Re: [Clamav-users] Is there an ubuntu (dapper) repository out there?
On Wed, 16 Aug 2006 07:39:16 +1000 "Robert S" <[EMAIL PROTECTED]> wrote: > I have been looking at replacing my debian box with ubuntu dapper LTS > (because of the "LTS"). I have been thwarted by the fact that there > does not seem to be a compatible repository for clamav. I don't want > to have to compile clamav manually every time a new release comes out. > > Is there a repository out there? I've put a message on the ubuntu > forums but have not been told that such a thing exists. Ubuntu has a clamav version 0.88.2-1 in their repository for Dapper as of yesterday. ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] (no subject)
On Mon, 10 Jul 2006 16:03:29 -0300 "Ivan Carlos Ricci" <[EMAIL PROTECTED]> wrote: > unsubscribe You're sending to the wrong list. Either expand your headers to see the unsubscribe list or go to: http://www.clamav.net/ml.html ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Return Message-ID?
On Sun, 30 May 2004 23:04:29 +0200 Bert Koelewijn <[EMAIL PROTECTED]> wrote: > > On Sun, 30 May 2004 22:04:51 +0200 > > Bert Koelewijn <[EMAIL PROTECTED]> wrote: > > > > > Hello list, > > When scanning mailbox files and a virus is found, RAV used to give > >a>>>hint which email was infected. Can ClamAV do such thing? For > >>> > >>>example:> > >>> > Sent: Eicar-Test-Signature FOUND > Message-ID: <[EMAIL PROTECTED]> > > --- SCAN SUMMARY --- > Known viruses: 21739 > Scanned directories: 0 > Scanned files: 1 > Infected files: 1 > Data scanned: 2.75 MB > I/O buffer size: 131072 bytes > Time: 43.089 sec (0 m 43 s) > > Thanks! > > Bert > > > >>> > >>> If you run clamscan with the -i option, it will only list > >>> errors/virii found. > >>> > >>>Matt > >>> > >>> > >>> > >>>--- > >>>This SF.Net email is sponsored by: Oracle 10g > >>>Get certified on the hottest thing ever to hit the market... Oracle > >>>10g. Take an Oracle 10g class now, and we'll give you the exam > >FREE.>>http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click > >>>___ > >>>Clamav-users mailing list > >>>[EMAIL PROTECTED] > >>>https://lists.sourceforge.net/lists/listinfo/clamav-users > >> > >>ClamAV will show the MBOX file containing the virus. But with large > >>MBOX files, searching the message is very time consuming... > >> > > > > Have you tried Sylpheed-claws? I had the same problem when using > > Evolution. Changed and the particular message was plucked out and > > put in the quarantine folder I chose when I converted. Only problem > > was that it took quite a while converting a large mbox on a > > P3-850mhz machine. > > > > > > --- > > This SF.Net email is sponsored by: Oracle 10g > > Get certified on the hottest thing ever to hit the market... Oracle > > 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. > > http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click > > ___ > > Clamav-users mailing list > > [EMAIL PROTECTED] > > https://lists.sourceforge.net/lists/listinfo/clamav-users > > No, I'm using Mozilla, but Sylpheed-claws looks interesting. Is there > any way to do this server-side? > I can't answer about the server-side. Perhaps someone more knowledgeable can help. By the way, I'm running it under Linux and am very satisfied thus far. It integrates very nicely with Clamav via a plugin. If you're running Windows there is a version and it looks like it also has a Clamav plugin. --- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
Re: [Clamav-users] Return Message-ID?
On Sun, 30 May 2004 22:04:51 +0200 Bert Koelewijn <[EMAIL PROTECTED]> wrote: > >>Hello list, > >> > >>When scanning mailbox files and a virus is found, RAV used to give a > >>hint which email was infected. Can ClamAV do such thing? For > >example:> > >>Sent: Eicar-Test-Signature FOUND > >> Message-ID: <[EMAIL PROTECTED]> > >> > >>--- SCAN SUMMARY --- > >>Known viruses: 21739 > >>Scanned directories: 0 > >>Scanned files: 1 > >>Infected files: 1 > >>Data scanned: 2.75 MB > >>I/O buffer size: 131072 bytes > >>Time: 43.089 sec (0 m 43 s) > >> > >>Thanks! > >> > >>Bert > >> > >> > > > > If you run clamscan with the -i option, it will only list > > errors/virii found. > > > > Matt > > > > > > > > --- > > This SF.Net email is sponsored by: Oracle 10g > > Get certified on the hottest thing ever to hit the market... Oracle > > 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. > > http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click > > ___ > > Clamav-users mailing list > > [EMAIL PROTECTED] > > https://lists.sourceforge.net/lists/listinfo/clamav-users > > ClamAV will show the MBOX file containing the virus. But with large > MBOX files, searching the message is very time consuming... > Have you tried Sylpheed-claws? I had the same problem when using Evolution. Changed and the particular message was plucked out and put in the quarantine folder I chose when I converted. Only problem was that it took quite a while converting a large mbox on a P3-850mhz machine. --- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Fwd: RE: [Clamav-users] Clamav false positive?]
I received this earlier. Does this shed any more light? Sam --- Begin Message --- Sam: Sorry I didn't post this reply back to the list, but for some reason sourceforge's spam filter says it cannot verify our mail server and attempts to post using our local MTA fail. Anyway, FWIW, clam did not ID your email as containg a virus, but NAI's uvscan sure did... A known virus was discovered. Virus-scanner messages follow: /var/spool/MIMEDefang/run/mdefang-i1H4g1oX015780/Work/msg-533-178.txt: W32.FunLove.4099 FOUND Feel free to pass on to the list if you want. -- Jon R. Kibler A.S.E.T., Inc. Charleston, SC USA (843) 849-8214 == Filtered by: TRUSTEM.COM's Email Filtering Service http://www.trustem.com/ No Spam. No Viruses. Just Good Clean Email. --- End Message ---
[Clamav-users] WinME md5ums
Had to change to my laptop. There were six instances of the virus (?)in total, 3 of 8255xdel.exe and 3 of prounstl.exe. 1) 8b87a96989efac84991f394184531f4b 8255xdel.exe 2) 8b87a96989efac84991f394184531f4b 8255xdel.exe 3) cf95646ca1ea49379349d5024ea3824f prounstl.exe 4) 8b87a96989efac84991f394184531f4b 8255xDel.exe 5) cf95646ca1ea49379349d5024ea3824f prounstl.exe 6) cf95646ca1ea49379349d5024ea3824f prounstl.exe Dir 1 - windows/system/ Dir 2&3 - windows/drivers Dir 4&5 - dell/drivers/mp100im/lan/driver/WinME Dir 6 - dell/drivers/mp100im/lan/driver/Win2k The machine is a Dell Inspiron 4000, and the mp100im dir refers to the updated drivers for the combined lan/modem that I downloaded from Dell in November 2001. I've been using the free AVG program for some time, running full checks regularly. The system triple boots ME and W2k, with Libranet from a floppy. Thanks for all the help and time spent on this. Sam Miller --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Re: THIS IS A VIRUS ??? --- Aplogies
I would like to apologize to the list and everyone who has had a problem with my posting, evidently due to my unfortunate choice of words. I didn't realize a Windows text string in Linux could trigger such a reaction. If this should happen again to me, how can I post without making this happen? Put the words in quotes or something? I'm looking up the information requested about the files right now and will forward as soon as possible. Thank you for your patience. Sam Miller --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
[Clamav-users] Clamav false positive?
Firstly, I'd like to say thank you for such a useful utility. My question concerns scanning a Windows partition from a Linux partition on the same drive. Running Clamav 0.65-3 on Debian based Libranet, scanned a WinME partition and came up with the report that FunLove.4099 had been found in several drivers (LAN I think). Looking through the files with MC turned up the text '~Fun Loving Criminal~' several times in each one. File creation date the same for each, August 13 2000. Why I'm unsure is that my free Windows anti-virus program never detected it. But I was unsure and downloaded the Symantec cleaning tool. It didn't find anything. Is there some inherent risk for false positives with scanning Windows from Linux? Thank you. Sam Miller --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click ___ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users
