On Wed, 5 Nov 2003, Ed Phillips wrote:
> On line 102-3 of clamd/scanner.c, clamd logs error messages without the
> word "ERROR" as it does for the single-file case on line 157. The error
> messages should be consistent and include the word "ERROR".
Also, the logg() call on line 103 is written su
On Wed, 5 Nov 2003 11:47:26 +0100, Tomasz Kojm <[EMAIL PROTECTED]> wrote:
>
>
> Mimail archive is slightly corrupted and on some configurations it may
> bypass anti-virus protection. (That was at least reported on PLD Linux).
>
Interesting thing is, that clamav 0.60 with the newest updates is
It appears that by default, GMP 4.1.2 builds for 64-bit mode on an Sun
UltraSparc system, whereas ClamAV builds for 32-bit. I had to recompile
our GMP library in 32-bit mode and now ClamAV configure can find it
correctly...
Cheers,
Ed
Ed Phillips <[EMAIL PROTECTED]> University of Delawa
Tomasz Papszun wrote:
On Wed, 05 Nov 2003 at 22:32:22 -0200, Mário Luis Ghoneim wrote:
This http://www.jcradios.com.br/virus/photus.zip file has in your inner a
virus.
It has indeed. But clamscan detects it:
$ clamscan photos.zip
photos.zip: Worm.Mimail.C FOUND
I use
Conectiva Linux 6.0
Clam
On Friday 31 October 2003 8:01 pm, Nigel wrote:
> > | Use the --quiet option of clamav-milter.
> >
> > Where? When I compile? In my init script?
>
> In your init script, it's a run time option...
I should have added that on Linux it's best to add it to
/etc/sysconfig/clamav-milter
-Nigel
-
Hello people,
Okay, this is precursor to April fools day! Forgive me if I went overboard,
but I have a question or two about the impending -stable release.
After all the issued reported by Ed Phillips, do we still expect the release
out as earlier planned?
My answer would be NO. Why? Because I be
What clamav version ? Does it print any error messages with that file ?
We have clamscan / ClamAV version 0.54
Mimail archive is slightly corrupted and on some configurations it may
bypass anti-virus protection. (That was at least reported on PLD Linux).
Wojciech Kunda
nQ.pl
Ok Tomasz,
I upgraded it clamav0.54 to 0.60
/usr/local/bin/clamdscan -V
clamdscan / ClamAV version 0.60
/usr/local/bin/clamscan -V
clamscan / ClamAV version 0.60
/usr/local/bin/clamd -V
clamd / ClamAV version 0.60
But it doesn't work yet : (
I followed the instructions in INSTALL file to in
On Thu, 6 Nov 2003, Odhiambo Washington wrote:
> Hello people,
>
> Okay, this is precursor to April fools day! Forgive me if I went overboard,
> but I have a question or two about the impending -stable release.
> After all the issued reported by Ed Phillips, do we still expect the release
> out as
Hi,
In addition to previous mails about Mimail.C(G):
I use clamav with amavis-perl and amavis-ng. With both I have the same
problem. Virus is not detected in mail. But when i save attachment:
shark% clamscan photos.zip (here clamav with amavis-perl)
photos.zip: Worm.Mimail.C FOUND
--- SCA
On Thursday 06 November 2003 8:06 pm, Ed Phillips wrote:
> I'd still like to get the "gcc favoritism" stripped out, so we can use Sun
> Forte to compile it, but that will take time... and we're very busy here,
> so recompiling software for "fun" may not be feasible right now... ;-)
The trouble is
Mário Luis Ghoneim wrote:
Ok Tomasz,
I upgraded it clamav0.54 to 0.60
/usr/local/bin/clamdscan -V
clamdscan / ClamAV version 0.60
/usr/local/bin/clamscan -V
clamscan / ClamAV version 0.60
/usr/local/bin/clamd -V
clamd / ClamAV version 0.60
But it doesn't work yet : (
It may be because 0.60 isn
On Thu, 6 Nov 2003, Nigel Horne wrote:
> On Thursday 06 November 2003 8:06 pm, Ed Phillips wrote:
>
> > I'd still like to get the "gcc favoritism" stripped out, so we can use Sun
> > Forte to compile it, but that will take time... and we're very busy here,
> > so recompiling software for "fun" may
I'm sitting at my desk, reconfiguring my network monitor, when the phone rings.
Caller-ID tells me it's Nigel Horne. I pick the receiver up and say:
> > I'd still like to get the "gcc favoritism" stripped out, so we can use Sun
> > Forte to compile it, but that will take time... and we're ve
>> > > Hmm..I thought he was talking about the signatures not the actual
>> > > viruses themselves.
>> >
>> > No, he was talking about real viruses! :-) That's the problem.
>>
>> Yes I was and I've no problem with this fact.
>> And I told Tomasz that I'm ready to upload the archive via a secure
>>
Thomas Lamy wrote:
It may be because 0.60 isn't stable (but marked so). Please grab the
sources via CVS or use one of the snapshots. Only these contain all
the fixes we mentioned.
[EMAIL PROTECTED] tmp]# clamscan -V
clamscan / ClamAV version devel-20031106
[EMAIL PROTECTED] tmp]# cla
René Bellora wrote:
Thomas Lamy wrote:
It may be because 0.60 isn't stable (but marked so). Please grab the
sources via CVS or use one of the snapshots. Only these contain all
the fixes we mentioned.
[EMAIL PROTECTED] tmp]# clamscan -V
clamscan / ClamAV version devel-20031106
[
Hi,
I've posted about this before, but thought it worth mentioning again.
I've upgraded my ClamAV installation from the 03112003 CVS snapshot, and
it's lasted 3 days before going mad.
First signs are this sort of thing:-
Nov 6 15:29:09 castor clamav-milter[11231]: hit max-children limit (5
>=
ces via CVS or use one of the snapshots. Only these contain all
> > > the fixes we mentioned.
> > >
> > [EMAIL PROTECTED] tmp]# clamscan -V
> > clamscan / ClamAV version devel-20031106
> >
> > [EMAIL PROTECTED] tmp]# clamscan photos.zip
> > LibClamAV E
On Thu, 6 Nov 2003 13:21:23 +0300
Odhiambo Washington <[EMAIL PROTECTED]> wrote:
> Hello people,
>
>
> Okay, this is precursor to April fools day! Forgive me if I went
> overboard, but I have a question or two about the impending -stable
> release. After all the issued reported by Ed Phillips, d
Kunal Rupera wrote:
- Original Message -
From: "Kunal Rupera" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, November 06, 2003 8:10 PM
Subject: Re: [Clamav-users] Virus not detected
i have been running clamAV with Amavisd-new on a postfix mail server and
have never faced a
Thomas :-)
I use the amavis-perl-11 and amavis-ng-0.1.3.1
There was one time it worked :-( but I didn't remember what I did to get
this.
[]'s
Mário
- Original Message -
From: "Thomas Lamy" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, November 06, 2003 1:20 PM
Subj
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
You probably know this, but clamav-devel-20031106 fails to compile with
- --enable-milter. The error being reported has been around a while, but I'm
reporting it because I thought yesterday's snapshot had a different error.
The error r
I have a copy of Mimail.G ("readnow.zip") which is getting through my
ClamAV installation, but is detected when I submit it through the
specimen scanner on gietl.com
I'm using "clamscan / ClamAV version 0.60", which I know is not
up-to-date, but would this explain why the worm is getting through?
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello
This is probably a feature rather than a defect.
The scenario: I have clamuko running against the /home directory, checking
opens and executions. It means that dazuko prevents me from opening or
executing an infected file - excellent. But I a
On Thu, 6 Nov 2003 21:09:37 +
Steve King <[EMAIL PROTECTED]> wrote:
> The scenario: I have clamuko running against the /home directory,
> checking opens and executions. It means that dazuko prevents me from
> opening or executing an infected file - excellent. But I also like to
> do some ad ho
I wasn't able to reproduce Mimail zip errors but there are real chances
the latest change in CVS will fix them. There's a snapshot available at:
http://clamav.sf.net/snapshot/clamav-20031106-tk.tar.gz
Please test it ASAP. Thank you.
Best regards,
Tomasz Kojm
--
oo.
On Thu, 6 Nov 2003, Tomasz Kojm wrote:
> I wasn't able to reproduce Mimail zip errors but there are real chances
> the latest change in CVS will fix them. There's a snapshot available at:
>
> http://clamav.sf.net/snapshot/clamav-20031106-tk.tar.gz
Could you offer a brief
> http://clamav.sf.net/snapshot/clamav-20031106-tk.tar.gz
> Please test it ASAP. Thank you.
OK, there's progress:
> clamscan -V
clamscan / ClamAV version devel-20031106
> clamscan readnow.zip
readnow.zip: Worm.Mimail.G FOUND
--- SCAN SUMMARY ---
Known virus
On Thu, 6 Nov 2003, Tomasz Kojm wrote:
> I wasn't able to reproduce Mimail zip errors but there are real chances
> the latest change in CVS will fix them. There's a snapshot available at:
>
> http://clamav.sf.net/snapshot/clamav-20031106-tk.tar.gz
Works like a char
On Thu, 6 Nov 2003, Tomasz Kojm wrote:
> I wasn't able to reproduce Mimail zip errors but there are real chances
> the latest change in CVS will fix them. There's a snapshot available at:
>
> http://clamav.sf.net/snapshot/clamav-20031106-tk.tar.gz
Sorry to reply again,
On Thu, 6 Nov 2003 15:47:20 +0100 (MET)
Pawel Adamczyk <[EMAIL PROTECTED]> wrote:
> As i read in other posts, the file has bad header. I unzipped this
> file(photos.jpg.exe) and clamscan found the virus.
>
> Is there any way to solve the problem? Maybe i should add
> --disable-archive in amavis c
hot
> > available at:
> >
> > http://clamav.sf.net/snapshot/clamav-20031106-tk.tar.gz
>
> Could you offer a brief description of why you think this will "fix"
> the zip errors...?
Now libclamav includes the original zziplib sources (your version -
20031104 - contain
hot
> > available at:
> >
> > http://clamav.sf.net/snapshot/clamav-20031106-tk.tar.gz
>
> Sorry to reply again, but it works great on FreeBSD 4.8 with the
> non-ACL version of exiscan called from Exim, as well. Again, 0.60
> wasn't catching Mimail, but this version doe
> many thanks for the info. The new stable release will be
> available for a
> few hours.
;-) Only for a few hours? Please let me know when that will be... I don't
want to miss my chance! ;-)
--
"The United States is putting together a Constitution now for Iraq. Why
don't we just give them o
On Thu, 6 Nov 2003 16:22:17 -0800
"Michael St. Laurent" <[EMAIL PROTECTED]> wrote:
> > many thanks for the info. The new stable release will be
> > available for a
> > few hours.
>
> ;-) Only for a few hours? Please let me know when that will be... I
> don't want to miss my chance! ;-)
Heheh
Well after a bit of research it seems that the clamscan process is using
up all 1024 of the file descriptors allocated to it.
If I run clamscan for a while (at least half an hour) and then run
something like lsof -p $(pidof clamscan) I get hundreds of the following
entries:
clamscan 12016 root
* Tomasz Kojm <[EMAIL PROTECTED]> [20031107 01:07]: wrote:
> I wasn't able to reproduce Mimail zip errors but there are real chances
> the latest change in CVS will fix them. There's a snapshot available at:
>
> http://clamav.sf.net/snapshot/clamav-20031106-tk.tar
On Friday 07 November 2003 2:19 am, Steve King wrote:
> You probably know this, but clamav-devel-20031106 fails to compile with
> - --enable-milter. The error being reported has been around a while, but
> I'm reporting it because I thought yesterday's snapshot had a different
On Thursday 06 November 2003 9:33 pm, Mike Brodbelt wrote:
> I've posted about this before, but thought it worth mentioning again.
> I've upgraded my ClamAV installation from the 03112003 CVS snapshot, and
> it's lasted 3 days before going mad.
Please retry with the latest snapshot (clamav-milter
40 matches
Mail list logo
