RE: [Clamav-users] Undetected Virus

2006-01-18 Thread Randal, Phil
I have the latest version of ClamAV and the signature files installed, however it fails to detect the Win32.Blackmail.F virus. My mail is delivered to a FreeBSD server that I run. One of the machines on the network is a WinXP machine running ZoneAlarm Suite. When this Windows machine

Re: [Clamav-users] Problem starting freshclam

2006-01-18 Thread Rita Horve Agbali
Thanks Rob, it worked. - Original Message - From: Rob MacGregor [EMAIL PROTECTED] To: ClamAV users ML clamav-users@lists.clamav.net Sent: Tuesday, January 17, 2006 5:25 PM Subject: Re: [Clamav-users] Problem starting freshclam On 17/01/06, Rita Horve Agbali [EMAIL PROTECTED] wrote:

[Clamav-users] virus not detected

2006-01-18 Thread Payal Rathod
Hi, Me and many friends here are troubled by a new virus which has attachments like Video_part.mim, Attachment.hqx etc. We are getting this since last 36 hours and a friend submitted a few samples to clamav interface 7 hours back. Symantech detects it since today morning, but clamav is still

Re: [Clamav-users] virus not detected

2006-01-18 Thread Cevher
Payal Rathod wrote: Hi, Me and many friends here are troubled by a new virus which has attachments like Video_part.mim, Attachment.hqx etc. We are getting this since last 36 hours and a friend submitted a few samples to clamav interface 7 hours back. Symantech detects it since today morning,

Re: [Clamav-users] virus not detected

2006-01-18 Thread Christopher X. Candreva
On Wed, 18 Jan 2006, Payal Rathod wrote: Me and many friends here are troubled by a new virus which has attachments like Video_part.mim, Attachment.hqx etc. We are getting this since last 36 hours and a friend submitted a few samples to clamav Make sure your virus sigs are up to date. If

Re: [Clamav-users] virus not detected

2006-01-18 Thread Payal Rathod
On Wed, Jan 18, 2006 at 07:04:27PM +0200, Cevher wrote: You can create a temporary signature... Please tell me how. I read signatures.pdf but ... $ sigtools --md5 virus_file temp.hdb What do I do after that? I use clamd, so do I need to restart it? With warm regards, -Payal

Re: [Clamav-users] virus not detected

2006-01-18 Thread Chris Conn
update your defs, version 1245 gets it. Payal Rathod wrote: On Wed, Jan 18, 2006 at 07:04:27PM +0200, Cevher wrote: You can create a temporary signature... Please tell me how. I read signatures.pdf but ... $ sigtools --md5 virus_file temp.hdb What do I do after that? I use clamd, so do I

Re: [Clamav-users] virus not detected

2006-01-18 Thread Payal Rathod
On Wed, Jan 18, 2006 at 12:11:19PM -0500, Chris Conn wrote: update your defs, version 1245 gets it. I updated and it was found. But that is weird, I always update every 1 hour and just a few mins back I manually tried to update, but the virus was not detected and now it is. I am interested in

Re: [Clamav-users] virus not detected

2006-01-18 Thread Niek
On 1/18/2006 6:18 PM +0200, Payal Rathod wrote: On Wed, Jan 18, 2006 at 12:11:19PM -0500, Chris Conn wrote: update your defs, version 1245 gets it. I updated and it was found. But that is weird, I always update every 1 hour and just a few mins back I manually tried to update, but the virus

Re: [Clamav-users] virus not detected

2006-01-18 Thread Cevher
Payal Rathod wrote: On Wed, Jan 18, 2006 at 07:04:27PM +0200, Cevher wrote: You can create a temporary signature... Please tell me how. I read signatures.pdf but ... $ sigtools --md5 virus_file temp.hdb What do I do after that? I use clamd, so do I need to restart it? With warm

Re: [Clamav-users] Undetected Virus

2006-01-18 Thread Gerard Seibert
Randal, Phil [EMAIL PROTECTED] I submitted a sample yesterday afternoon (GMT) to http://cgi.clamav.net/sendvirus.cgi , http://virusscan.jotti.org/ , and http://www.virustotal.com/ Cheers, Phil Thanks! I have a question though. I created a directory /var/mail/quarantine in which

Re: [Clamav-users] virus not detected

2006-01-18 Thread Payal Rathod
On Wed, Jan 18, 2006 at 06:22:38PM +0100, Niek wrote: The update was released a few minutes after you started this thread :) But on my friends amchine she still get, # freshclam ClamAV update process started at Wed Jan 18 22:59:58 2006 SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES See the

Re: [Clamav-users] virus not detected

2006-01-18 Thread Christopher X. Candreva
On Wed, 18 Jan 2006, Payal Rathod wrote: daily.cvd is up to date (version: 1244, sigs: 840, f-level: 6, builder: sven) FYI, I have three instances of WORM.VB-8 in my logs from yesterday, so even 1244 detects a non-zero number of these. Evidently just not the one you have

RE: [Clamav-users] virus not detected

2006-01-18 Thread Kenneth Byrne
-Original Message- From: Payal Rathod [mailto:[EMAIL PROTECTED] Sent: 18 January 2006 17:34 To: ClamAV users ML Subject: Re: [Clamav-users] virus not detected On Wed, Jan 18, 2006 at 06:22:38PM +0100, Niek wrote: The update was released a few minutes after you started this

Re: [Clamav-users] virus not detected

2006-01-18 Thread Niek
On 1/18/2006 6:34 PM +0100, Payal Rathod wrote: On Wed, Jan 18, 2006 at 06:22:38PM +0100, Niek wrote: The update was released a few minutes after you started this thread :) But on my friends amchine she still get, # freshclam ClamAV update process started at Wed Jan 18 22:59:58 2006 SECURITY

Re: [Clamav-users] virus not detected

2006-01-18 Thread Brian Morrison
On Wed, 18 Jan 2006 12:34:08 -0500 in [EMAIL PROTECTED] Payal Rathod [EMAIL PROTECTED] wrote: The update was released a few minutes after you started this thread :) But on my friends amchine she still get, # freshclam ClamAV update process started at Wed Jan 18 22:59:58 2006 SECURITY

Re: [Clamav-users] virus not detected

2006-01-18 Thread Stephen Gran
On Wed, Jan 18, 2006 at 12:34:08PM -0500, Payal Rathod said: On Wed, Jan 18, 2006 at 06:22:38PM +0100, Niek wrote: The update was released a few minutes after you started this thread :) But on my friends amchine she still get, # freshclam ClamAV update process started at Wed Jan 18

[Clamav-users] [EMAIL PROTECTED] undetected

2006-01-18 Thread James Miller
Hi all, [EMAIL PROTECTED] is not be picked up by clamav. I'm running 0.88 and have the latest sigs (main version 35 and daily 1245). I know I should figure out how to write a sig for this but is an update expected soon? Thanks, Jim ___

Re: [Clamav-users] [EMAIL PROTECTED] undetected

2006-01-18 Thread Damian Menscher
On Wed, 18 Jan 2006, James Miller wrote: [EMAIL PROTECTED] is not be picked up by clamav. I'm running 0.88 and have the latest sigs (main version 35 and daily 1245). I know I should figure out how to write a sig for this but is an update expected soon? Have you submitted a sample? If not,