[clamav-users] clamdscan versus clamscan detection

[Petr Jurášek]

Hi,

yes, same version:
# clamscan --version
ClamAV 0.103.5/26498/Thu Mar 31 10:19:05 2022
# clamdscan --version
ClamAV 0.103.5/26498/Thu Mar 31 10:19:05 2022

But file isn't detected by clamscan - both (clamscan/clamdscan) reports, 
that file is clean. Only clamscan write some debug with virus detection, 
or detect it with -z.

Petr

Dne 31. 03. 22 v 12:37 Andrew C Aitchison napsal(a):
>
> On Thu, 31 Mar 2022, Matus UHLAR - fantomas wrote:
>
>> Hello,
>>
>> I have received a file that is not detected by clamdscan, but is by 
>> clamscan:
>>
>> % clamdscan /home/uhlar/intamldeosreitlu.xls
>> /home/uhlar/intamldeosreitlu.xls: OK
>>
>> % clamscan /home/uhlar/intamldeosreitlu.xls
>> /home/uhlar/intamldeosreitlu.xls: Doc.Downloader.Qbot03222-9942295-0 
>> FOUND
>> /home/uhlar/intamldeosreitlu.xls: OK
>>
>> file permissions seem not to be the problem (file is publicly readable)
>>
>> This is debian 11 installation, I have regenerated clamd.conf via 
>> "dpkg-reconfigure clamav-daemon" and I can't find out which options 
>> to change to make clamdscan detect the file.
>>
>> Does anyone have the idea?
>
> Do
>       clamscan --version
> and
>       clamdscan --version
> report the same ?
>
> I have had freshclam update the database, so clamscan sees the new
> definitions, and then clamd fail to reload the new definitions, so 
> clamdscan still uses the old ones :-(
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20220331/a1aa5160/attachment.htm>