Re: RE : sophie 3.04 libsavi 3.94
Ronan <[email protected]> Thu, 23 Jun 2005 15:02:32 +0000
| Newsgroups | gmane.comp.security.virus.vtools |
|---|---|
| Message-ID | <[email protected]> |
Martin Zuziak wrote: >>NOTICE : Scanning file 'eicar.com' >>NOTICE : Scanning file 'eicar.com' /DEBUG,31796/ >>WARNING : Scan result => 'eicar.com' infected with virus 'EICAR-AV-Test' >>NOTICE : pSAVI cleaned up and released/terminated >>NOTICE : SAVI cleaned up and terminated >> >> >>so it obviously can detect it in this mode but when i fun it as daemon >>/usr/local/bin/sophie -C /etc/sophie.cfg -D >> >>is how i start sophie but it still doesnt detect eicar when run as above. >> >> > >Then try starting sophie as a daemon and scan the eicar file with the >scan_file sample app: > >scan_file /tmp/sophie eicar.com > >scan_file is in the sample_apps/sock directory in the sophie source >distribution. > > ok i started it as i normally do /usr/local/bin/sophie -C /etc/sophie.cfg -D and i get the following scan_file /tmp/sophie /home/ronan/sophie-3.04/eicar.com FILE INFECTED: [/home/ronan/sophie-3.04/eicar.com] (VIRUS: EICAR-AV-Test) root@scarab:/home/ronan/sophie-3.04# so why isnt it being scanned from exim?? i take it this means that there is no problem with sophie and i should move my problem onto the exim list??? ronan