[clamav-users] clamdscan versus clamscan detection

[Andrew C Aitchison]

On Thu, 31 Mar 2022, Matus UHLAR - fantomas wrote:

> Hello,
>
> I have received a file that is not detected by clamdscan, but is by clamscan:
>
> % clamdscan /home/uhlar/intamldeosreitlu.xls
> /home/uhlar/intamldeosreitlu.xls: OK
>
> % clamscan /home/uhlar/intamldeosreitlu.xls
> /home/uhlar/intamldeosreitlu.xls: Doc.Downloader.Qbot03222-9942295-0 FOUND
> /home/uhlar/intamldeosreitlu.xls: OK
>
> file permissions seem not to be the problem (file is publicly readable)
>
> This is debian 11 installation, I have regenerated clamd.conf via 
> "dpkg-reconfigure clamav-daemon" and I can't find out which options to change 
> to make clamdscan detect the file.
>
> Does anyone have the idea?

Do
       clamscan --version
and
       clamdscan --version
report the same ?

I have had freshclam update the database, so clamscan sees the new
definitions, and then clamd fail to reload the new definitions, so 
clamdscan still uses the old ones :-(

-- 
Andrew C. Aitchison					Kendal, UK
 			andrew at aitchison.me.uk