[EMAIL PROTECTED] wrote:
OK, so: clamscan is detecting the virus, but clamdscan is not? Please confirm. When was the last time you restarted clamd? Perhaps it's not reloading the virus database whenever freshclam downloads a new update. Can you post your freshclam config as well (without blank lines and comments)
the following works clamscan --database=/var/lib/clamav abc abc: Worm.Sober.U FOUND ----------- SCAN SUMMARY ----------- Known viruses: 41292 Engine version: 0.87.1 Scanned directories: 0 Scanned files: 1 Infected files: 1 Data scanned: 0.18 MB Time: 4.826 sec (0 m 4 s) This doesn't work clamdscan --config-file=/usr/local/etc/clamd.conf abc /var/spool/virtual/thediscshop.com.au/accounts: Access denied. ERROR ----------- SCAN SUMMARY ----------- Infected files: 0 Time: 0.000 sec (0 m 0 s) Note: Both commands were run as root I also just checked the clamd.log and it had the following WARNING: Socket file /tmp/clamd exists. Unclean shutdown? Removing... ERROR: Socket file /tmp/clamd could not be removed: Operation not permitted so i manually removed it but now I get this ERROR: Can't save PID in file /var/run/clamd.pid and later +++ Started at Wed Nov 30 16:45:53 2005 clamd daemon 0.87.1 (OS: linux-gnu, ARCH: i386, CPU: i686) Log file size limited to 1048576 bytes. Running as user clamav (UID 505, GID 506) Reading databases from /var/lib/clamav Protecting against 41292 viruses. ERROR: Socket file /tmp/clamd is in use by another process. SelfCheck: Database status OK. the freshclamd.conf minus blanklines and comments looks like this DatabaseDirectory /var/lib/clamav UpdateLogFile /var/log/freshclam.log LogVerbose LogSyslog PidFile /var/run/freshclam.pid DatabaseMirror database.clamav.net _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
