Re: [Clamav-users] Upgrade of Clamav breaks debian/exim/clamav

2004-05-21 Thread Fajar A. Nugraha
Brock Nanson wrote: I poked around the archives but didn't find anything that looked like my problem... I'm running exim4 on a debian box. Installed spamassassin and clamav a couple of months ago, using the Tim Jackson howto. Worked pretty much as advertised. Freshclam started telling me I n

[Clamav-users] Best Method For Scanning Mail

2004-05-21 Thread Sean Matheson
Hey All; First off a big thanks to the developers for bring out the latest version of clamav.  It has resolved the issue with freshclam and RH7.  It couldn't have come at a better time for me! I am about to impliment clamav with qmail-scanner in order to scan all incoming and outgoing mails. 

Re: [Clamav-users] Best Method For Scanning Mail

2004-05-21 Thread Per-Olov Sjöholm
Sean Matheson said: > Hey All; > > First off a big thanks to the developers for bring out the latest > version of clamav. It has resolved the issue with freshclam and RH7. > It couldn't have come at a better time for me! > > I am about to impliment clamav with qmail-scanner in order to scan all >

[Clamav-users] Exploit-ObjectData trojan

2004-05-21 Thread Jona Tallieu
Hi all, It seems Clam does not detect following trojan, which our McAfee engine did detect: Exploit-ObjectData trojan http://vil.nai.com/vil/content/v_100715.htm Is this normal? Thnx. J. --- This SF.Net email is sponsored by: Oracle 10g G

[Clamav-users] Re: OpenBSD port for clamav 0.71 released today

2004-05-21 Thread Jerome Loyet
Hello to all of you, I am so sorry, but an error has been discovered this night into the port I gave you several hours ago. In fact some instruction in the INSTALL script were "commented" and the user/group and directory were not created. It has been fix now, view the attachement or check via th

[Clamav-users] Clamd cannot access file ?

2004-05-21 Thread Steffen Heil
Hi My clamd cannot scan: server01:/isp/space/1/mail/[EMAIL PROTECTED]/new# freshclam ClamAV update process started at Fri May 21 12:16:02 2004 Reading CVD header (main.cvd): OK main.cvd is up to date (version: 23, sigs: 21096, f-level: 2, builder: ddm) Reading CVD header (daily.cvd): OK daily

Re: [Clamav-users] Best Method For Scanning Mail

2004-05-21 Thread Dale Gallagher
Sean Matheson <[EMAIL PROTECTED]> > Is there perhaps a more effiecient way to san my > incoming and outgoing qmail mail using clamd for > instance? The following is fast - scans and rejects infected mail before it reaches the real queue... clamav-0.71 run clamd as user clamav ripmim

RE: [Clamav-users] Question regarding virus detection

2004-05-21 Thread Jim Maul
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Antony > Stone > Sent: Thursday, May 20, 2004 5:31 PM > To: [EMAIL PROTECTED] > Subject: Re: [Clamav-users] Question regarding virus detection > > > On Thursday 20 May 2004 9:13 pm, Jim Maul wrote: > > >

[Clamav-users] clamav-milter 0.71 hangs randomly

2004-05-21 Thread Alex V. Kovirshin
Hello. I installed clamav 0.71 yerstaday on a production mail relay. Before i used clamav 0.70, clamav-milter 0.70 worked just fine with same configuration. But 0.71 hangs to times already. (it's working about 2 days). I use this workaround now in crontab: * * * * * test `ps axm | grep /u

[Clamav-users] Anomy calling ClamAV

2004-05-21 Thread Kyle Victor
Title: Anomy calling ClamAV RH8+Postfix+Anomy+SpamAssassin ( I am trying to add ClamAV) I can not seem to figure out how to get Anomy to call ClamAV Does anyone know where I can find a how to, or if someone has been able to get this to work can/will you help I have added this to the conf

Re: [Clamav-users] Exploit-ObjectData trojan

2004-05-21 Thread Kevin W. Gagel
Not only does ClamAV seem to miss it but so does uvscan. I have ClamAV and uvscan both scan email here. My Virscan Enterprise 7.1 catches these all the time. I just haven't had time to investigate fully. - Original Message Follows - From: "Jona Tallieu" <[EMAIL PROTECTED]> To: [EMAIL PROT

Re: [Clamav-users] Exploit-ObjectData trojan

2004-05-21 Thread Trog
On Fri, 2004-05-21 at 16:15, Kevin W. Gagel wrote: > Not only does ClamAV seem to miss it but so does uvscan. I have ClamAV and > uvscan both scan email here. My Virscan Enterprise 7.1 catches these all the > time. I just haven't had time to investigate fully. > - Original Message Follows

Re: [Clamav-users] Upgrade of Clamav breaks debian/exim/clamav

2004-05-21 Thread Stephen Gran
On Thu, May 20, 2004 at 11:36:23PM -0700, Brock Nanson said: > I poked around the archives but didn't find anything that looked like my > problem... > > I'm running exim4 on a debian box. Installed spamassassin and clamav a > couple of months ago, using the Tim Jackson howto. Worked pretty muc

Re: [Clamav-users] Clamd cannot access file ?

2004-05-21 Thread Stephen Gran
On Fri, May 21, 2004 at 12:14:10PM +0200, Steffen Heil said: > Hi > > My clamd cannot scan: > server01:/isp/space/1/mail/[EMAIL PROTECTED]/new# clamdscan > 1085129320.H780251P13461.mx.sh-solutions.de > /isp/space/1/mail/[EMAIL PROTECTED]/new/1085129320.H780251P13461.m > x.sh-solutions.de:

Re: [Clamav-users] Exploit-ObjectData trojan

2004-05-21 Thread Noel Jones
At 04:15 AM 5/21/04, Jona Tallieu wrote: Hi all, It seems Clam does not detect following trojan, which our McAfee engine did detect: Exploit-ObjectData trojan http://vil.nai.com/vil/content/v_100715.htm Is this normal? If you have a file that is detected as a virus by another scanner but not by cl

[Clamav-users] Re: clamav-milter, kill pid not working

2004-05-21 Thread Matias Lopez Bergero
Alex V. Kovirshin wrote: On Thu, May 20, 2004 at 06:57:46PM +0400, Alex V. Kovirshin wrote: I installed clamav 0.71. Then i try to stop it: kill `head -1 /var/run/clamav/clamav-milter.pid ` Nothing happend. [...] Hello, I have the same problem. I can't stop clamav-milter, I have post this

Re: [Clamav-users] Re: clamav-milter, kill pid not working

2004-05-21 Thread Alex V. Kovirshin
On Fri, May 21, 2004 at 01:03:06PM -0300, Matias Lopez Bergero wrote: > Alex V. Kovirshin wrote: > >On Thu, May 20, 2004 at 06:57:46PM +0400, Alex V. Kovirshin wrote: > >>I installed clamav 0.71. > >>Then i try to stop it: > >>kill `head -1 /var/run/clamav/clamav-milter.pid ` > >>Nothing happen

RE: [Clamav-users] Exploit-ObjectData trojan

2004-05-21 Thread Ron Snyder
Here are two different captures of what the thing looks like (including the '=' at the end of the line). These are appended to "normal" spammy looking emails. (I've replaced 'object data' with 'x' so that it doesn't hit virus filters.) which decode to (respectively) http://&#= 119;ww.f

Re[2]: [Clamav-users] clamd dying: reasons

2004-05-21 Thread shantanu-virus
Monday, May 17, 2004, 2:01:49 PM, Tomasz Kojm wrote: >> remove the clamd file and restart clamd. And the worst part is that >> my messages starts bouncing if clamd dies stating that it cannot >> connect to clamd. > Which version of clamd ? Had to revive the thread again. But I still haven't go

Re: [Clamav-users] Upgrade of Clamav breaks debian/exim/clamav

2004-05-21 Thread Brock Nanson
Fajar A. Nugraha wrote: Brock Nanson wrote: I poked around the archives but didn't find anything that looked like my problem... I'm running exim4 on a debian box. Installed spamassassin and clamav a couple of months ago, using the Tim Jackson howto. Worked pretty much as advertised. Freshcl

Re: [Clamav-users] clamd dying: reasons

2004-05-21 Thread Fajar A. Nugraha
[EMAIL PROTECTED] wrote: Had to revive the thread again. But I still haven't got a clue in which cases might clamd die without cleaning the socket file. Try a recent version (0.71 or even a CVS snapshot), and run clamdwatch on your crontab (included under contrib directory on source tarball). Wi

Re: [Clamav-users] Re: clamav-milter, kill pid not working

2004-05-21 Thread christian laubscher
> in linux: killall -qw /path/to/clamav-milter here (slack 9.1,, 2.4.24, sendmail 8.12.10) clamav-milter never honours a TERM signal (which is sent by killall by default). it always has to be SIGKILL'ed. i get bad feelings when testing... ;-) -- -

[Clamav-users] Worm.SomeFool.Q

2004-05-21 Thread Richard Humphrey
I have been running ClamAv (keeping up with latest stable releases) for several months now and it has been working great (i thought). Recent we noticed that we have been missing some expected emails generated by our online order form (all Linux based). After looking through the logs, it appears C

RE: [Clamav-users] Worm.SomeFool.Q

2004-05-21 Thread Michael St. Laurent
Richard Humphrey wrote: > I have been running ClamAv (keeping up with latest stable releases) > for several months now and it has been working great (i thought). > > Recent we noticed that we have been missing some expected emails > generated by our online order form (al