Re: sophie not detecting some viruses

On Mon, 19 Jan 2004 17:10:49 -0500
Jerrin Kallukalam <[email protected]> wrote:

> hello,
>  I  recompiled sophie after adding code to set  SAVI engine settings to 
> default, and then sophie can detect  'Troj/Sefex-A'.   I added these 
> lines to the end of the function  "void sophie_set_engine_config(CISavi3
> 
> *pSAVI)".
> 
>  hr = pSAVI->pVtbl->SetConfigDefaults(pSAVI);
>         if (SOPHOS_FAILED(hr))
>                 sophie_print(0, "%s Failed to SetConfigDefaults()", 
> WARNSTR);
>         else
>                 sophie_print(1, "%s Default SAVI configuration options 
> set", NOTESTR);
> 
> So the problem might be somewhere in the SAVI engine configuration 
> settings. Some config value would have to be unset.
> Jerrin.

Now that you tried it, it looks so obvious :)

It is enough to remove/rename /etc/sophie.savi file in order for Sophie to
use Sophos defaults (forgot that I've added that 'fallback' long time
ago). Detects the virus now.

"sophie -c" will list the default options, but guessing the combinations
of options (to see which one screws up) will take some time.

Vanja