From owner-freebsd-security  Tue Oct 30 11:39:50 2001
Delivered-To: freebsd-security@freebsd.org
Received: from shadow.booms.net (shadow.booms.net [204.188.101.238])
	by hub.freebsd.org (Postfix) with ESMTP id B454537B405
	for <freebsd-security@freebsd.org>; Tue, 30 Oct 2001 11:39:47 -0800 (PST)
Received: from cortsen (c1735868-a.arvada1.co.home.com [65.7.159.215])
	by shadow.booms.net (8.11.1/8.11.1) with SMTP id f9UJhjw54572
	for <freebsd-security@freebsd.org>; Tue, 30 Oct 2001 12:43:45 -0700 (MST)
	(envelope-from lists-inet@booms.net)
From: "Brandon Harper" <lists-inet@booms.net>
To: <freebsd-security@freebsd.org>
Subject: RE: NAI VirusScan [was: probable virus]
Date: Tue, 30 Oct 2001 12:39:47 -0700
Message-ID: <NHELLMIEFPEHAFGOIAGFKEMIDHAA.lists-inet@booms.net>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
In-reply-to: <5.1.0.14.0.20011030124022.04487620@marble.sentex.ca>
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org


>
>
> Just to followup, the daily dat file seems to be working fine.
> Anyone out
> there using it on a regular basis, I would be interested in hearing your
> experiences.
>
>          ---Mike
>


Mike--

I'm also using UVScan and know that my definition files are getting updated
daily via cron, and it hasn't been catching these latest virii either.  I
also had someone privately e-mail me who said it wasn't working for them
either yesterday.  I'm using version 4.x, and have the latest dat file:

bash-2.04# ls -la dat*.*
-rw-r--r--  1 root  wheel  2222080 Oct 23 21:15 dat-4167.tar

bash-2.04# ls -la scan.dat
-rwxr--r--  1 root  wheel  1543967 Oct 23 22:15 scan.dat

It did however catch a W95.Hybris.gen message yesterday  (the
haha@sexyfun.net worm), so the problem seems to be related to the
definitions for UVScan itself.

- Brandon

<!-- http://www.booms.net -->


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message