool > Worm.Somefool.B > Worm.Somefool.B.2 > Worm.Somefool.D > Worm.Somefool.E > Worm.Somefool.F My output is: [EMAIL PROTECTED]:~$ sigtool -l | grep -i somefool Worm.SomeFool Worm.SomeFool.B Worm.SomeFool.B.2 Worm.SomeFool.D Worm.SomeFool.E Worm.SomeFool.F Worm.SomeFool.Gen-1 Worm.SomeFool.Gen-2 Worm.SomeFool.I Worm.SomeFool.K Worm.SomeFool.L Worm.SomeFool.M Worm.SomeFool.Gen-unp Worm.SomeFool.O Worm.SomeFool.P Worm.SomeFool.P-dll Worm.SomeFool.Q Worm.SomeFool.N Worm.SomeFool.R Worm.SomeFool.Q.2 So Jeff was right. -- oo ..... Tomasz Kojm <[EMAIL PROTECTED]> (\/)\......... http://www.ClamAV.net/gpg/tkojm.gpg \..........._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Sun Apr 11 02:23:42 CEST 2004
pgp00000.pgp
Description: PGP signature
