AW: [Clamav-users] disable ScanArchive?

2005-02-13 Thread Steffen Heil
Hi

 That was already mentioned on this list a new config scheme 
 will be introduced in 0.90.

Thanks a lot.

Regards,
  Steffen


smime.p7s
Description: S/MIME cryptographic signature
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: [Clamav-users] Not detecting virus in uuencoded document in mail?

2005-02-13 Thread Tomasz Kojm
On Sat, 12 Feb 2005 21:08:56 -0800 (PST)
Joanna Roman [EMAIL PROTECTED] wrote:

 
 Jerome, I ran into a similar problem before. If you
 attached the encoded file with the right extension,
 clamscan would understand it. Otherwise, clamscan just
 thinks it is a text file!

That's not true. clamscan uses libclamav to decode e-mails and the
library does not depend on extensions but on a file structure.

There must be some other problem preventing libclamav from detecting the
test file.

-- 
   oo. Tomasz Kojm [EMAIL PROTECTED]
  (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg
 \..._ 0DCA5A08407D5288279DB43454822DC8985A444B
   //\   /\  Sun Feb 13 10:26:53 CET 2005


pgp0ydHPWsZAV.pgp
Description: PGP signature
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: [Clamav-users] Not detecting virus in uuencoded document in mail?

2005-02-13 Thread Nigel Horne
On Sunday 13 Feb 2005 01:16, Jerome Limozin wrote:

 then, I uunencoded clamav.exe test file and sent it to me by email 
 (uuencode clam.exe clam.exe | mail jerome) then ran clamscan against the 
 mail file (maildir format) - clamscan doesn't detect the test virus.

Fixed in CVS, thanks for the report.

-- 
Nigel Horne. Arranger, Composer, Typesetter.
NJH Music, Barnsley, UK.  ICQ#20252325
[EMAIL PROTECTED] http://www.bandsman.co.uk
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


[Clamav-users] Re:ClamAV Developers, please take a look at this problem too. Could be serious if this is really a bug!

2005-02-13 Thread Joanna Roman

--- Joanna Roman [EMAIL PROTECTED] wrote:

 
 I first clamscaned the downloaded clamav-0.82.tar.gz
 but it does not detect any virus. Then I gunzipped
 it,
 untarred it, tarred and gzipped it, and then
 clamscaned it again. This time, it detect
 ClamAV-Test-File. If you take a look at the Data
 scanned:, you will see the first time is 23.77MB
 and
 the second time is only 3.16MB. 
 
 Can any developers give me an explaination 
 
 
 
 cweng-fedora:/home/cweng 235 clamscan
 clamav-0.82.tar.gz
 clamav-0.82.tar.gz: OK
 
  
 
  

 --- SCAN SUMMARY ---
 Known viruses: 30742
 Scanned directories: 0
 Scanned files: 1
 Infected files: 0
 Data scanned: 23.77 MB
 I/O buffer size: 131072 bytes
 Time: 5.060 sec (0 m 5 s)
 cweng-fedora:/home/cweng 236 gunzip
 clamav-0.82.tar.gz
 cweng-fedora:/home/cweng 237 tar xf clamav-0.82.tar
 cweng-fedora:/home/cweng 238 
 cweng-fedora:/home/cweng 238 tar cf clamav-0.82.tar
 clamav-0.82
 cweng-fedora:/home/cweng 239 gzip clamav-0.82.tar
 cweng-fedora:/home/cweng 240 clamscan
 clamav-0.82.tar.gz
 clamav-0.82.tar.gz: ClamAV-Test-File FOUND
 
  
 
  

 --- SCAN SUMMARY ---
 Known viruses: 30742
 Scanned directories: 0
 Scanned files: 1
 Infected files: 1
 Data scanned: 3.16 MB
 I/O buffer size: 131072 bytes
 Time: 2.032 sec (0 m 2 s)
 cweng-fedora:/home/cweng 241 
 
  
 
  

 cweng-fedora:/home/cweng/clamav-0.82 111 gzip
 --version
 gzip 1.3.3
 (2002-03-08)
 Copyright 2002 Free Software Foundation
 Copyright 1992-1993 Jean-loup Gailly
 This program comes with ABSOLUTELY NO WARRANTY.
 You may redistribute copies of this program
 under the terms of the GNU General Public License.
 For more information about these matters, see the
 file
 named COPYING.
 Compilation options:
 DIRENT UTIME STDC_HEADERS HAVE_UNISTD_H
 HAVE_MEMORY_H
 HAVE_STRING_H HAVE_LSTAT
 Written by Jean-loup Gailly.
 cweng-fedora:/home/cweng/clamav-0.82 112 tar
 --version
 tar (GNU tar) 1.13.25
 Copyright © 2001 Free Software Foundation, Inc.
 This program comes with NO WARRANTY, to the extent
 permitted by law.
 You may redistribute it under the terms of the GNU
 General Public License;
 see the file named COPYING for details.
 Written by John Gilmore and Jay Fenlason.
 cweng-fedora:/home/cweng/clamav-0.82 113 
 
 
 
 
 
 
 
   
 __ 
 Do you Yahoo!? 
 Yahoo! Mail - 250MB free storage. Do more. Manage
 less. 
 http://info.mail.yahoo.com/mail_250
 ___

http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
 




__ 
Do you Yahoo!? 
Yahoo! Mail - 250MB free storage. Do more. Manage less. 
http://info.mail.yahoo.com/mail_250
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


[Clamav-users] Installing ClamAV on Debian (2.4.27 Kernel)

2005-02-13 Thread David A. Cobb
AMD (i386) Athlon XP, 256 Meg RAM, Debian 'sarge', kernel 2.4.27
Every attempt to install ClamAV fails with the complaint raised by the 
post-install script for 'freshclam'

blockquote
[16:40:36] bash3 $ sudo dpkg --configure -a
Setting up clamav-freshclam (0.81-2) ...
debconf: unable to initialize frontend: Dialog
debconf: (Dialog frontend is incompatible with emacs shell buffers)
debconf: falling back to frontend: Readline
debconf: unable to initialize frontend: Readline
debconf: (Term::ReadLine::GNU is incompatable with emacs shell buffers.)
debconf: falling back to frontend: Teletype
Starting ClamAV virus database updater: ERROR: Can't open
/var/log/clamav/freshclam.log in append mode (check permissions!).
ERROR: Problem with internal logger.
invoke-rc.d: initscript clamav-freshclam, action start failed.
dpkg: error processing clamav-freshclam (--configure):
subprocess post-installation script returned error exit status 1
/blockquote
I have tried various modifications to the perms on the directory or 
logfile;
currently set as:

drwxrwxrwx   2 clamav  adm   4096 Feb 13 17:33 clamav
and:
 -rw-r-   1 clamav adm0 Feb 13 17:33 freshclam.log
My attempts included removing the directory and purging the package, 
then re-installing. 
Nothing seems to satisfy the initscript.

Can anyone suggest my next move?
--
David A. Cobb, Software Engineer, Public Access Advocate
By God's Grace, I am a Christian man; by my actions a great sinner. -- The 
Way of a Pilgrim: R.French, Tr.
Life is too short to tolerate crappy software!

___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


[Clamav-users] Re: [Clamav-announce] announcing ClamAV 0.83

2005-02-13 Thread clamav
and where might one find this new ClamAV 0.83? there's no link to it that i 
can find on clamav.net, nor any mention of it at all. most recent news is 
for 0.82.

At 04:30 PM 2/13/2005, you wrote:

Dear ClamAV users,
due to a high number of bad files produced by broken software, the
MS05-002 exploit detector now only checks specific RIFF files. This version
also fixes a stability problem of clamav-milter/clamd and improves e-mail
scanning.
--
The ClamAV team (http://www.clamav.net/team.html)
--
Luca Gibelli (luca at clamav.net) - http://www.ClamAV.net - A GPL virus 
scanner
PGP Key Fingerprint: C782 121E 8C3A 90E3 7A87  D802 6277 8FF4 5EFC 5582
PGP Key Available on: Key Servers || http://www.clamav.net/gpg/nervoso.gpg
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-announce
Paul Theodoropoulos
http://www.anastrophe.com
http://www.smileglobal.com
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: [Clamav-users] Re: [Clamav-announce] announcing ClamAV 0.83

2005-02-13 Thread Christopher X. Candreva
On Sun, 13 Feb 2005 [EMAIL PROTECTED] wrote:

 
 and where might one find this new ClamAV 0.83? there's no link to it that i
 can find on clamav.net, nor any mention of it at all. most recent news is for
 0.82.

Click the 0.82 link, you'll get the sourceforge page which lists 0.83


==
Chris Candreva  -- [EMAIL PROTECTED] -- (914) 967-7816
WestNet Internet Services of Westchester
http://www.westnet.com/
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: [Clamav-users] Re: [Clamav-announce] announcing ClamAV 0.83

2005-02-13 Thread Alex S Moore
[EMAIL PROTECTED] wrote:
and where might one find this new ClamAV 0.83? there's no link to it 
that i can find on clamav.net, nor any mention of it at all. most recent 
news is for 0.82.
Dive into the 0.82 link to get to the page on sourceforge.  0.83 is there.
Alex
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


[Clamav-users] clamav-milter questions

2005-02-13 Thread Damian Menscher
Is there a performance benefit to using --external?  I'm wondering if 
this is similar to the clamscan/clamdscan performance difference.  Does 
clamav-milter cache the virus database when running in the internal 
mode, or does it have to load it for each message?

Is there anything similar to clamdwatch that can be run out of cron to 
test that clamav-milter is alive?

How does clamav-milter know about freshclam updates?  I assume it has to 
check for updates regularly?  Is this selfcheck interval configurable 
somewhere?

Damian Menscher
--
-=#| Physics Grad Student  SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=-
-=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=-
-=#| The above opinions are not necessarily those of my employers. |#=-
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: [Clamav-users] Installing ClamAV on Debian (2.4.27 Kernel)

2005-02-13 Thread Stephen Gran
On Sun, Feb 13, 2005 at 08:04:41PM -0500, David A. Cobb said:
 AMD (i386) Athlon XP, 256 Meg RAM, Debian 'sarge', kernel 2.4.27
 Every attempt to install ClamAV fails with the complaint raised by the 
 post-install script for 'freshclam'
 
 blockquote
 [16:40:36] bash3 $ sudo dpkg --configure -a
 Setting up clamav-freshclam (0.81-2) ...
 debconf: unable to initialize frontend: Dialog
 debconf: (Dialog frontend is incompatible with emacs shell buffers)
 debconf: falling back to frontend: Readline
 debconf: unable to initialize frontend: Readline
 debconf: (Term::ReadLine::GNU is incompatable with emacs shell buffers.)
 debconf: falling back to frontend: Teletype
 Starting ClamAV virus database updater: ERROR: Can't open
 /var/log/clamav/freshclam.log in append mode (check permissions!).
 ERROR: Problem with internal logger.
 invoke-rc.d: initscript clamav-freshclam, action start failed.
 dpkg: error processing clamav-freshclam (--configure):
 subprocess post-installation script returned error exit status 1
 /blockquote
 
 I have tried various modifications to the perms on the directory or 
 logfile;
 currently set as:
 
 drwxrwxrwx   2 clamav  adm   4096 Feb 13 17:33 clamav
 
 and:
 
  -rw-r-   1 clamav adm0 Feb 13 17:33 freshclam.log
 
 My attempts included removing the directory and purging the package, 
 then re-installing. 
 Nothing seems to satisfy the initscript.
 
 Can anyone suggest my next move?

I would suggest fixing your debconf blowup first, as this may sort
things out for you in a roundabout manner.  The config file
freshclam.conf is generated by debconf on install, and I have a feeling
that something is wronf with the config file, and you are getting a
misleading error message.  What are the contents of freshclam.conf?
permissions?
-- 
 --
|  Stephen Gran  | It's not the men in my life, but the|
|  [EMAIL PROTECTED] | life in my men that counts.   -- Mae|
|  http://www.lobefin.net/~steve | West|
 --


pgpPVMtoV1ThN.pgp
Description: PGP signature
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: [Clamav-users] Re: [Clamav-announce] announcing ClamAV 0.83

2005-02-13 Thread Bill Maidment
Alex S Moore wrote:
[EMAIL PROTECTED] wrote:
and where might one find this new ClamAV 0.83? there's no link to it 
that i can find on clamav.net, nor any mention of it at all. most 
recent news is for 0.82.

Dive into the 0.82 link to get to the page on sourceforge.  0.83 is there.
Alex
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Why didn't I get the announcement? I got all the replies!!!
--
 _/_/_/_/  _/  _/
_/_/  _/  _/  _/
   _/_/_/_/  _/
  _/_/  _/  _/  _/
 _/_/_/_/  _/  _/  _/
Bill Maidment
Maidment Enterprises Pty Ltd
Unless you are named Alfred E. Newman, you may read only the odd 
numbered words (every other word beginning with the first) of the 
message above. If you have violated that, then you hereby owe the sender 
AU$10 for each even numbered word you have read.
Adapted from Stupid Email Disclaimers (see 
http://www.goldmark.org/jeff/stupid-disclaimers/)
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Re: [Clamav-users] Re: [Clamav-announce] announcing ClamAV 0.83

2005-02-13 Thread Damian Menscher
On Mon, 14 Feb 2005, Bill Maidment wrote:
Why didn't I get the announcement? I got all the replies!!!
Read the archive of this list back when 0.82, 0.81, 0.80, 0.75.1, 0.75, 
or any other release was announced.

Then subscribe to the clamav-announce list.
Damian Menscher
--
-=#| Physics Grad Student  SysAdmin @ U Illinois Urbana-Champaign |#=-
-=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=-
-=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=-
-=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=-
-=#| The above opinions are not necessarily those of my employers. |#=-
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users