[clamav-users] Sig missing

[Al Varnell]

On Sun, Mar 25, 2018 at 08:29 PM, Nicholas Chua wrote:
>> What do you mean by missing? It's still in my database...
>> 
>> $ sigtool -fWin.Trojan.Agent-6480597-0
>> [daily.hsb]
> 4c26f2d46400405f253c26e85ceadd51:507904:Win.Trojan.Agent-6480597-0:73
>> 
>> Added by daily 24409 on or about 21 March.
> 
> This is the file which is being detected before. Now it is not recognized
> 
> [root at fantastic Test]# clamscan ../Virus/Purchase\ Order123.iso
> ../Virus/Purchase Order123.iso: Purchase Order123.com.UNOFFICIAL FOUND

You are using some unofficial signatures, and this one has already detected that file as infected, so no additional signatures will be checked. If you disabled that unofficial database, it should show up again with the original detection signature.

-Al-
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3860 bytes
Desc: not available
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20180325/13e138b5/attachment.bin>