Hello all,
I run RH9 with sendmail & mimedefang + clamd.
Lately i get this message in the /var/log/clamd.log
and the clamd dies:
Thu Sep 9 17:11:43 2004 ->
/var/spool/MIMEDefang/mdefang-i89EBdXr029126/Work/msg-18998-144.zip: RAR
module failure. ERROR
Thu Sep 9 17:11:43 2004 -> Client disconnected
Nope, that it does not. I will check out the amavisd docs and post
there.
Regards,
Sean Hafeez
"The strongest reason for the people to retain the right to keep and
bear arms is, as a last resort, to protect themselves against tyranny
in government." - Thomas Jefferson
On Sep 9, 2004, at 5:39
Sean Hafeez wrote:
> /var/amavisd/quarantine/virus-20040909-095702-17085-07
Amavis.
Matt
---
This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
Sean Hafeez wrote:
A banned name (.exe) was found.
BANNED CONTENTS ALERT
Our content checker found
banned name: .exe
...
The message has been blocked because it contains a component
(as a MIME part or nested within) with declared name
or MIME type or contents type violating our acce
Sean Hafeez wrote:
Hi, I have a client trying to send us Premavara files (scheduling
drawings) however it get bounced with this error. The thing is that
there is not an .exe file attached and if he zip's the file we get the
same error. I am using amavisd-new with ClamAV, SA and Postfix. I think
On Thu, Sep 09, 2004 at 11:37:56AM -0700, Jim said:
> After I upgraded clamav via apt-get I now get an error during restart of
> /etc/init.d/clamav-daemon.
>
> This is on a debian system and the error created is:
> /etc/init.d/clamav-daemon restart
> Restarting clamav daemon: clamdERROR: Parse err
Title: ENC: Clamav, amavisd-new and postfix not detecting zafi
I am using Clamav, amavisd-new, spamassassin and postfix (all latest version and updated)but It doesn´t detect zafi. When i scan the infected file using clamscan --mbox, the virus is detected, but using amavisd-new with clamd as t
On Thu, 9 Sep 2004, Tim de Vries wrote:
> I've got clamav running as a cron job daily to check for virus definition
> updates, but for about the last week or two there hasn't been any. Is this
> possibly due to a new version? Is there some other reason that this would be
> happening?
>
> My error
550 5.7.1 Message content rejected, id=17085-07 - BANNED: .exe
<[EMAIL PROTECTED]>:
550 5.7.1 Message content rejected, id=17085-07 - BANNED: .exe
The message has been quarantined as:
/var/amavisd/quarantine/virus-20040909-095702-17085-07
- BEGIN HEADERS --
Hi,
I've got clamav running as a cron job daily to check for virus definition
updates, but for about the last week or two there hasn't been any. Is this
possibly due to a new version? Is there some other reason that this would be
happening?
I know it isn't a router issue, all the ports are open
On Thu, 9 Sep 2004, Matias Lopez Bergero wrote:
> Damian Menscher wrote:
> > On Mon, 16 Aug 2004, Todd Lyons wrote:
> >
> >>>It shouldn't, however change if a virus is accepted - since sendmail
> >>>should be tempfailing mail until the milters are functioning.
> >>
> >>Incorrect, depending on how y
On Thu, 2004-09-09 at 13:37, Jim wrote:
> After I upgraded clamav via apt-get I now get an error during restart of
> /etc/init.d/clamav-daemon.
>
> This is on a debian system and the error created is:
> /etc/init.d/clamav-daemon restart
> Restarting clamav daemon: clamdERROR: Parse error at line 1
Jim wrote:
After I upgraded clamav via apt-get I now get an error during restart of
/etc/init.d/clamav-daemon.
This is on a debian system and the error created is:
/etc/init.d/clamav-daemon restart
Restarting clamav daemon: clamdERROR: Parse error at line 10: Unknown
option ThreadTimeout.
ERROR: Ca
Hi
> What version of clamd are you running? Version 0.75.1 catches this virus.
I am running:
> But today, I got a virus that was not detected with most recent clamd:
> ClamAV version 0.75-1
>and recent freshclam:
> main.cvd is up to date (version: 26, sigs: 22925, f-level: 2, builder:
tomek)
Steffen Heil wrote:
Hi
Submit it to the clamav team (link on www.clamav.net).
How? Submission by web interface does not work:
This virus is already recognized by clamscan / ClamAV version devel-20040809
as Worm.Mydoom.Gen-unp . Be careful when submitting samples and remember to
run freshclam!
So
Hi
> Submit it to the clamav team (link on www.clamav.net).
How? Submission by web interface does not work:
This virus is already recognized by clamscan / ClamAV version devel-20040809
as Worm.Mydoom.Gen-unp . Be careful when submitting samples and remember to
run freshclam!
So my original ques
Jim wrote:
After I upgraded clamav via apt-get I now get an error during restart of
/etc/init.d/clamav-daemon.
This is on a debian system and the error created is:
/etc/init.d/clamav-daemon restart
Restarting clamav daemon: clamdERROR: Parse error at line 10: Unknown
option ThreadTimeout.
ERROR: Ca
Jim wanted us to know:
>This is on a debian system and the error created is:
>/etc/init.d/clamav-daemon restart
>Restarting clamav daemon: clamdERROR: Parse error at line 10: Unknown
>option ThreadTimeout.
>ERROR: Can't open/parse the config file /etc/clamav/clamav.conf
Change it to ReadTimeout.
> I use RedHat9
> I've just installed clamav and I've started clamd.
> How can I chack if the daemon is really work?
> Is there any test virus to send to my email?
A good place to visit is www.testvirus.org, with that site you can send an
e-mail containing a (harmless) file that looks like a virus
Damian Menscher wrote:
On Mon, 16 Aug 2004, Todd Lyons wrote:
It shouldn't, however change if a virus is accepted - since sendmail
should be tempfailing mail until the milters are functioning.
Incorrect, depending on how you define your milter call for sendmail.
So by not specifying an F=T setting
Uname -a
FreeBSD Machine.dominio.com 5.2.1-RELEASE FreeBSD 5.2.1-RELEASE #0:
Mon Feb 23 20:45:55 GMT 2004
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC i386
-Mensagem original-
De: Timo Schöler [mailto:[EMAIL PROTECTED]
Enviada em: quinta-feira, 9 de setembro de 2004 13:47
Para:
Yes, I am on too many lists that I need to keep my mail on a different
account, you know like that nifty email notification utility that would come
in handy if it didn't go off every 5 minutes 24/7..
No, I don't usually keep stuff like that, almost all other lists I am on a
simple unsubscribe with
After I upgraded clamav via apt-get I now get an error during restart of
/etc/init.d/clamav-daemon.
This is on a debian system and the error created is:
/etc/init.d/clamav-daemon restart
Restarting clamav daemon: clamdERROR: Parse error at line 10: Unknown
option ThreadTimeout.
ERROR: Can't open/p
On Thu, 2004-09-09 at 09:18, Erick Dantas Rotole wrote:
> I am using freebsd, postfix, amavisd-new, spamassassin and clamav (all
> latest version)in a server pentium iv with 512 RAM.
>
> Top shows that I have only 41M free and I think that 221M inact is
> very high
> Mem: 119M Active, 221M Inact
On Thu, 2004-09-09 at 09:33, Maurizio Marini wrote:
> Hi there
> i've already posted this last week:
> this morning i received this very suspiciuous email:
>
> >Lovely animals
Yeah, that's Worm.Bagel.AK
--
Daniel J McDonald <[EMAIL PROTECTED]>
Austin Energy
-
Title: RES: [Clamav-users] Memory
Uname -a
FreeBSD Machine.dominio.com 5.2.1-RELEASE FreeBSD 5.2.1-RELEASE #0: Mon Feb 23 20:45:55 GMT 2004 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/GENERIC i386
-Mensagem original-
De: Timo Schöler [mailto:[EMAIL PROTECTED]]
Enviada em: quinta-fei
On Thu, 9 Sep 2004, Benji Lynn wrote:
I have sent 3 mails in 3 months to the admin trying to get my password
so I can unsubscribe, to no avail. I see on the website my password is
supposed to be mailed to me once a month, and I have not received any
notification in over 3 months. Does anyone hav
I am using freebsd, postfix, amavisd-new, spamassassin and clamav (all
latest version)in a server pentium iv with 512 RAM.
Top shows that I have only 41M free and I think that 221M inact is
very high
Mem: 119M Active, 221M Inact, 93M Wired, 19M Cache, 60M Buf, 41M Free
Is it normal?
hi,
can yo
[EMAIL PROTECTED] wrote:
I use RedHat9
I've just installed clamav and I've started clamd.
How can I chack if the daemon is really work?
Is there any test virus to send to my email?
See http://www.testvirus.org
--
Kelson Vibber
SpeedGate Communications
-
Submit it to the clamav team (link on www.clamav.net).
It is probably Mydoom.u (McAfee).
http://vil.nai.com/vil/content/v_128346.htm
Phil
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] O
I have too but only because i have created accounts and sent email's
to the list but they never show up. On posting finally got through,
but I've been trying to reply to the group but without success.
On Thu, 9 Sep 2004 10:17:05 -0500, Benji Lynn <[EMAIL PROTECTED]> wrote:
> I have sent 3 mails
* On 2004.09.09, in <[EMAIL PROTECTED]>,
* "Benji Lynn" <[EMAIL PROTECTED]> wrote:
> I have sent 3 mails in 3 months to the admin trying to get my password so I
> can unsubscribe, to no avail. I see on the website my password is supposed
> to be mailed to me once a month, and I have not recei
I have sent 3 mails in 3 months to the admin trying to get my password so I
can unsubscribe, to no avail. I see on the website my password is supposed
to be mailed to me once a month, and I have not received any notification in
over 3 months. Does anyone have any suggestions on how I can get this
r
Hi
> > Is there anything I can do to make clamav detect these?
> > - WITHOUT having to take the CVS version.
> Read www.clamav.net?... ;-)
> Tip: http://www.clamav.net/sendvirus.html
What do you why I know the CVS-verstion does detect it ?
> You can't be sure it's exactly the same virus.
Right
On Thu, 09 Sep 2004 at 15:35:11 +0200, Steffen Heil wrote:
> [...]
> The virus was detected using McAfee Antivirus Enterprise 7.0:
> Anlagendatei: syu.zip
> Virusname: W32/[EMAIL PROTECTED]
> Sekundäre unternommene Aktion: Verschoben...
>
> Is there anything I can do to make clamav detect th
Hi there
i've already posted this last week:
this morning i received this very suspiciuous email:
From: "Rse" <[EMAIL PROTECTED]>
To: "Modssl-users" <[EMAIL PROTECTED]>
Date: Today 10:17:53
>Lovely animals
Password: cid:xwofkjfrxa.bmp";>
with 2 attachments:
xwofkjfrxa.bmp
New_MP3_Player.zip
Title: Memory
I am using freebsd, postfix, amavisd-new, spamassassin and clamav (all latest version)in a server pentium iv with 512 RAM.
Top shows that I have only 41M free and I think that 221M inact is very high
Mem: 119M Active, 221M Inact, 93M Wired, 19M Cache, 60M Buf, 41M Free
Is it
Hi
On 2004-08-11, I got the following.
Submission: n/a
Sender: n/a
Virus: Worm.Mydoom.R
Alias: Worm/MyDoom.r (Hbedv), W32/MyDoom-R (Sophos), [EMAIL PROTECTED]
(Bitdefender), Win32.HLLM.MyDoom.27136 (Drweb)
Added: Worm.Mydoom.R
Note: It has been already detected as Worm.Mydoom.Gen-unp by devel ver
Hello,
What happens if clamd is restarted while clamdscan was running?
Clamdscan just completes its job and returns OK status?
Or?..
regards,
Yury.
---
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer to
> -Original Message-
> From: GiM [mailto:[EMAIL PROTECTED]
> Sent: Thursday, September 09, 2004 8:33 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [Clamav-users] Chacking clamd
>
> [EMAIL PROTECTED] in message '[Clamav-users] Chacking clamd' wrote:
> > I use RedHat9
> > I've just installed cl
[EMAIL PROTECTED] in message '[Clamav-users] Chacking clamd' wrote:
> I use RedHat9
> I've just installed clamav and I've started clamd.
> How can I chack if the daemon is really work?
> Is there any test virus to send to my email?
>
RTFM
main(int a[puts("Michal 'GiM' Spadlinski")]){}
--
"Trze
On Thu, 2004-09-09 at 03:59, Nicolas Aulas wrote:
> Le 8/09/04 21:37, « [EMAIL PROTECTED] »
> <[EMAIL PROTECTED]> a écrit :
> > What version of amavis-new?
>
> I'm running amavisd-new 20030616-9.p10 not patched
You might try P10 - Mark was fiddling around with the zip routines at
that time. I t
I use RedHat9
I've just installed clamav and I've started clamd.
How can I chack if the daemon is really work?
Is there any test virus to send to my email?
Thank you!
---
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterpr
On Wed, 2004-09-08 at 15:52, Doug Hardie wrote:
> Those certainly could be it, but it is unusual compared with the other
> viruses we see daily. I wonder if there is more to this one than has
> been foun yet.
I've noticed that Zafi.B is most often spread through backscatter. So,
perhaps you ar
On Thu, 09 Sep 2004 at 15:25:08 +0700, Fajar A. Nugraha wrote:
>
> Few days ago, I got several mail with picture attachment (Life.jpg,
> p0rn, same picture in all mail), and another file (The_movie_3zip.z,
> which was unfortunately removed by another antivirus that my company
> runs beacuse it was
Le 8/09/04 21:37, [EMAIL PROTECTED]
<[EMAIL PROTECTED]> a écrit :
> On Wed, 2004-09-08 at 11:15, Nicolas Aulas wrote:
>> I'm running clamav 0.75.1 (up to date) with amavisd-new and virii in
>> archived file are not detected as mydoom.o (instruction.zip) or sobig.e
>> (document.zip). Strange is'nt
Hi,
Few days ago, I got several mail with picture attachment (Life.jpg,
p0rn, same picture in all mail), and another file (The_movie_3zip.z,
which was unfortunately removed by another antivirus that my company
runs beacuse it was "of type DOS EXE"). Seems like Bagle or
Netsky-type virus.
I don't
In my attempt to correct the mandir in the configure script I
accidentally inserted a foreign character that caused this problem.
found by comparing changes between my modified and the unmodified
configure script.
---
This SF.Net email is spo
48 matches
Mail list logo
