Re: sophie not detecting some viruses

"Rex Pin-Yi Huang" <[email protected]>
Newsgroups gmane.comp.security.virus.vtools
Message-ID <000a01c3deb7$a5cea2b0$6401a8c0@rexlaptop>
I have the same situation as you.
I am running Sophie-3.04rc1 with Sophos 3.77b on FreeBSD 4.9-RELEASE-p1

Sweep can detect the virus, but Sophie can not.

Rex

----- Original Message ----- 
From: "Markus Stumpf" <[email protected]>
To: <[email protected]>
Sent: Monday, January 19, 2004 10:38 AM
Subject: [vtools] sophie not detecting some viruses


> I am running sophie-3.02 on FreeBSD 4.4-RELEASE.
> sophie is linked against (the newest) libsavi.so.3.2.07.040 (3.77b)
>
> Today I discovered that if using sweep it discovers
>      SWEEP virus detection utility
>      Version 3.77, January 2004 [FreeBSD/Intel]
>      Includes detection for 86890 viruses, trojans and worms
>      Command line qualifiers
are: -f -sc -rec -cab -f -archive -loopback -tnef
>      [ ... ]
>      >>> Virus 'Troj/Sefex-A' found in file Profile-720974.html
>
> However using sophie:
>     /var/qmail/antivirus/bin/scan_file /var/run/sophie
$PWD/Profile-720974.html
>     FILE NOT INFECTED: [/tmp/photo/Profile-720974.html]
>
> All options are set to '1' but
>     Option 'GrpSuper' set to '0'
>     Option 'GrpDisinfect' set to '0'
>     Option 'MaxRecursionDepth' set to '16'
>
> I have copied the infected file to
>     http://www.space.net/~maex/Profile-720974.html.bin  (19755 bytes)
>
> Does scanning this file work for you?
> Does anyone have an idea what might be the problem?
>
> Thanks,
> \Maex
>
> P.S. I am aware we're not running the newest version of sophie, but
>      the fixes don't read like they'd have influence on the problem.
>
> -- 
> SpaceNet AG            | Joseph-Dollinger-Bogen 14 | Fon: +49 (89) 32356-0
> Research & Development |       D-80807 Muenchen    | Fax: +49 (89)
32356-299
> "The security, stability and reliability of a computer system is
reciprocally
>  proportional to the amount of vacuity between the ears of the admin"
> _______________________________________________
> vtools mailing list
> [email protected]
> http://www.vanja.com/list/listinfo.cgi/vtools
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.