The default directory for Clamwin is as follows: C:\Documents and Settings\All Users\.clamwin\db>dir 06/06/2006 09:17 AM <DIR> archive_sigs 06/05/2006 04:08 PM 1,136,165 daily.cvd 04/25/2006 07:44 AM 3,950,054 main.cvd 06/01/2006 08:20 PM 315,984 phish.ndb
The original install was a default install with clamwin I never changed it. As far as the virus.cfg is there anything I edit in it to call up the phish.ndb database? Per the virus.cfg here is the line for ClamWin #Using ClamAV SCANFILE1 C:\Progra~1\ClamWin\bin\clamscan.exe --verbose --database="C:\Documents and Settings\All Users\.clamwin\db" --tempdir="c:\Temp" --no-summary -l report.txt VIRUSCODE 1 VIRUSCODE1 1 Does this look ok? I do not see a report.txt in the c:\temp file or is that normal? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, June 06, 2006 8:54 AM To: [email protected] Subject: Re: [Declude.JunkMail] phishing SANE - too quick on the type.. http://www.sanesecurity.com/clamav/ ------------------------------------------- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Goran Jovanovic writes: > Darrell, > > SANS or SANE Security? > > If it is SANS does that plug into CLAM? > > Goran Jovanovic > Omega Network Solutions > > > >> -----Original Message----- >> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of >> Darrell ([EMAIL PROTECTED]) >> Sent: Tuesday, June 06, 2006 9:32 AM >> To: [email protected] >> Subject: Re: [Declude.JunkMail] phishing >> >> Roger, >> >> Are you using the SANS phish signatures? Since we started using we > have >> seen virtually zero get through. >> >> Darrell >> >> ------------------------------------------- >> fpReview - The quick way to reviewing false positives. >> http://www.invariantsystems.com >> >> Schmeits, Roger writes: >> >> > What are people doing for phishing scams? We seem to be getting > quite a >> > few and was wondering what people do. >> > >> > >> > >> > Running declude 3.1.0 & Imail 8.05 as a gateway. I have McAffee, > f-prot >> > & Clamwin as scanners. >> > >> > >> > >> > Thanks. >> > >> > >> > >> > I heard some talk about clamdev ? or something like that -- did not > pay >> > much attention then , was not on the radar screen at the moment.. >> > >> > ########################## >> > Roger Schmeits >> > Sr. Network Engineer >> > >> > 101 South 42nd St. >> > >> > Omaha, NE 68131 >> > http://www.clarksoncollege.edu >> > (402) 552-2542 Office >> > (800) 647-5500 Toll Free >> > ########################## >> > >> > >> > >> > Disclaimer: >> > >> > >> > >> > The information contained in this e-mail is privileged and > confidential >> > and is intended only for the use of the addressee(s) indicated > above. >> > Use or disclosure of information e-mailed in error is respectfully >> > prohibited. If you have received this e-mail in error, please > contact >> > the sender and immediately delete the original message. >> > >> > >> > >> > >> > >> > --- >> > This E-mail came from the Declude.JunkMail mailing list. To >> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >> > type "unsubscribe Declude.JunkMail". The archives can be found >> > at http://www.mail-archive.com. >> > >> [This E-mail scanned for viruses by Declude EVA] >> >> >> >> --- >> This E-mail came from the Declude.JunkMail mailing list. To >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >> type "unsubscribe Declude.JunkMail". The archives can be found >> at http://www.mail-archive.com. > > [This E-mail scanned for viruses by Declude EVA] > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > [This E-mail scanned for viruses by Declude EVA] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. [This E-mail scanned for viruses by Declude EVA] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
