RE: [Declude.Virus] Clam AV Upgrade to 0.90.2-1

2007-04-18 Thread Mark Reimer
Scott,

I saw that clam was giving an error for max ratio and max space. I'm not
sure that clam understands those parameters anymore. But it does not cause
the scanner to error out.

 

Mark Reimer

IT System Admin

American CareSource

972-308-6887

 

  _  

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott
Fisher
Sent: Wednesday, April 18, 2007 1:56 PM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] Clam AV Upgrade to 0.90.2-1

 

The -mbox parameter died in .90.1 series.

 

I'm still using the other two:

SCANFILE1 d:\imail\declude\runclamscan.exe log=1
C:\clamav-devel\bin\clamdscan.exe --quiet --max-ratio 0 --max-space 1M -l
report.txt

- Original Message - 

From: Mark Reimer <mailto:[EMAIL PROTECTED]>  

To: declude.virus@declude.com 

Sent: Monday, April 16, 2007 2:45 PM

Subject: [Declude.Virus] Clam AV Upgrade to 0.90.2-1

 

I just upgraded to Clam av 0.90.2-1. It appears that three parameters that I
used per Scott's recommendation no longer work. Anyone else seeing this?

 

--mbox

--max-ratio

--max-space

 

Mark Reimer

IT System Admin

American CareSource

972-308-6887

 


---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.

Re: [Declude.Virus] Clam AV Upgrade to 0.90.2-1

2007-04-18 Thread Scott Fisher
The -mbox parameter died in .90.1 series.

I'm still using the other two:
SCANFILE1 d:\imail\declude\runclamscan.exe log=1 
C:\clamav-devel\bin\clamdscan.exe --quiet --max-ratio 0 --max-space 1M -l 
report.txt
  - Original Message - 
  From: Mark Reimer 
  To: declude.virus@declude.com 
  Sent: Monday, April 16, 2007 2:45 PM
  Subject: [Declude.Virus] Clam AV Upgrade to 0.90.2-1


  I just upgraded to Clam av 0.90.2-1. It appears that three parameters that I 
used per Scott's recommendation no longer work. Anyone else seeing this?

   

  --mbox

  --max-ratio

  --max-space

   

  Mark Reimer

  IT System Admin

  American CareSource

  972-308-6887

   


  ---
  This E-mail came from the Declude.Virus mailing list. To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type "unsubscribe Declude.Virus". The archives can be found
  at http://www.mail-archive.com. 

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Clam Av virus: MSRBL change & malware.com.br

2007-03-27 Thread Ernesto
it was the port.
thanks!

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott
Fisher
Sent: Tuesday, March 27, 2007 12:40 PM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] Clam Av virus: MSRBL change & malware.com.br

2 thoughts.
I had to have cygwin1.dll in the same folder as my rsync (rsync246.exe for 
me).

I also had to open up Port 873 TCP on my firewall.

- Original Message - 
From: "Ernesto" <[EMAIL PROTECTED]>
To: 
Sent: Tuesday, March 27, 2007 11:09 AM
Subject: RE: [Declude.Virus] Clam Av virus: MSRBL change & malware.com.br


>
> I'm trying everything I can find on rsync working on a windows machine, 
> and
> I haven't been able to get rsync to work.  I'm not sure if it's because of
> the arguments that I'm using, or what, but I keep getting errors about the
> connection being refused (111).
> rsync error: error in socket IO (code 10) at clientserver.c(104)
> [receiver=2.6.9]
> any idea what I should do?
>
> thanks
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott
> Fisher
> Sent: Monday, March 26, 2007 9:19 AM
> To: Declude.Virus@declude.com
> Subject: [Declude.Virus] Clam Av virus: MSRBL change & malware.com.br
>
> 1.  I noticed my clamav's MSRBL Signatures hadn't been updated for a week 
> or
> so. I t looks like they have moved from ftp access to rsync.
> Here's what I use to download them now:
> rsync246 rsync://rsync.mirror.msrbl.com/msrbl/MSRBL-Images.hdb .
> rsync246 rsync://rsync.mirror.msrbl.com/msrbl/MSRBL-SPAM.ndb .
> erase c:\clamav-devel\share\clamav\MSRBL-SPAM.ndb
> copy MSRBL-SPAM.ndb c:\clamav-devel\share\clamav\MSRBL-SPAM.ndb
> erase c:\clamav-devel\share\clamav\MSRBL-Images.hdb
> copy MSRBL-Images.hdb c:\clamav-devel\share\clamav\MSRBL-Images.hdb
>
>
>
> -
> Scott Fisher
> Director of IT
> Farm Progress Companies
> 191 S Gary Ave
> Carol Stream, IL 60188
> 630-462-2323
>
>
>
>
>
>
>
>
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com.
>
> 



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.












---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



Re: [Declude.Virus] Clam Av virus: MSRBL change & malware.com.br

2007-03-27 Thread Scott Fisher

2 thoughts.
I had to have cygwin1.dll in the same folder as my rsync (rsync246.exe for 
me).


I also had to open up Port 873 TCP on my firewall.

- Original Message - 
From: "Ernesto" <[EMAIL PROTECTED]>

To: 
Sent: Tuesday, March 27, 2007 11:09 AM
Subject: RE: [Declude.Virus] Clam Av virus: MSRBL change & malware.com.br




I'm trying everything I can find on rsync working on a windows machine, 
and

I haven't been able to get rsync to work.  I'm not sure if it's because of
the arguments that I'm using, or what, but I keep getting errors about the
connection being refused (111).
rsync error: error in socket IO (code 10) at clientserver.c(104)
[receiver=2.6.9]
any idea what I should do?

thanks

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott
Fisher
Sent: Monday, March 26, 2007 9:19 AM
To: Declude.Virus@declude.com
Subject: [Declude.Virus] Clam Av virus: MSRBL change & malware.com.br

1.  I noticed my clamav's MSRBL Signatures hadn't been updated for a week 
or

so. I t looks like they have moved from ftp access to rsync.
Here's what I use to download them now:
rsync246 rsync://rsync.mirror.msrbl.com/msrbl/MSRBL-Images.hdb .
rsync246 rsync://rsync.mirror.msrbl.com/msrbl/MSRBL-SPAM.ndb .
erase c:\clamav-devel\share\clamav\MSRBL-SPAM.ndb
copy MSRBL-SPAM.ndb c:\clamav-devel\share\clamav\MSRBL-SPAM.ndb
erase c:\clamav-devel\share\clamav\MSRBL-Images.hdb
copy MSRBL-Images.hdb c:\clamav-devel\share\clamav\MSRBL-Images.hdb



-
Scott Fisher
Director of IT
Farm Progress Companies
191 S Gary Ave
Carol Stream, IL 60188
630-462-2323








---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.






---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] Clam Av virus: MSRBL change & malware.com.br

2007-03-27 Thread Ernesto

I'm trying everything I can find on rsync working on a windows machine, and
I haven't been able to get rsync to work.  I'm not sure if it's because of
the arguments that I'm using, or what, but I keep getting errors about the
connection being refused (111).
rsync error: error in socket IO (code 10) at clientserver.c(104)
[receiver=2.6.9]
any idea what I should do?

thanks

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott
Fisher
Sent: Monday, March 26, 2007 9:19 AM
To: Declude.Virus@declude.com
Subject: [Declude.Virus] Clam Av virus: MSRBL change & malware.com.br

1.  I noticed my clamav's MSRBL Signatures hadn't been updated for a week or
so. I t looks like they have moved from ftp access to rsync.
Here's what I use to download them now:
rsync246 rsync://rsync.mirror.msrbl.com/msrbl/MSRBL-Images.hdb .
rsync246 rsync://rsync.mirror.msrbl.com/msrbl/MSRBL-SPAM.ndb .
erase c:\clamav-devel\share\clamav\MSRBL-SPAM.ndb
copy MSRBL-SPAM.ndb c:\clamav-devel\share\clamav\MSRBL-SPAM.ndb
erase c:\clamav-devel\share\clamav\MSRBL-Images.hdb
copy MSRBL-Images.hdb c:\clamav-devel\share\clamav\MSRBL-Images.hdb
 


-
Scott Fisher
Director of IT
Farm Progress Companies
191 S Gary Ave
Carol Stream, IL 60188
630-462-2323
 







---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] Clam Av virus: MSRBL change & malware.com.br

2007-03-26 Thread Mark Reimer
Scott,

Where did you download the rsync for windows?

 

Mark Reimer

IT System Admin

American CareSource

972-308-6887

 

  _  

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott
Fisher
Sent: Monday, March 26, 2007 9:19 AM
To: Declude.Virus@declude.com
Subject: [Declude.Virus] Clam Av virus: MSRBL change & malware.com.br

 

1.  I noticed my clamav's MSRBL Signatures hadn't been updated for a week or
so. I t looks like they have moved from ftp access to rsync.

Here's what I use to download them now:

rsync246 rsync://rsync.mirror.msrbl.com/msrbl/MSRBL-Images.hdb .
rsync246 rsync://rsync.mirror.msrbl.com/msrbl/MSRBL-SPAM.ndb .
erase c:\clamav-devel\share\clamav\MSRBL-SPAM.ndb
copy MSRBL-SPAM.ndb c:\clamav-devel\share\clamav\MSRBL-SPAM.ndb

erase c:\clamav-devel\share\clamav\MSRBL-Images.hdb
copy MSRBL-Images.hdb c:\clamav-devel\share\clamav\MSRBL-Images.hdb

 

2.  I've found another potential Malware block list with clam-av addons:
http://www.malware.com.br/

Here's what I use to download them:

wget -O - http://www.malware.com.br/cgi/submit?action=list_clamav > mbl.db
wget -O - http://www.malware.com.br/cgi/submit?action=list_clamav_ext >
mble.db
erase c:\clamav-devel\share\clamav\mbl.db
copy mbl.db c:\clamav-devel\share\clamav\mbl.db

erase c:\clamav-devel\share\clamav\mble.db
copy mbl.db c:\clamav-devel\share\clamav\mble.db

 

3.  I get postmaster notifications of virus activity. I've added these skips
for the various clamav addon dbs to postmaster.eml

SKIPIFVIRUSNAMEHAS MSRBL-SPAM

SKIPIFVIRUSNAMEHAS MSRBL-Images
SKIPIFVIRUSNAMEHAS MBL_
SKIPIFVIRUSNAMEHAS Email.Spam
SKIPIFVIRUSNAMEHAS Html.Spam
SKIPIFVIRUSNAMEHAS Email.Scam
SKIPIFVIRUSNAMEHAS Html.Scam
SKIPIFVIRUSNAMEHAS Email.Job
SKIPIFVIRUSNAMEHAS Html.Job
SKIPIFVIRUSNAMEHAS Email.Stk
SKIPIFVIRUSNAMEHAS Html.Stk
SKIPIFVIRUSNAMEHAS Email.Loan
SKIPIFVIRUSNAMEHAS Html.Loan
SKIPIFVIRUSNAMEHAS Email.Hdr
SKIPIFVIRUSNAMEHAS Email.Dipl
SKIPIFVIRUSNAMEHAS Html.Dipl
SKIPIFVIRUSNAMEHAS Email.Img
SKIPIFVIRUSNAMEHAS Html.Img
SKIPIFVIRUSNAMEHAS Email.Bou
SKIPIFVIRUSNAMEHAS Html.Bou
SKIPIFVIRUSNAMEHAS Html.Phishing
SKIPIFVIRUSNAMEHAS Email.Phishing
SKIPIFVIRUSNAMEHAS Email.Malware
SKIPIFVIRUSNAMEHAS Html.Malware

 


-
Scott Fisher
Director of IT
Farm Progress Companies
191 S Gary Ave
Carol Stream, IL 60188
630-462-2323

 

This email message, including any attachments, is for the sole use of the
intended recipient(s) and may contain confidential and privileged
information. Any unauthorized review, use, disclosure or distribution is
prohibited. If you are not the intended recipient, please contact the sender
by reply email and destroy all copies of the original message. Although Farm
Progress Companies has taken reasonable precautions to ensure no viruses are
present in this email, the company cannot accept responsibility for any loss
or damage arising from the use of this email or attachments.

 

 


---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.

Re: [Declude.Virus] Clam AV vs. AVG vs. McAfee

2007-03-06 Thread Darin Cox
Slightly OT, but can anyone recommend a good source for the command line 
version of McAfee?

Darin.


- Original Message - 
From: Andy Schmidt 
To: declude.virus@declude.com 
Sent: Tuesday, March 06, 2007 11:09 AM
Subject: RE: [Declude.Virus] Clam AV vs. AVG vs. McAfee


That's my experience too. I update McAfee hourly - which helps with new 
outbreaks. It's the last scanner in sequence and always manages to catch 
viruses that the internal didn't. (Of course, I don't know if there are virus 
that the internal caught that McAfee might have missed.)

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL 
PROTECTED])
Sent: Tuesday, March 06, 2007 10:45 AM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] Clam AV vs. AVG vs. McAfee

 

Wolf,

 

I use McAfee, CLAM, Internal AVG, and at one time (before licensing changes) 
F-Prot all at the same time.  If you have extra CPU there is no reason not to 
use multiple scanners.  One thing though when I switched to processing AV last 
I seen a dramatic drop in viruses due to them being caught as spam.  50-60K a 
month down to less than 2K.  FWIW - I have McAfee as my last scanner and every 
now and than I see it grab a few viruses that the others miss.


Darrell

 


Check out http://www.invariantsystems.com for utilities for Declude And Imail.  
IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG 
Integration, and Log Parsers.

  - Original Message - 

  From: Wolf Tombe 

  To: declude.virus@declude.com 

  Sent: Tuesday, March 06, 2007 10:16 AM

  Subject: [Declude.Virus] Clam AV vs. AVG vs. McAfee

   

  The discussion on the current version of Clam AV and Clam being able to 
detect some image spam got me thinking.  Prior to Declude version 4.0, I always 
used McAfee AV to scan all incoming messages.  When I upgraded to Declude 4 I 
decided to try it's built in AV which seems to work fine.  I'm curious though 
as to the opinions of others on this list as to the merits of using Clam or 
other anti-virus scanners either in place of the Declude built in AV or in 
addition to it.

   

  Any opinions people would like to share will be appreciated.

   

  Thanks!

   

  Wolf

   

   


  ---
  This E-mail came from the Declude.Virus mailing list. To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type "unsubscribe Declude.Virus". The archives can be found
  at http://www.mail-archive.com. 


---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com. 

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Clam AV vs. AVG vs. McAfee

2007-03-06 Thread Andy Schmidt
That's my experience too. I update McAfee hourly - which helps with new
outbreaks. It's the last scanner in sequence and always manages to catch
viruses that the internal didn't. (Of course, I don't know if there are
virus that the internal caught that McAfee might have missed.)

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Tuesday, March 06, 2007 10:45 AM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] Clam AV vs. AVG vs. McAfee

 

Wolf,

 

I use McAfee, CLAM, Internal AVG, and at one time (before licensing changes)
F-Prot all at the same time.  If you have extra CPU there is no reason not
to use multiple scanners.  One thing though when I switched to processing AV
last I seen a dramatic drop in viruses due to them being caught as spam.
50-60K a month down to less than 2K.  FWIW - I have McAfee as my last
scanner and every now and than I see it grab a few viruses that the others
miss.


Darrell

 


Check out http://www.invariantsystems.com for utilities for Declude And
Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG
Integration, and Log Parsers.

- Original Message - 

From: Wolf Tombe <mailto:[EMAIL PROTECTED]>  

To: declude.virus@declude.com 

Sent: Tuesday, March 06, 2007 10:16 AM

Subject: [Declude.Virus] Clam AV vs. AVG vs. McAfee

 

The discussion on the current version of Clam AV and Clam being able to
detect some image spam got me thinking.  Prior to Declude version 4.0, I
always used McAfee AV to scan all incoming messages.  When I upgraded to
Declude 4 I decided to try it's built in AV which seems to work fine.  I'm
curious though as to the opinions of others on this list as to the merits of
using Clam or other anti-virus scanners either in place of the Declude built
in AV or in addition to it.

 

Any opinions people would like to share will be appreciated.

 

Thanks!

 

Wolf

 

 


---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.

Re: [Declude.Virus] Clam AV vs. AVG vs. McAfee

2007-03-06 Thread Darrell \([EMAIL PROTECTED])
Wolf,

I use McAfee, CLAM, Internal AVG, and at one time (before licensing changes) 
F-Prot all at the same time.  If you have extra CPU there is no reason not to 
use multiple scanners.  One thing though when I switched to processing AV last 
I seen a dramatic drop in viruses due to them being caught as spam.  50-60K a 
month down to less than 2K.  FWIW - I have McAfee as my last scanner and every 
now and than I see it grab a few viruses that the others miss.

Darrell


Check out http://www.invariantsystems.com for utilities for Declude And Imail.  
IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG 
Integration, and Log Parsers.
  - Original Message - 
  From: Wolf Tombe 
  To: declude.virus@declude.com 
  Sent: Tuesday, March 06, 2007 10:16 AM
  Subject: [Declude.Virus] Clam AV vs. AVG vs. McAfee


  The discussion on the current version of Clam AV and Clam being able to 
detect some image spam got me thinking.  Prior to Declude version 4.0, I always 
used McAfee AV to scan all incoming messages.  When I upgraded to Declude 4 I 
decided to try it's built in AV which seems to work fine.  I'm curious though 
as to the opinions of others on this list as to the merits of using Clam or 
other anti-virus scanners either in place of the Declude built in AV or in 
addition to it.

   

  Any opinions people would like to share will be appreciated.

   

  Thanks!

   

  Wolf

   

   


  ---
  This E-mail came from the Declude.Virus mailing list. To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type "unsubscribe Declude.Virus". The archives can be found
  at http://www.mail-archive.com. 

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] clam-av as a service

2006-03-07 Thread Scott Fisher



Here's my clam command line:
SCANFILE2 d:\imail\declude\runclamscan.exe log=1 
C:\clamav-devel\bin\clamdscan.exe --quiet --mbox --max-ratio 0 --max-space 1M -l 
report.txt
I call clamdscan.exe not clamscan.exe
 
I use the runclamscam wrapperL
This program is just a wrapper calling clamscan or 
clamdscan to return the correct virus name to declude.
 

  - Original Message - 
  From: 
  Harry Vanderzand 
  
  To: Declude.Virus@declude.com 
  Sent: Tuesday, March 07, 2006 11:15 
  AM
  Subject: [Declude.Virus] clam-av as a 
  service
  
  I am trying to run 
  clamav as a service.  I have switch to the clamav port and now have the 
  following config in my virus.cfg:
   
  SCANFILE2 
  c:\clamav~1\bin\clamscan.exe --quiet --log-verbose --no-summary --max-ratio 0 
  -l report.txtVIRUSCODE2 1
   
  I also started 
  clamd as per documentation
   
  However I see the 
  clamd process running and also multiple instances of clamscan.exe.  Up to 
  50 or more of them.
   
  Is that 
  normal?
   
  I also see that 
  virus scanner2 is not finishing after 60 seconds in some instances, see 
  below
   
  Did I miss 
  something?
   
  I am running al 
  this on dual xeon 3.4 with 2GB ram, imail 8.22, declude 4.09, sniffer and 
  invurbl
   
  Should I adjust 
  any settings?
   
  Thank 
  you
   
  03/07/2006 
  12:11:43.774 qbe91081414fe.smd ERROR: Virus scanner 2 didn't finish after 
  60 seconds; terminating.03/07/2006 12:11:43.805 qbe91081414fe.smd 
  Virus scanner 2 reports exit code of 003/07/2006 12:11:44.945 
  qbe91081414fe.smd Scanned: Virus Free [MIME: 1 3864]03/07/2006 
  12:11:48.336 qbecf08e61570.smd Vulnerability flags = 86203/07/2006 
  12:11:48.414 qbecf08e61570.smd MIME file: [text/html][quoted-printable; 
  Length=619 Checksum=47952]03/07/2006 12:11:48.758 qbecf08e61570.smd 
  Virus scanner 1 reports exit code of 003/07/2006 12:11:49.570 
  qbed308ff1575.smd Vulnerability flags = 86203/07/2006 12:11:50.305 
  qbebe08de154c.smd Vulnerability flags = 86203/07/2006 12:11:50.539 
  qbed308ff1575.smd Virus scanner 1 reports exit code of 003/07/2006 
  12:11:50.758 qbebe08de154c.smd MIME file: [text/html][quoted-printable; 
  Length=2124 Checksum=177522]03/07/2006 12:11:51.024 qbebe08de154c.smd 
  MIME file: abandonment.gif [base64; Length=43248 
  Checksum=5360168]03/07/2006 12:11:51.445 qbebe08de154c.smd Virus 
  scanner 1 reports exit code of 003/07/2006 12:11:51.492 
  qbe9908a4150a.smd ERROR: Virus scanner 2 didn't finish after 60 seconds; 
  terminating.03/07/2006 12:11:51.492 qbe9908a4150a.smd Virus scanner 2 
  reports exit code of 003/07/2006 12:11:52.008 qbed508ec1578.smd 
  Vulnerability flags = 86203/07/2006 12:11:52.305 qbed508ec1578.smd 
  MIME file: [text/html][quoted-printable; Length=1045 
  Checksum=72663]03/07/2006 12:11:52.664 qbe9908a4150a.smd Scanned: 
  Virus Free [MIME: 10 77594]03/07/2006 12:11:52.695 qbed508ec1578.smd 
  Virus scanner 1 reports exit code of 003/07/2006 12:11:52.789 
  qbebe08bb154b.smd Virus scanner 2 reports exit code of 003/07/2006 
  12:11:52.883 qbebe08bb154b.smd Scanned: Virus Free [MIME: 1 
  363]
   
  Thank 
  you
   
  Harry Vanderzand inTown Internet & Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2519-741-1222
   


RE: [Declude.Virus] Clam AV

2006-01-23 Thread george
David,

Thanks.  I'll try it this evening.

George

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.Virus-
> [EMAIL PROTECTED] On Behalf Of David Barker
> Sent: Monday, January 23, 2006 11:06 AM
> To: Declude.Virus@declude.com
> Subject: RE: [Declude.Virus] Clam AV
> 
> Once Installing Clamwin the following can be used as a configuration:
> 
> SCANFILE [Drive:]\[Path]\clamwin\bin\clamscan.exe --verbose
> --database="[Drive:]\[Path]\db" --tempdir="c:\Temp" --no-summary -l
> report.txt
> VIRUSCODE 1
> 
> * Your SCANFILE line is on a single line.
> ** Ensure you have a C:\Temp dir
> 
> David B
> www.declude.com
> 
> 
> 
> 
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of george
> Sent: Sunday, January 22, 2006 10:46 PM
> To: Declude.Virus@declude.com
> Subject: [Declude.Virus] Clam AV
> 
> 
> 
> Does anyone know the story about the windows port of Clam-AV.  There was
> an
> upgrade of the base product to version 88.0 about two weeks age but the
> windows port that we're using with Declude is still at the 87.1 level.
> 
> 
> 
> The ClamWin port, which is the GUI interface version of the Windows port
> was
> upgraded to 88.0 immediately.
> 
> 
> 
> Does anyone have a method of using the ClamWin port with Declude?  I've
> checked the Archives and only found information about unsuccessful
> attempts.
> 
> 
> 
> Thanks
> 
> 
> 
> George
> 
> 
> ---
> [This E-mail was scanned for viruses by Declude EVA www.declude.com]
> 
> ---
> This E-mail came from the Declude.Virus mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Clam AV

2006-01-23 Thread David Barker
Once Installing Clamwin the following can be used as a configuration:
 
SCANFILE [Drive:]\[Path]\clamwin\bin\clamscan.exe --verbose
--database="[Drive:]\[Path]\db" --tempdir="c:\Temp" --no-summary -l
report.txt
VIRUSCODE 1

* Your SCANFILE line is on a single line.
** Ensure you have a C:\Temp dir 

David B
www.declude.com




From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of george
Sent: Sunday, January 22, 2006 10:46 PM
To: Declude.Virus@declude.com
Subject: [Declude.Virus] Clam AV



Does anyone know the story about the windows port of Clam-AV.  There was an
upgrade of the base product to version 88.0 about two weeks age but the
windows port that we're using with Declude is still at the 87.1 level.

 

The ClamWin port, which is the GUI interface version of the Windows port was
upgraded to 88.0 immediately.

 

Does anyone have a method of using the ClamWin port with Declude?  I've
checked the Archives and only found information about unsuccessful attempts.

 

Thanks

 

George


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.