Re: sophie not detecting some viruses
"Rex Pin-Yi Huang" <[email protected]>
| Newsgroups | gmane.comp.security.virus.vtools |
|---|---|
| Message-ID | <000a01c3deb7$a5cea2b0$6401a8c0@rexlaptop> |
I have the same situation as you. I am running Sophie-3.04rc1 with Sophos 3.77b on FreeBSD 4.9-RELEASE-p1 Sweep can detect the virus, but Sophie can not. Rex ----- Original Message ----- From: "Markus Stumpf" <[email protected]> To: <[email protected]> Sent: Monday, January 19, 2004 10:38 AM Subject: [vtools] sophie not detecting some viruses > I am running sophie-3.02 on FreeBSD 4.4-RELEASE. > sophie is linked against (the newest) libsavi.so.3.2.07.040 (3.77b) > > Today I discovered that if using sweep it discovers > SWEEP virus detection utility > Version 3.77, January 2004 [FreeBSD/Intel] > Includes detection for 86890 viruses, trojans and worms > Command line qualifiers are: -f -sc -rec -cab -f -archive -loopback -tnef > [ ... ] > >>> Virus 'Troj/Sefex-A' found in file Profile-720974.html > > However using sophie: > /var/qmail/antivirus/bin/scan_file /var/run/sophie $PWD/Profile-720974.html > FILE NOT INFECTED: [/tmp/photo/Profile-720974.html] > > All options are set to '1' but > Option 'GrpSuper' set to '0' > Option 'GrpDisinfect' set to '0' > Option 'MaxRecursionDepth' set to '16' > > I have copied the infected file to > http://www.space.net/~maex/Profile-720974.html.bin (19755 bytes) > > Does scanning this file work for you? > Does anyone have an idea what might be the problem? > > Thanks, > \Maex > > P.S. I am aware we're not running the newest version of sophie, but > the fixes don't read like they'd have influence on the problem. > > -- > SpaceNet AG | Joseph-Dollinger-Bogen 14 | Fon: +49 (89) 32356-0 > Research & Development | D-80807 Muenchen | Fax: +49 (89) 32356-299 > "The security, stability and reliability of a computer system is reciprocally > proportional to the amount of vacuity between the ears of the admin" > _______________________________________________ > vtools mailing list > [email protected] > http://www.vanja.com/list/listinfo.cgi/vtools