Sophos Users Heads-up

[Ulysees]

Used your install script, the Sophos dir was showing the right versions, the
vdb's were for 3.72 and were timestamped as of a few minutes before the
mail, and I'd even added the ide manually to that folder.
Running SophosSAVI on the box & yes it has been detecting other viruses no
problem (was still getting a some bugbear-b's in yesterday).

Interestingly enough though as of about 3 hours later all those wonderful
pif's are now being detected as sobig-f without any interaction other than
the hourly automatic updates.

Uly

----- Original Message -----
From: "Julian Field" <mailscanner at ECS.SOTON.AC.UK>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Tuesday, August 19, 2003 6:30 PM
Subject: Re: [MAILSCANNER] Sophos Users Heads-up


> Check your maillog is showing it catching other viruses.
> Did you install Sophos with my "Sophos.install" script? If you installed
> MailScanner from the RPM distribution then Sophos.install is on root's
path
> (so long as you "su -" to become root and don't just "su" of course, as
> that won't set your $PATH up properly).
>
> What does
>          ls -l /usr/local/Sophos
> say?
> What does
>          cd /usr/local/Sophos/ide
>          ls -l
> say?
>
> At 18:06 19/08/2003, you wrote:
> >3.72 here, with latest updates as of a few minutes ago including a
manually
> >added sobigf.ide and it still refuses to pick them up, even if I run
sweep
> >on them manually.
> >Thankfully they're being stripped by filename rules.
> >
> >Uly
> >
> >----- Original Message -----
> >From: "Steve Thomas" <lists at STHOMAS.NET>
> >To: <MAILSCANNER at JISCMAIL.AC.UK>
> >Sent: Tuesday, August 19, 2003 5:53 PM
> >Subject: Re: [MAILSCANNER] Sophos Users Heads-up
> >
> >
> > > On Tue, Aug 19, 2003 at 05:23:13PM +0100, Spicer, Kevin is rumored to
have
> >said:
> > > >
> > > > I've just noticed that my Sophos installation was not detecting
Sobig-F
> > > > (clam was though!) and it turns out that my Sophos install was out
of
> > > > date (3.69), however it still appeared to be updating because Sophos
> > > > have left the zipfile for 3.69 on the website (but aren't updating
it).
> > >
> > > 3.71 here - no problems detecting Sobig-F. Catching about 5-10 an hour
> >(only about 30 users).
> > >
> > >
> > > --
> > > "Few things are harder to put up with than a good example."
> > > - Mark Twain (1835-1910)
> > >
>
> --
> Julian Field
> www.MailScanner.info
> Professional Support Services at www.MailScanner.biz
> MailScanner thanks transtec Computers for their support
>