Hi,

during debuging the performance/HIGH-CPU-problem in Solaris10, I found severeal
times this:

LibClamAV debug: Signature offset: 10620, expected: 0
(Trojan.Downloader.Bat.Ftp.gen-6)
LibClamAV debug: Signature offset: 10620, expected: 0
(Trojan.Downloader.Bat.Ftp.gen-5)
LibClamAV debug: Signature offset: 10620, expected: 0
(Trojan.Downloader.Bat.Ftp.gen-4)
LibClamAV debug: Signature offset: 10620, expected: 0
(Trojan.Downloader.Bat.Ftp.gen-3)
LibClamAV debug: Signature offset: 10620, expected: 0
(Trojan.Downloader.Bat.Ftp.gen-2)
LibClamAV debug: Signature offset: 10620, expected: 0
(Trojan.Downloader.Bat.Ftp.gen-1)
LibClamAV debug: Signature offset: 10620, expected: 0
(Trojan.Downloader.BAT.Ftp.gen)
LibClamAV debug: Signature offset: 8256, expected: 0
(Trojan.Downloader.Bat.Ftp.gen-6)
LibClamAV debug: Signature offset: 8256, expected: 0
(Trojan.Downloader.Bat.Ftp.gen-5)
LibClamAV debug: Signature offset: 8256, expected: 0
(Trojan.Downloader.Bat.Ftp.gen-4)
LibClamAV debug: Signature offset: 8256, expected: 0
(Trojan.Downloader.Bat.Ftp.gen-3)
LibClamAV debug: Signature offset: 8256, expected: 0
(Trojan.Downloader.Bat.Ftp.gen-2)
LibClamAV debug: Signature offset: 8256, expected: 0
(Trojan.Downloader.Bat.Ftp.gen-1)
LibClamAV debug: Signature offset: 8256, expected: 0 
(Trojan.Downloader.BAT.Ftp.gen)
LibClamAV debug: Signature offset: 11682, expected: 0
(Trojan.Downloader.Bat.Ftp.gen-6)
LibClamAV debug: Signature offset: 11682, expected: 0
(Trojan.Downloader.Bat.Ftp.gen-5)
LibClamAV debug: Signature offset: 11682, expected: 0
(Trojan.Downloader.Bat.Ftp.gen-4)
LibClamAV debug: Signature offset: 11682, expected: 0
(Trojan.Downloader.Bat.Ftp.gen-3)
LibClamAV debug: Signature offset: 11682, expected: 0
(Trojan.Downloader.Bat.Ftp.gen-2)
LibClamAV debug: Signature offset: 11682, expected: 0
(Trojan.Downloader.Bat.Ftp.gen-1)
LibClamAV debug: Signature offset: 11682, expected: 0
(Trojan.Downloader.BAT.Ftp.gen)




or

LibClamAV debug: Signature offset: 176, expected: 0 (JS.Feebs.C)
LibClamAV debug: Signature offset: 10841, expected: 0 (JS.Feebs.C)
LibClamAV debug: Signature offset: 176, expected: 0 (JS.Feebs.C)
LibClamAV debug: Signature offset: 10391, expected: 0 (JS.Feebs.C)
LibClamAV debug: Signature offset: 174, expected: 0 (JS.Feebs.C)
LibClamAV debug: Signature offset: 1085, expected: 0 (JS.Feebs.C)
LibClamAV debug: Signature offset: 11150, expected: 0 (JS.Feebs.C)



Basics:
Running as user exim (UID 101, GID 6)
clamd daemon 0.90.1 (OS: solaris2.10, ARCH: i386, CPU: i386)
Log file size limit disabled.
Reading databases from /opt/clamav/share/clamav
LibClamAV debug: Initializing the engine (0.90.1)


Any ideas if this is correct?

Cheers
Christian
-- 
Christian Kühn
(Technical Consultant / Hostmaster)

======================================================
MCS MOORBEK COMPUTER SYSTEME GmbH
Essener Bogen 17 - 22419 Hamburg - Germany
Tel +49 (0)40 53773 0 - Fax: +49 (0)40 53773 200
E-Mail: [EMAIL PROTECTED]
Web: http://www.mcs.de
Eingetragen im Handelsregister Hamburg B62933
Geschäftsführer: Kai Brandes & Eckard Kabel
GPG 8B52 41A1 4B8F 4DE7 9064  2073 6168 137A 3DDA 0F36
======================================================
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Reply via email to