On Tue, 23 Nov 2004 22:14:22 -0600, "Jon Dossey"
<[EMAIL PROTECTED]> wrote:
>
>I'd check the path to your clamav database in either clamav.conf or clamd.conf
>depending on your version of clamav.
>
>.Jon
>
>
>
The clamav directory is properly named in /etc/clamd.conf:
# Path to the database di
Let me try to help, I'll translate to spanish Tomasz's answer.
Tomasz Kojm wrote:
On Tue, 22 Feb 2005 19:16:33 -0600
Instituto de Ingenieria Unix <[EMAIL PROTECTED]> wrote:
Hello:
Thanks for the URL, I tested to the server who has clamav and step
all the tests. But I even have a problem, when se
Hi,
Wiadomość Oryginalna
Od: Stephen Gran <[EMAIL PROTECTED]>
Do: [EMAIL PROTECTED]
Data: Sun, 19 Sep 2004 17:03:06 -0400
Temat: Re: [Clamav-users] Re: [Clamav-users] Windows port ?
>On Sun, Sep 19, 2004 at 10:14:47PM +0200, href="/?cmd=napisz&[EMAIL PROTECTED]"
Hi,
Wiadomość Oryginalna
Od: Niek <[EMAIL PROTECTED]>
Do: [EMAIL PROTECTED]
Data: Sun, 19 Sep 2004 23:01:18 +0200
Temat: Re: [Clamav-users] Re: [Clamav-users] Windows port ?
Snip(...)
>Clamav is for backdoors as well.
>But it is especially designed for opensource s
Hi,
Wiadomość Oryginalna
Od: Tomasz Kojm <[EMAIL PROTECTED]>
Do: [EMAIL PROTECTED]
Data: Sun, 19 Sep 2004 22:53:41 +0200
Temat: Re: [Clamav-users] Re: [Clamav-users] Windows port ?
>On Sun, 19 Sep 2004 22:14:47 +0200
>[EMAIL PROTECTED] wrote:
>
>> Looks like You
On Mon, 20 Sep 2004 01:00:42 +0200
[EMAIL PROTECTED] wrote:
> By the way - do You interested also in old ms-dos viruses not
No, we are not. We currently only focus on W32 malware (and it's still
a LOT to do).
--
oo. Tomasz Kojm <[EMAIL PROTECTED]>
(\/)\. htt
Ron Snyder writes:
I'm not up on all of the exploits for the browsers, but I'm suspicious of
this because it looks to me like it's trying to hide at the top left of the
screen.
Ideas?
My $10 says it is Malware/Spyware/Adware. How's your bandwidth lately?
Should I seek counseling for being to
> I'm not up on all of the exploits for the browsers, but I'm suspicious of
> this because it looks to me like it's trying to hide at the top left of
the
> screen. I've downloaded the .cab file and clamav doesn't see anything
wrong
> with it. Google doesn't find any answers about the clsid string
> I'm not up on all of the exploits for the browsers, but I'm suspicious of
> this because it looks to me like it's trying to hide at the top left of
the
> screen. I've downloaded the .cab file and clamav doesn't see anything
wrong
> with it. Google doesn't find any answers about the clsid string
J. Frost wrote:
Hy Henry,
...
infections, many of which are not detected by our Symantec
NAV Corporate edition (with up to the minute definitions).
i keep submitting files to Symantec, and they keep sending
me back responses that, yes, my file is infected, and with
the latest definitions i'll catch
Thanks for all those who sent sample files to [EMAIL PROTECTED] after
receiving this warning:
"LibClamAV Warning: Unsupported multipart format `knowbot' - report to
[EMAIL PROTECTED]"
This has been address in the development release and will be in 0.81.
We don't need any further samples. You can
Brian Morrison wrote:
> What command did you give it? It would make sense for whatever you do to
> include an & in the script file you call to put the process you launch
> in the background.
The command is:
/usr/bin/make -C /var/lib/clamav/ | mail [EMAIL PROTECTED]
Sticking an amphersand on the
Hello,
I also experienced this Lirva problem today (2003-01-08).
The database for ClamAV-0.54 was up to date, but it didn't catch the Lirva
virus (the Windows box receiving the mail running Norton did detect the
virus).
When I checked the database at
http://clamav.elektrapro.com/database/
it says
Hi Ed
Thank you for that - I have read all the docs and clamscan / clamd /
freshclam is working A-OK!
My problem stems from the fact that I use eXtremail - and it supports
Sophos - but that support is in beta. Sophos also needs a stack of extra
parameters passed with the instruction ie. [EMAIL PR
See the attached file for details
On Fri, 2004-01-09 at 08:58, Odhiambo Washington wrote:
> * [EMAIL PROTECTED] <[EMAIL PROTECTED]> [20040108 18:12]: wrote:
> > http://mikecathey.com/code/clamdwatch/
>
> How do I run the script?
>
Here's an install guide:
http://mikecathey.com/code/clamdwatch/INSTALL
I just started using this i
Antony Stone wrote:
On Tuesday 10 February 2004 11:23 am, Carles Xavier Munyoz Baldó wrote:
Hi,
I have received a notification that a new variation of Worm.SCO.A called
Doomjuice.A is about to appear.
Any news about it ?
Is the Doomjuice.A virus signature in the ClamAV last Virus DataBase update?
Tommy McNeely wrote:
Just curious... I have all these Outlook users who claim they need "TNEF"
files to not be blocked anymore, does clamav directly un-encode them for
scanning, or do I need to get a perl module or external executable?
Ask your Outlook users what they think the TNEF attachments do,
Just curious... I have all these Outlook users who claim they need
"TNEF"
files to not be blocked anymore, does clamav directly un-encode them
for
scanning, or do I need to get a perl module or external executable?
Ask your Outlook users what they think the TNEF attachments do,
because AFAIK, th
>At 12:41 PM 3/11/2004, John Jolet wrote:
>>why not just run logrotate and have done with it?
>
>It would help if clamd took a "kill -HUP" and started a new logfile.
>
>Betsy Schwartz
Depending on traffic, and logging options selected, this can grow fairly
quickly. If log entries are lost, debuggi
B. van Ouwerkerk wrote:
I have been using ClamWin more and more lately, really like it, fee
scanner,
etc... now running on my kids systems even! I thought you had
mentioned
that there were docs on SF about how to use the Windows Scheduler to
schedule scans? For the life of me I cannot find t
Dwayne Hottinger wrote:
> Does clamscan automatically delete virus infected files if I run clamscan from
> the server prompt? For example, If I run clamscan /home/* to scan all home
> files will it delete the viruses found or just list them?
$ clamscan -h
Clam AntiVirus
Pavel R. Levashov wrote:
> I have a mail server (sendmail on RedHat 7.3) with clamav antivirus
> (clamd version 0.85.1, clamav-milter version 0.85). Clamd updates its
> antivirus bases regularly, clamav-milter catches all viruses except one:
> Worm.Mytob. This virus is transparent for clamav-milte
Hello, Nigel!
You wrote on 20 Sep 2005 11:57:02 +0100:
NH> There is already a hard-coded limit of 5. It is hard-coded for
NH> the same reason that the file size is limited (no access to
NH> configuration data at that level).
ToDo
Mark the subj [warning: a big files in URLs] such messages wi
Hello, Nigel!
You wrote on 20 Sep 2005 12:28:12 +0100:
>> Mark the subj [warning: a big files in URLs] such messages with
>> unscanabele
>> URLs (overlimited by max urls|maxsize )... ;-)
NH> clamav-milter already adds a header when StreamMaxLength is
NH> added.
NH> Since the FOLLOWURLS i
Kóczán Péter wrote:
> Hi all,
Howdy!
> I'm new to the list, just started to switch to clamav. I have the problem
> that if for example Mydoom virus is packed with rar it is not recognized.
> (clamdscan)
>
> I wonder if there's an easy solution (may come only in private) to be able
> to have rar
Hello again.
On Wed, 25 Jan 2006, G.W. Haywood wrote:
> Why are there two almost completely different FAQs?
>
> http://www.clamav.net/doc/0.88/html/node46.html
>
> http://www.clamav.net/faq.html
Sorry, not two. Three.
http://wiki.clamav.net/index.php/FrequentlyAskedQuestions
73,
Ged.
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Eduardo Reitz wrote:
> Does ClamAV scan the incoming and the outgoing e-mail from the mail Server?
That depends on your configuration.
> Because i received the following message in my mail.log
>
> May 5 09:10:28 mailserver-cnr postfix/smtp[30352]:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jose Celestino wrote:
> Hello,
>
> I'm having a hard the time getting the following:
>
[snip]
>
> detected as viruses by clamav.
>
> The output of clamscan is on
>
> http://japc.labs.sapo.pt/viruses/SCAN
>
>
> Kaspersky detects both, as
>
> Tro
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jose Celestino wrote:
[snip]
>> Sending links to viruses to the list.
>
> Should I send the virus ?
No. The point is that sending sample virus or links to them is against the list
posting rules.
>> Not trying the online scanner tool shown at the Cl
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
David F. Colwell wrote:
> Is clamd PING still a valid command? Man8 says the reply should be "PONG".
> I get the reply:"Running as user clamav (UID ###, GID ###)". Which is the
> same response with no command.
No, it never has been a command, it is
żyżłołażć Songrit Srilasak łyżyw:
> I use clamd (clamdscan) v.0.60 for scan email in/out on my qmail server . I
> use RPM from http://people.best-off.org/~dsr/cubelog/ . My clamd service is
> stop automatic every week. I found /var/run/clamav/clamd.pid but service not
> running. And i can't sen
In article <[EMAIL PROTECTED]>,
christian laubscher <[EMAIL PROTECTED]> writes:
>
>> In which way 0.68 (our running version) is "OUTDATED" ?
>
> CL_FLEVEL is still1 (2 in 0.70) in libclamav/others.c
>
> that's why the developers told us to upgrade on or before 04-24,
> iirc...
For wha
Jim Maul wrote:
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of peter
Sent: Friday, April 30, 2004 12:05 PM
To: [EMAIL PROTECTED]
Subject: [Clamav-users] malformed pattern
Hi, I have problem with clamav 0.70 stable.
Malformed patter line 13898 (file
/var/spoo
peter wrote:
Jim Maul wrote:
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of peter
Sent: Friday, April 30, 2004 12:05 PM
To: [EMAIL PROTECTED]
Subject: [Clamav-users] malformed pattern
Hi, I have problem with clamav 0.70 stable.
Malformed patter line 13898
peter wrote:
peter wrote:
Jim Maul wrote:
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of peter
Sent: Friday, April 30, 2004 12:05 PM
To: [EMAIL PROTECTED]
Subject: [Clamav-users] malformed pattern
Hi, I have problem with clamav 0.70 stable.
Malformed patte
Jim Maul wrote:
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of peter
Sent: Monday, May 03, 2004 6:39 AM
To: [EMAIL PROTECTED]
Subject: [Clamav-users] Re: malformed pattern
peter wrote:
peter wrote:
Jim Maul wrote:
-Original Message-
From
Jim Maul wrote:
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of peter
Sent: Monday, May 03, 2004 11:29 AM
To: [EMAIL PROTECTED]
Subject: [Clamav-users] Re: malformed pattern
Look at these lines bottom (/var/spool/qmailscan/qmail-queue.log). In
qmail-scanner
never mind!
sorry but I didn't see a message posted earlier with the same topic, that
answered my questions.
Cecilia
-
admins, you may delete this post
---
This SF.Net email is sponsored by Sleepycat Software
Learn developer strateg
> I've found a few bits of spy/adware that everything missed.
> You can download
> a trial at www.norman.com .
>
> I should say that I don't have any connection with this
> company except as a
> end user.
>
> Below is a example of what it reports.
>
> Cheers,
> Patrick
>
> ALARM:
> Virus infe
( Appologies to the group if this arrives twice - Gmane.og seems to be
acting up)
Ron,
Sorry for the confusion. Sandbox is part of Norman's AV product, and not a
separate product.
Also I never scanned the cab file yesterday I just posted a report from a
earlier infection I had. I did this just to
I found an excellent yum repository on Dag Wieers site.
http://dag.wieers.com/home-made/apt/
If you're lurking. Thanks Dag! Great work!
Ken Goods
Network Administrator
MIS Dept.
AIA Insurance, Inc.
---
This SF.Net email is sponsored by OS
I don't believe Symantec updates their definitions more than once a week.
Certainly not for us poor home users.
you can update all you want, but the file won't change.
On Tuesday 31 August 2004 12:37 pm, henry j. mason wrote:
> J. Frost wrote:
> > Hy Henry,
> >
> > ...
> >
> >> infections, ma
Laura Penhallow writes:
I apologize in advance if this is something easy, but I am at my wits end. We have a customer that needs to receive rather large zip files from a client of theirs.
Trouble is -- clam keeps classifying the attachment as an OverSized.Zip virus and rejects it.
The zip fi
[EMAIL PROTECTED] wrote:
> Hi,
>
> Is there any reason why Windows port of clamav exists only based on
> cygwin ?
>
>
> Regards
> Boguslaw Brandys
>
Hi,
There will be one soon !
This is the first time I talk about it. UScanIT is about to be ready in a
few week. It uses ClamDB and is not based on
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Knut Hildebrandt escribió:
| As I wrote before clamuko can't register with dazuko on my SuSE 9.1.
Although
| Dale tried to fix my conf file this didn't help.
|
| But maybe thats the clue? In the conf it says before enabling clamuko
dazuko
| has to be co
> Can someone explain the on-access scanning bit to me? I'm not sure I =
> understand what dazuko is and how to use it... Off-list is fine, =
> although I'm sure others may have questions too... :)
On-access scanning means that files are being scanned each time you touch
them, i.e. perform cop
> Currently on-access scanning in clamd is very buggy and should not be
> used but it's in my TODO to fix it before 0.80.
So I'll better wait until 0.80 is out. If this doesn't help I'll follow OSP's
advise even though I don't really like the idea of compiling dazuko.
knut
--
www.knut-hildeb
> I had the same problem. I solved it uninstalling the rpm package and
> installing and compilling the source code.
>
Did you compile and install the dazuko source code? Doesn't that mean one has
to compile the whole kernel?
knut
--
www.knut-hildebrandt.de
Tel. 030/44 04 31 65
Funk 0174/872 0
* On 2004.10.15, in <[EMAIL PROTECTED]>,
* "Max Chernogor" <[EMAIL PROTECTED]> wrote:
>
> TL> Your system does not have GnuMP installed.
>
> What is this?
GMP is the GNU multiple precision math library. It provides advanced
mathematical functions (e.g. for cryptography).
http://www.google.
Alex S Moore wrote:
> On Sat, 2004-10-16 at 13:56 +0800, Margo wrote:
>> ERROR: Can't open new file ./clamav-836a597f35e96568 to write
>> open: Permission denied
>> ERROR: Can't download daily.cvd from 218.44.253.75
>>
>> What have I done wrong? I can run freshclam as root and it works fine.
>>
Tomasz Kojm wrote:
On Thu, 21 Oct 2004 10:01:23 -0500
Dale Bohl <[EMAIL PROTECTED]> wrote:
Any help will be greatly appreciated on this.
I'm on IRIX 6.5.15m - MIPS and trying to install
ClamAV 0.75 but cannot. I have installed 0.75 on IRIX
6/5/24m without any issues.
0.75 is no longer supported.
Bogusław Brandys wrote:
Tomasz Kojm wrote:
On Thu, 21 Oct 2004 14:28:58 -0500
Dale Bohl <[EMAIL PROTECTED]> wrote:
/home/cheetah/dbohl/proj/hsm/terabyte: OK
/home/cheetah/dbohl/proj/hsm/archiving: OK
/home/cheetah/dbohl/proj/uit/home_links_reasons: OK
LibClamAV Error: Can't create temporary file :
Tomasz Kojm wrote:
On Thu, 21 Oct 2004 14:28:58 -0500
Dale Bohl <[EMAIL PROTECTED]> wrote:
/home/cheetah/dbohl/proj/hsm/terabyte: OK
/home/cheetah/dbohl/proj/hsm/archiving: OK
/home/cheetah/dbohl/proj/uit/home_links_reasons: OK
LibClamAV Error: Can't create temporary file : No such file or
directo
Tomasz Kojm wrote:
On Tue, 26 Oct 2004 09:20:15 -0500
Dale Bohl <[EMAIL PROTECTED]> wrote:
Tomasz Kojm wrote:
On Thu, 21 Oct 2004 14:28:58 -0500
Dale Bohl <[EMAIL PROTECTED]> wrote:
/home/cheetah/dbohl/proj/hsm/terabyte: OK
/home/cheetah/dbohl/proj/hsm/archiving: OK
/home/cheetah/dbohl/proj/uit/
I had to specify what user, it was the crontab of the clamav user,
which may have been the root of my problems with ClamAV in the first
place.
Thanks,
David Green
Systems Analyst
Magna-Tel, Inc.
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clam
Todd Haskins,
> Message-ID: <[EMAIL PROTECTED]>
>
> I am runninning Rehat Linux 7.3 using Comunicate Pro as a
> mailserver. I am trying to install the lastest plugin and
> antivirus software. First I would like to uninstall all
> previous verions of the plugin and antivirus software, does
> so
El Martes, 14 de Diciembre de 2004 05:48,
[EMAIL PROTECTED] escribió:
> Send clamav-users mailing list submissions to
> [EMAIL PROTECTED]
>
> To subscribe or unsubscribe via the World Wide Web, visit
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> or, via email, send
Christian Campbell :
> Running ClamAV 0.80. When doing a freshclam via cron or
> command-line, I get the following output:
>
> ClamAV update process started at Thu Dec 23 10:19:19 2004
> main.cvd is up to date (version: 28, sigs: 26630, f-level: 3,
> builder: tomek)
> Downloading daily.cvd [*]
Jerry Keen wrote:
I am testing a free ClamAV Communigate pluggin found at
http://program.farit.ru/index.html
It seems to work well, except after I get a good scan from CLAMAV it gives me
the following messages reapeatedly.
Under which environment are you running CommuniGate?
What version of cgpa
Jerry Keen wrote:
Hi Rene,
Hello.
Thank you for your quick response...
I am running on Suse Linux 9.1. CGPAV 1.3c.
It should work fine.
I test it manually and it works every time.
As for the helper configuration. If I leave restart and timeout on disabled.
The external helper output error con
Jerry Keen wrote:
Thanks, Rene,
I recompiled normally... not in debug mode and seems to be working fine. I
have a couple more question though... See below...
06:35:14.68 2 SMTPI-7(cgr4u.com) [30014] received, 978 bytes
06:35:14.69 2 QUEUE([30014]) from <[EMAIL PROTECTED]>, 978 bytes
(<[EMA
René Berber wrote:
There's something wrong with this log: there is no "EXTFILTER(ClamAV)"
messages. I only get those and none of the "ENQUEUERRULES"; you must
have moved the default Message Enqueuer log level (I have it at Problems).
Oops! correction, I do have those messages too, for example:
2
[EMAIL PROTECTED] wrote:
I have mail folder name VIR that containts 43 mail attach with Netsky and
2 mail attach with Bagle.
My FC1 has 0.83 and i do this :
clamscan VIR
clamdscan VIR
cat VIR | clamscan -
but it says no viruses.
Can anybody tell me why clam cannot found the viruses ?
Why? Because y
>> I have mail folder name VIR that containts 43 mail attach with Netsky
>> and
>> 2 mail attach with Bagle.
>>
>> My FC1 has 0.83 and i do this :
>>
>> clamscan VIR
>> clamdscan VIR
>> cat VIR | clamscan -
>>
>> but it says no viruses.
>>
>> Can anybody tell me why clam cannot found the viruses ?
[EMAIL PROTECTED] wrote:
[snip]
I have a mail folder, it's a file name VIR, and VIR is not a file folder /
directory.
Can clamav scan a file that is a mail folder ?
Aparently not. In fact it depends on the format used, if it hides the
message contents is not possible to decode it whitout knowing
G. Harman wrote:
Being new to clamav, I'm still struggling a bit with the scanning
process. I'm using clamav on a stand-alone machine. Clamd and fresh clam
seem to be working O.K. at boot. My Thunderbird email headers are:
X-Mozilla-Status:
X-Mozilla-St
Jason Byrns wrote:
> BANNED CONTENTS ALERT
>
> Our content checker found
> banned name: P=p005,L=1,M=multipart/mixed |
> P=p003,L=1/2,M=application/octet-stream,T=exe,T=exe-ms,N=bartpe.xex
> in email presumably from you (<[EMAIL PROTECTED]>),
> to the following recipient:
> -> [EMAIL PROTEC
Steven Stern wrote:
> It appears that Gareth Andron and the php-clamav project have been wiped
> from the face of the earth.
Yeah, his fission.org.uk domain has expired. (Gareth Ardron btw).
/Per Jessen, Zürich
___
http://lurker.clamav.net/list/cla
No I don't know from where
I added in the crash hat site in the yum configration file
I given like this # yum update clamav
but it is showing as the latest version but freshclam is not identifying
the updated package
wht to do for tht??
On Wed, 09 Mar 2005 09:07:04 -0800, ".rp" <[EMAIL PROTECT
Ed Vazquez wrote:
OS: OpenBSD 3.6-stable through 3.7-beta
Compiler: gcc 2.95 (-stable), gcc 3.3.5 (-release and -beta)
ClamAV: 0.83 and -devel (refreshed today)
Options:
./configure --sysconfdir=/etc/clamav --localstatedir=/var
- --infodir=/usr/share/info --mandir=/usr/share/man
- --enable-dependen
[EMAIL PROTECTED](Rainer Zocholl) 11.03.05 17:36
Some more "funny" messages of clamscan (ClamAV 0.83/761/):
Command used:
SCNU=ftp
nice -19 su $SCNU -s/bin/sh -c "clamscan -ir --block-encrypted --block-max
--detect-broken --unzip --unrar --unarj --unzoo --lha --jar --deb --tar --tgz
/home/$SCNU
On Wed, Jan 08, 2003 at 06:19:27PM -0600, Johan Kuuse wrote:
> This means that the virus is newer than the virus database.
> Anyone on this list is able to advice the virus database maintainer about
> this issue?
The database has been updated, do you have the virus sample to check it ?
Best rega
On Thu, Jan 09, 2003 at 09:02:01AM +0100, Tomasz Kojm wrote:
> On Wed, Jan 08, 2003 at 06:19:27PM -0600, Johan Kuuse wrote:
> > This means that the virus is newer than the virus database.
> > Anyone on this list is able to advice the virus database maintainer about
> > this issue?
>
> The databas
an Kuuse
[EMAIL PROTECTED]
- Original Message -
From: "Tomasz Kojm" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, January 09, 2003 6:07 AM
Subject: Re: [clamav-users] Re: Lirva
On Thu, Jan 09, 2003 at 09:02:01AM +0100, Tomasz Kojm wrote:
> On Wed, J
On Thu, Jan 09, 2003 at 09:01:47AM -0600, Johan Kuuse wrote:
> BTW, how do you keep the "master database" up to date?
> When I have a look at
> http://www.antivirus.net/
> there are lots of non-commercial resources available.
> Do you use anyone of these?
Some of them are non-commercial, but they
So how do you get the signatures?
On Thu, Jan 09, 2003 at 09:55:12AM -0600, Johan Kuuse wrote:
> http://www.openantivirus.org/latest.php
> , is that project still running?
I've notified Rainer Link (OAV project leader) about that,
just after Winevar.a infections. For the last 6 months, OAV database
was updated _two_ times.
Best
Thank you very much Tomasz,
It seems working fine to me, too.
Ronan
On Thu, 9 Jan 2003 13:07:43 +0100
Tomasz Kojm <[EMAIL PROTECTED]> wrote:
> On Thu, Jan 09, 2003 at 09:02:01AM +0100, Tomasz Kojm wrote:
> > On Wed, Jan 08, 2003 at 06:19:27PM -0600, Johan Kuuse wrote:
> > > This means that the
.com/Download/virussig.html
If not, are you interested in such a script (I can offer it in Perl)?
Best Regards,
Johan Kuuse
[EMAIL PROTECTED]
- Original Message -
From: "Tomasz Kojm" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, January 09, 2003 10:0
On Thu, Jan 09, 2003 at 12:30:06PM -0600, Johan Kuuse wrote:
> >For the last 6 months, OAV database was updated _two_ times.
>
> Oops, thats bad.
Sorry, my fault - it was updated three times.
> BTW, how do you get notified about new viruses?
I'm subscribed to many services, but the most importa
.
- Original Message -
From: "Ronan Lucio" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Thursday, January 09, 2003 2:39 PM
Subject: Re: [clamav-users] Re: Lirva
> Thank you very much Tomasz,
>
> It seems working fine to me, too.
&
Did anyone else get one of these? It would appear as if someone sent an
infected email to the mailing list and I bounced it causing ezmlm to get
worried.
Justin
On 11 Jun 2003 [EMAIL PROTECTED] wrote:
> Hi! This is the ezmlm program. I'm managing the
> [EMAIL PROTECTED] mailing list.
>
>
>
I am concerned that my clamav is still (June 3) not picking up sobig.c. My
database is current as of
total 1092
-rw-r--r--1 clamav clamav1106226 Jun 2 08:17 viruses.db
-rw-r--r--1 clamav clamav 2063 May 29 11:03 viruses.db2
and when I ran freshclam, it says that's up to dat
Never failsI find the answer just after I hit send
if((port = rndnum(6)) < 1024)
port += 2139;
Looks like 1024 to 6 (with a slightly higher preference for ports
roughly 2139 thru 3162).
So.thoughts on security? :)
On Wed, 2003-08-13 at 12:02, Dennis Skinner wrote:
> Hello,
Well, I can prove the failure for
root # /usr/clamav/sbin/clamd --version
clamd / ClamAV version 20030806
selfbuilt with exim/exiscan 4.21.
one thread goes defunct, the master thread idles around and the third is
stuck in an empty event loop.
Exim connections pile up to (in this
Yes, if a new database is installed, then you should see something like
this:
SelfCheck: Database modification detected. Forcing reload.
SelfCheck: Integrity OK
Goodbye!
P.s.: I don't know if there is a way to tell clamd explicitly that a new
virus database is installed and it should r
See the attached file for details
Darek M wrote:
> Hey guys, new member here, go easy on me.
>
> I have two questions to which I didn't really find an answer on the
> page nor the archived lists.
>
> 1. What is clamd, what is its function relating to ClamAV and is it
> required for ClamAV to run? I have ClamAV running on one ma
> This looks like a qmail problem - does the delivery Maildir directory
> exist? Is it structured properly?
Yes, I didn't remove any folders.
But I really don't know where search. It's may be a right access on a
directory byt wich one ?
Thanks,
-
The documentation on ScanMail is terse to say the least. Can someone
tell us in a couple of sentences what it does, and what it's for?
- Gabriel
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_
Sean Tempesta wrote:
> Dear ClamAV users,
>
> My name is Sean Tempesta and I am a graduate student at the University
> of Missouri: Columbia. I am doing research on open source anti-viral
> products and I wanted to ask a large user base what you thought about
> ClamAV. If you wouldn't mind resp
Hi Graham
My glibc is 2.3.2-27.9 that is the latest RH 9 release if I'm not wrong.
Is this enough or may I do something different?
If no, I may I discover the library responsable for this?
Thank you for your help
Alessandro Bianchi
> Alessandro Bianchi <[EMAIL PROTECTED]> writes:
>
> > Hi e
On Monday, November 10, 2003, at 02:15 AM, Marc Balmer wrote:
As clamav becomes more and more stable and as snapshots are available
I wonder when the OpenBSD port gets updated? Wouldn't it be nice if
there were a clamav-latest port (for development and testing use) that
fetches a clamav-lates
On Wed, Nov 12, 2003 at 01:43:58PM +0100, Tomasz Papszun wrote:
> On Wed, 12 Nov 2003 at 13:53:28 +0500, Serge Sivkov wrote:
> >
> > Can clamav detect Win32.HLLM.Foo virus? Currently, i must detect this
> virus by DrWeb.
> >
>
> The best solution: check it yourself :-) .
> For instance at "clama
On Thu, 6 Nov 2003, Tomasz Kojm wrote:
> I wasn't able to reproduce Mimail zip errors but there are real
chances
> the latest change in CVS will fix them. There's a snapshot available
at:
>
> http://clamav.sf.net/snapshot/clamav-20031106-tk.tar.gz
>
> Please test it ASAP. Thank you.
Ok
Jess Carroll wrote:
Did you ever get this problem fixed?
http://article.gmane.org/gmane.comp.security.virus.clamav.user/3156
if so how?
clamuko: corrupt or unknown clamd scanner error or memory/resource/perms
problem
Yes I was able to solve this problem
From what I remember :
- I ran the co
I made the change to the
sys/types.h
and everything now works fine without any errors.
Thanks...
Marc S. Brooks
Programmer/Systems Admin
Tech Deck/Modifiers Cars/Skumm/X Concepts
975 Andreasen
Escondido, CA 92029
760-740-2625 ph
760-740-2643 fx
[EMAIL PROTECTED]
> On Monday 29 Dec 2003 7:52
While building from the last CVS source, I get the following error. This
appears to be some new code with the binhex logic. If it is not already being
done, would someone look into this? The build is on Solaris SPARC with Sun's
compiler. I have been running clamav for quite some time. Thanks t
I've got a user who says yahoo groups is getting an error message when
trying to send an email to our email server.
Here's a part of the transcript from the customer:
*
Recent Bounced Messages
Most recent messages Response
Date Type of message sent Date Result
1/1/2004 A
1 - 100 of 2732 matches
Mail list logo
