[Clamav-users] Worm.Mytob.CL

2005-11-27 Thread baynaa
Dear all,

I receive a virus report from my SMTP Server like:

 

Attention: [EMAIL PROTECTED]

A virus was found in an Email message you sent. 

This Email scanner intercepted it and stopped the entire message reaching
its destination. 

  

The virus was reported to be: 

  

Worm.Mytob.CL

 

Please update your virus scanner or contact your IT support personnel as
soon as possible as you may have a virus on your system.

 

The IT Support Personnel is me :-). How can I remove this virus. When I
googled the internet, nothing useful was found.

BR, Baynaa.

 

 

 

___
http://lurker.clamav.net/list/clamav-users.html


RE: [Clamav-users] Text of email not scanned.

2005-11-27 Thread Gary V

I've installed clamav but can't get it to scan the text inside an email
message. The message with the eicar string gets the header X-Virus-Scan:
but no warnings. Maybe it's not supposed to scan the message but only the
attachments? Can I change that?

Clamav finds and flags email with attachments containing eicar string but
doesn't find the string inside a message.



The string must be absolutely the first thing in the body of a message, no 
white space or other characters can precede it.


"Any anti-virus product that supports the eicar test file should detect it 
in any file providing that the

file STARTS with the following 68 characters, and is exactly 68 bytes long:"

"The only whitespace characters allowed [after it] are the space character, 
tab, LF, CR, CTRL-Z."


_
Don’t just search. Find. Check out the new MSN Search! 
http://search.msn.click-url.com/go/onm00200636ave/direct/01/


___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] Text of email not scanned.

2005-11-27 Thread pbr
I've installed clamav but can't get it to scan the text inside an email
message. The message with the eicar string gets the header X-Virus-Scan:
but no warnings. Maybe it's not supposed to scan the message but only the
attachments? Can I change that?

Clamav finds and flags email with attachments containing eicar string but
doesn't find the string inside a message.

I'm using postfix, procmail, trashscan, and clamscan.

My procmailrc:

# /etc/procmailrc
SHELL=/bin/bash
PATH=$HOME/bin:/bin:/usr/bin:/usr/local/bin:/usr/local/sbin:

#1. Run TrashScan

:0
* ^Subject:
* !^X-Virus-Scan:
| /usr/local/sbin/trashscan-new

#2. Tag the mail

:0fhw
* ^X-Virus-Scan: Suspicious
* ^Subject: *
| sed -e 's/^Subject:/Subject: [virus]/'



Thanks for any ideas.


___
http://lurker.clamav.net/list/clamav-users.html


RE: [Clamav-users] what is the default port that clamav (clamd) runs on

2005-11-27 Thread Dennis Peterson
Robert Cates said:
> OK, I'm now subscribed to the ML.
> I've already looked in my /etc/clamav/clamd.conf and found nothing
> pertaining to a (default) port number.
>
> Robert

Others will complain about your top posting. I'd just point out that what
you learned is that there is no default. In fact in your installation
there may not even be a port, but rather a Unix socket. There may also be
conventions that some packagers provide but nothing you should depend on.
It can be anything you wish, of course. The common port is 3310, but is
not specific to Debian Woody. I think this is in the example clamd.conf
file in the source distribution but may not survive a packager's
preferences. Regardless, always check the clamd.conf file as that is where
it is specified if it is specified at all.

dp
___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] what is the default port that clamav (clamd) runs on

2005-11-27 Thread Niek

On 11/28/2005 12:24 AM +0200, Robert Cates wrote:

Hi all,

I've just installed clamav 0.87.1 on my Debian Woody machine and I need to
know what's the default port number that clamd runs on.  I can't find it any
where in the docs or the web site.

Please reply directly back to me, as I am not yet subscribed to this ML.

Thanks in advance!
Robert


Hi Robert,

man clamd.conf
man netstat

Niek Baakman
___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] what is the default port that clamav (clamd) runs on

2005-11-27 Thread Stephen Gran
On Mon, Nov 28, 2005 at 12:24:46AM +0100, Robert Cates said:
> Hi all,
> 
> I've just installed clamav 0.87.1 on my Debian Woody machine and I need to
> know what's the default port number that clamd runs on.  I can't find it any
> where in the docs or the web site.

There is no 'default' port (in the sense that it will listen on this
port unless explicitly given an alternate, as in the case of, say an
smtp or dns server).  However, in the Debian packages, it defaults to a
unix socket, and if you choose a tcp socket, it defaults to 3310.

Take care,
-- 
 --
|  Stephen Gran  | A man may be so much of everything that |
|  [EMAIL PROTECTED] | he is nothing of anything.   -- Samuel  |
|  http://www.lobefin.net/~steve | Johnson |
 --


signature.asc
Description: Digital signature
___
http://lurker.clamav.net/list/clamav-users.html


RE: [Clamav-users] what is the default port that clamav (clamd) runs on

2005-11-27 Thread Robert Cates
OK, I'm now subscribed to the ML.
I've already looked in my /etc/clamav/clamd.conf and found nothing
pertaining to a (default) port number.

Robert


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Dennis
Peterson
Sent: Montag, 28. November 2005 00:32
To: ClamAV users ML
Subject: Re: [Clamav-users] what is the default port that clamav (clamd)
runs on


Robert Cates said:
> Hi all,
>
> I've just installed clamav 0.87.1 on my Debian Woody machine and I need to
> know what's the default port number that clamd runs on.  I can't find it
> any
> where in the docs or the web site.
>
> Please reply directly back to me, as I am not yet subscribed to this ML.
>
> Thanks in advance!
> Robert

Should you ever come back to visit this list you'll learn that everything
you need to know about this can be found in your clamd.conf file. That
leaves for you the challenge of finding that clamd.conf file.

dp
___
http://lurker.clamav.net/list/clamav-users.html

___
http://lurker.clamav.net/list/clamav-users.html


Re: [Clamav-users] what is the default port that clamav (clamd) runs on

2005-11-27 Thread Dennis Peterson
Robert Cates said:
> Hi all,
>
> I've just installed clamav 0.87.1 on my Debian Woody machine and I need to
> know what's the default port number that clamd runs on.  I can't find it
> any
> where in the docs or the web site.
>
> Please reply directly back to me, as I am not yet subscribed to this ML.
>
> Thanks in advance!
> Robert

Should you ever come back to visit this list you'll learn that everything
you need to know about this can be found in your clamd.conf file. That
leaves for you the challenge of finding that clamd.conf file.

dp
___
http://lurker.clamav.net/list/clamav-users.html


[Clamav-users] what is the default port that clamav (clamd) runs on

2005-11-27 Thread Robert Cates
Hi all,

I've just installed clamav 0.87.1 on my Debian Woody machine and I need to
know what's the default port number that clamd runs on.  I can't find it any
where in the docs or the web site.

Please reply directly back to me, as I am not yet subscribed to this ML.

Thanks in advance!
Robert

___
http://lurker.clamav.net/list/clamav-users.html