* Securiteinfo.com <[EMAIL PROTECTED]> [20050531 16:27]: wrote:
> Le mardi 31 Mai 2005 14:58, Odhiambo Washington a écrit :
> > * Christopher X. Candreva <[EMAIL PROTECTED]> [20050531 15:31]: wrote:
> > > On Tue, 31 May 2005, Odhiambo Washington wrote:
> > > > I am just wondering why clamscan rightly detects the trojan in the mail
> > > > while clamdscan doesn't.
> > >
> > > Check the output of clamscan -V and clamdscan -V -- make sure they report
> > > the same database version number.
> >
> > This doesn't seem to be the problem! They both report the same thing:
> >
> > ClamAV 0.85.1/900/Tue May 31 13:50:19 2005
> 
> Please, set the "Debug" flag in your clamd.conf, rescan the sample, and send 
> us the logs.

I cannot do that on the box where this phenomena is manifesting itself
because it's a production box, processing large volumes of mail. I'll
probably not get you the correct data because of that, since by the time
I come to scan the file after starting clamd in debug mode, the log
file containing the debug info will be full with other stuff. I've
tried it though, and I have the file - image.zip, and some output
from the debug file - current.txt, posted here:

http://ns2.wananchi.com/~wash/Clamav/


The md5 checksum of the image.zip file is as below:

MD5 (image.zip) = c699f8df6514bce0dc69d1384ac81e42


-Wash

http://www.netmeister.org/news/learn2quote.html

--
+======================================================================+
    |\      _,,,---,,_     | Odhiambo Washington    <[EMAIL PROTECTED]>
Zzz /,`.-'`'    -.  ;-;;,_ | Wananchi Online Ltd.   www.wananchi.com
   |,4-  ) )-,_. ,\ (  `'-'| Tel: +254 20 313985-9  +254 20 313922
  '---''(_/--'  `-'\_)     | GSM: +254 722 743223   +254 733 744121
+======================================================================+
You have the capacity to learn from mistakes.  You'll learn a lot
today.
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html

Reply via email to