Re: sophie not detecting some viruses

I did some empirical work and I found the option that
causes this file not being scanned:

GrpInternet: 0 ( i guess '2' is the same as '0' -
0x10,0x00 - which is the default ).

But it's actually not a good idea. I keep a couple of
a hundred virii stored and I after I disable this
option Sophie doesn't detect 98% of the virus anymore,
but it DOES detect 'Troj/Sefex-A'.. duhh.. not very
useful. Note: I feed e-mails directly to sophie,
because I need performance ( I cannot depend on
external programs to decode the attachments... )

I'm using Linux, Sophos engine 3.76, Sophie 3.03.

--- Vanja Hrustic <[email protected]> wrote:
> On Mon, 19 Jan 2004 17:10:49 -0500
> Jerrin Kallukalam <[email protected]>
> wrote:
> 
> > hello,
> >  I  recompiled sophie after adding code to set 
> SAVI engine settings to 
> > default, and then sophie can detect 
> 'Troj/Sefex-A'.   I added these 
> > lines to the end of the function  "void
> sophie_set_engine_config(CISavi3
> > 
> > *pSAVI)".
> > 
> >  hr = pSAVI->pVtbl->SetConfigDefaults(pSAVI);
> >         if (SOPHOS_FAILED(hr))
> >                 sophie_print(0, "%s Failed to
> SetConfigDefaults()", 
> > WARNSTR);
> >         else
> >                 sophie_print(1, "%s Default SAVI
> configuration options 
> > set", NOTESTR);
> > 
> > So the problem might be somewhere in the SAVI
> engine configuration 
> > settings. Some config value would have to be
> unset.
> > Jerrin.
> 
> Now that you tried it, it looks so obvious :)
> 
> It is enough to remove/rename /etc/sophie.savi file
> in order for Sophie to
> use Sophos defaults (forgot that I've added that
> 'fallback' long time
> ago). Detects the virus now.
> 
> "sophie -c" will list the default options, but
> guessing the combinations
> of options (to see which one screws up) will take
> some time.
> 
> Vanja
> _______________________________________________
> vtools mailing list
> [email protected]
> http://www.vanja.com/list/listinfo.cgi/vtools


__________________________________
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus