RE: corrupted files reported by sophie & SAVI
"Maciej Uhlig" <[email protected]>
| Newsgroups | gmane.comp.security.virus.vtools |
|---|---|
| Message-ID | <[email protected]> |
Markus: > > so I second a request from Ed: please let us see your /etc/sophie.savi. > > I have atteched it to this mail. you have in the /etc/sophie.savi you sent: NOTICE : Option 'Mime' type '3' set to '0' in this case sophie didn't detect at least W32/Magistr-A: NOTICE : Scanning file '/.../a9' NOTICE : pSAVI cleaned up and released/terminated NOTICE : SAVI cleaned up and terminated while sweep did it: # sweep -mime /export/home/prac/alexrat/a9 SWEEP virus detection utility Version 3.78, February 2004 [Solaris/SPARC] >>> Virus 'W32/Magistr-A' found in file /.../a9/LOADWB.EXE and sophie with 'Mime' set to'1' did it too: NOTICE : Scanning file '/.../a9' WARNING : Scan result => '/.../a9' infected with virus 'W32/Magistr-A' NOTICE : pSAVI cleaned up and released/terminated what about 'Mime' set to '0' in your config file? looks like it's not sufficient... Maciek