Re: [clamav-users] undetected virus

2012-01-25 Thread polloxx
On Tue, Jan 24, 2012 at 9:13 PM, Joel Esler jes...@sourcefire.com wrote: This has been handled. I noticed this. Thanks. P. ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

[clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread [Cardiff] Tugdual de LASSAT
Hello the list.. I have a problem, i wish to submit to your review... We run 4 years discontinuating, an Exim+Clamav mail server solution that ran smoothly to our needs, until recent internal false positive has been signaled... One of our members is trying to send internally an email containing

[clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread [Cardiff] Tugdual de LASSAT
Hello the list.. I have a problem, i wish to submit to your review... We run 4 years discontinuating, an Exim+Clamav mail server solution that ran smoothly to our needs, until recent internal false positive has been signaled... One of our members is trying to send internally an email containing

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread Tomasz Kojm
On Wed, 25 Jan 2012 16:02:56 +0100 [Cardiff] Tugdual de LASSAT tugdual.delas...@cardiff.fr wrote: I do understant that it is the function OLE2ContainsMacros function I activated that is in cause, but aren't signatures used between daemon and clamscan the same ? This option will make ClamAV

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread Török Edwin
On 01/25/2012 05:02 PM, [Cardiff] Tugdual de LASSAT wrote: Hello the list.. I have a problem, i wish to submit to your review... We run 4 years discontinuating, an Exim+Clamav mail server solution that ran smoothly to our needs, until recent internal false positive has been signaled...

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread [Cardiff] Tugdual de LASSAT
Thanks for your prompt return ... Problem is: 1- That specific powerpoint doesn't use macros (it's a plain slide with no macros in it) 2- An excel file using macros passed detection without problems. (visibly allowing me to suspect a signature problem) 3- clamscan declares it free ... Am I mad

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread Tomasz Kojm
On Wed, 25 Jan 2012 16:16:56 +0100 [Cardiff] Tugdual de LASSAT tugdual.delas...@cardiff.fr wrote: Thanks for your prompt return ... Problem is: 1- That specific powerpoint doesn't use macros (it's a plain slide with no macros in it) 2- An excel file using macros passed detection without

[clamav-users] Some questions about setting up ClamAV

2012-01-25 Thread Andy Newby
Hi, We're using ClamAV on a Unix Centos Server, with WHM and Cpanel, we would like to do this: 1) Set up a cron job to scan a single domain (via Cpanel), and a cron job for the entire server (via WHM), how? 2) We would like to set up a cron job to update ClamAV with the latest virus DB on a

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread [Cardiff] Tugdual de LASSAT
Hello Tomasz. FYI, did so, and have created ID N°4269, bugzilla report.. Not knowing I enabled severity to blocker (first in list), but please change if estimating it is erroneous.. Thanks again for your support Tugdual de Lassat -Message d'origine- De :

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread Bowie Bailey
On 1/25/2012 9:48 AM, [Cardiff] Tugdual de LASSAT wrote: Hello the list.. I have a problem, i wish to submit to your review... We run 4 years discontinuating, an Exim+Clamav mail server solution that ran smoothly to our needs, until recent internal false positive has been signaled... One

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread [Cardiff] Tugdual de LASSAT
That one is good: I do get : clamdscan selsia.ppt /root/selsia.ppt: Heuristics.OLE2.ContainsMacros FOUND --- SCAN SUMMARY --- Infected files: 1 Time: 0.001 sec (0 m 0 s) So I must admit there is a problem in clamscan result that differs... Nevertheless I do not have any

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread Bowie Bailey
On 1/25/2012 11:02 AM, [Cardiff] Tugdual de LASSAT wrote: That one is good: I do get : clamdscan selsia.ppt /root/selsia.ppt: Heuristics.OLE2.ContainsMacros FOUND --- SCAN SUMMARY --- Infected files: 1 Time: 0.001 sec (0 m 0 s) So I must admit there is a problem in

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread Tomasz Kojm
On Wed, 25 Jan 2012 16:45:09 +0100 [Cardiff] Tugdual de LASSAT tugdual.delas...@cardiff.fr wrote: Hello Tomasz. FYI, did so, and have created ID N°4269, bugzilla report.. Not knowing I enabled severity to blocker (first in list), but please change if estimating it is erroneous.. The problem

Re: [clamav-users] Some questions about setting up ClamAV

2012-01-25 Thread Simon Hobson
Andy Newby wrote: We're using ClamAV on a Unix Centos Server, with WHM and Cpanel, we would like to do this: 1) Set up a cron job to scan a single domain (via Cpanel), and a cron job for the entire server (via WHM), how? Create cron jobs to call clamscan with the options you want ? 2) We

Re: [clamav-users] Some questions about setting up ClamAV

2012-01-25 Thread Jim Preston
On 01/25/2012 11:35 AM, Simon Hobson wrote: [snip] 3) our web site allows users to upload images via a standard form. We would like to set up ClamAV to be able to scan their file before it gets uploaded to the server, how can we do this? You can't - it's not there to scan before it's