Re: [Clamav-users] Possible false positives?

2006-12-20 Thread David Woolley
Hi David, Thank you Arnaud. Diego - .zip on its way to you. -- Best regards, David Tel: +44 (0)207 637 2288 Audley House 9 Margaret Street London W1W 8RH to find out more about audio at Edit Video, visit www.thornquest.com ___ Help us build a com

[Clamav-users] Possible false positives?

2006-12-20 Thread David Woolley
Hello clamav-users, I wonder could someone advise whether I should be taking some action over these scan results. These are the last 4 daily scans on a CentOS4 based server dated 16-19 Dec 06. I haven't intervened in the server between scans, but note that the second scan doesn't have the virus id

Re[2]: [Clamav-users] clamav scan crashes server

2006-09-06 Thread David Woolley
Hi Dennis, Have I done something to offend you? I have posted to this list to ask for help with an issue that the developers of the Linux distro I use have marked as WONTFIX because they identify it to be a bug in ClamAV. You are not obliged to answer, yet you have done so twice with rather cryp

Re[2]: [Clamav-users] clamav scan crashes server

2006-09-05 Thread David Woolley
Hi Dennis, Tuesday, September 5, 2006, 3:26:10 PM, you wrote: DP> Why don't you test this on only large files to see if it's even true? OK. Good thought. How is this achieved? I'm interested to know if there is a command in clamscan to filter on filesize. Is there a MaxFileSize or MinFileSiz

Re[2]: [Clamav-users] clamav scan crashes server

2006-09-05 Thread David Woolley
Hi Odhiambo, Tuesday, September 5, 2006, 2:17:52 PM, you wrote: OW> There must be a script running via a cron entry. On a standard Unix OW> system, there would be an entry in /etc/crontab. It would be a good OW> starting point, to see what runs at what schedule. OW> I am not sure what SME server

Re[2]: [Clamav-users] clamav scan crashes server

2006-09-05 Thread David Woolley
Hi Odhiambo, Tuesday, September 5, 2006, 1:49:17 PM, you wrote: OW> Whatever sends the files to clamav for scanning, tell it not to send OW> files larger than X (K, MB). Thanks for that. Sorry to be a newb, but could you hazard a guess (perhaps giving a typical linux example) how I can discover

Re[6]: [Clamav-users] clamav scan crashes server

2006-09-05 Thread David Woolley
Hi Casper, Tuesday, September 5, 2006, 1:09:17 PM, you wrote: CG> -- there's an option for ArchiveMaxFileSize, but I think that's for, er, CG> archives. It probably isn't listed because the MaxFileSize value isn't CG> changed from the default, which is infinite. Perhaps someone here can confirm t

Re[4]: [Clamav-users] clamav scan crashes server

2006-09-05 Thread David Woolley
Hi Casper, Tuesday, September 5, 2006, 11:15:15 AM, you wrote: CG>I've seen reference to a 'max file size' CG> parameter for clamav, althoough SME Server adds a layer of CG> complication by having its own configuration setup. We both need to sort this out on SME7.0 Maybe the SME templates aren'

Re[2]: [Clamav-users] clamav scan crashes server

2006-09-05 Thread David Woolley
Hi Casper, Tuesday, September 5, 2006, 11:02:51 AM, you wrote: CG> Shall exclude large files and see how it goes. What command do you use to do that? -- Best regards, David Tel: +44 (0)207 637 2288 Audley House 9 Margaret Street London W1W 8RH to find out more about audio at Edit Video,

Re: [Clamav-users] clamav scan crashes server

2006-09-05 Thread David Woolley
Hi Casper, Monday, September 4, 2006, 12:33:11 PM, you wrote: CG>Any pointers for trouble-shooting this issue would be great. CG> I'm using ClamAV 0.88.4/1795/Sun Sep 3 23:48:24 2006 I've seen this behaviour too. There's a suggestion on contribs.org that clamAV chokes when it tries to scan

[Clamav-users] LibClamAV Warning Can I switch them off?

2006-09-04 Thread David Woolley
Hello clamav-users, On my contribs.org SME version 7.0 I get the following log entries every day. I didn't find an answer in http://www.clamav.net/doc/0.88.4/clamdoc.pdf, so can someone here advise how I can configure the report to exclude these types of warnings. Because without clam telling me

Re: [clamav-users] is this list alive? ;-)

2003-04-29 Thread David Woolley
Hi ricardo, -- Best regards, David Tuesday, April 29, 2003, 2:26:28 PM, you wrote: rac> Hi, rac> Haven't seen any postings since I signed up, other than my one posting, rac> and no responses... Is anyone out there? rac> Ricardo

Re: [clamav-users] New worm? (W32.Sobig.A@mm)

2003-01-13 Thread David Woolley
Hi David, Sunday, January 12, 2003, 8:43:06 AM, you wrote: DV> I am getting a lot of these coming through our system. Looks DV> like it was just found on Jan. 10th. DV> http://securityresponse.symantec.com/avcenter/venc/data/[EMAIL PROTECTED] DV> Attached is a sample of the worm. I did not see