[clamav-users] Different results: Clamscan vs ClamWin

[Rafael Ferreira]

Can you tell us which virus you encountered? Also can you validate that the file has the same checksum in both windows and Linux? 

> On May 2, 2017, at 2:22 PM, Peter B. <pb at das-werkstatt.com> wrote:
> 
> Dear Clamav users,
> 
> I was scanning a ZIP file with both: clamscan (on Xubuntu), and clamwin
> (on Win7).
> Clamwin found a virus, where clamscan did not.
> 
> I'm surprised, since I thought these are just 2 frontends for the same
> engine and virus database?
> 
> I updated the database on Linux using "$ sudo freshclam".
> No change.
> 
> 
> Grateful for any information why clamscan finds less than clamwin...? :)
> 
> Thank you in advance,
> Peter B.
> 
> 
> ============================================
> Software versions on my setups:
> 
> Xubuntu 12.04.1 (64bit):
> -------------------------
>    ClamAV 0.99.2/23350/Tue May  2 15:02:21 2017
>    main.cvd is up to date (version: 57, sigs: 4218790, f-level: 60,
> builder: amishhammer)
>    daily.cld is up to date (version: 23350, sigs: 2063182, f-level: 63,
> builder: neo)
>    bytecode.cvd is up to date (version: 296, sigs: 58, f-level: 63,
> builder: anvilleg)
> 
> 
> Win7 (64bit):
> -------------------------
>    ClamWin v0.99.1
>    Virus DB Version: main 57 daily 23350
>    Updated: 15:02 02 May 2017
> _______________________________________________
> clamav-users mailing list
> clamav-users at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml