AW: [Clamav-users] disable ScanArchive?
Hi That was already mentioned on this list a new config scheme will be introduced in 0.90. Thanks a lot. Regards, Steffen smime.p7s Description: S/MIME cryptographic signature ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Not detecting virus in uuencoded document in mail?
On Sat, 12 Feb 2005 21:08:56 -0800 (PST) Joanna Roman [EMAIL PROTECTED] wrote: Jerome, I ran into a similar problem before. If you attached the encoded file with the right extension, clamscan would understand it. Otherwise, clamscan just thinks it is a text file! That's not true. clamscan uses libclamav to decode e-mails and the library does not depend on extensions but on a file structure. There must be some other problem preventing libclamav from detecting the test file. -- oo. Tomasz Kojm [EMAIL PROTECTED] (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Sun Feb 13 10:26:53 CET 2005 pgp0ydHPWsZAV.pgp Description: PGP signature ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Not detecting virus in uuencoded document in mail?
On Sunday 13 Feb 2005 01:16, Jerome Limozin wrote: then, I uunencoded clamav.exe test file and sent it to me by email (uuencode clam.exe clam.exe | mail jerome) then ran clamscan against the mail file (maildir format) - clamscan doesn't detect the test virus. Fixed in CVS, thanks for the report. -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED] http://www.bandsman.co.uk ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
[Clamav-users] Re:ClamAV Developers, please take a look at this problem too. Could be serious if this is really a bug!
--- Joanna Roman [EMAIL PROTECTED] wrote: I first clamscaned the downloaded clamav-0.82.tar.gz but it does not detect any virus. Then I gunzipped it, untarred it, tarred and gzipped it, and then clamscaned it again. This time, it detect ClamAV-Test-File. If you take a look at the Data scanned:, you will see the first time is 23.77MB and the second time is only 3.16MB. Can any developers give me an explaination cweng-fedora:/home/cweng 235 clamscan clamav-0.82.tar.gz clamav-0.82.tar.gz: OK --- SCAN SUMMARY --- Known viruses: 30742 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 23.77 MB I/O buffer size: 131072 bytes Time: 5.060 sec (0 m 5 s) cweng-fedora:/home/cweng 236 gunzip clamav-0.82.tar.gz cweng-fedora:/home/cweng 237 tar xf clamav-0.82.tar cweng-fedora:/home/cweng 238 cweng-fedora:/home/cweng 238 tar cf clamav-0.82.tar clamav-0.82 cweng-fedora:/home/cweng 239 gzip clamav-0.82.tar cweng-fedora:/home/cweng 240 clamscan clamav-0.82.tar.gz clamav-0.82.tar.gz: ClamAV-Test-File FOUND --- SCAN SUMMARY --- Known viruses: 30742 Scanned directories: 0 Scanned files: 1 Infected files: 1 Data scanned: 3.16 MB I/O buffer size: 131072 bytes Time: 2.032 sec (0 m 2 s) cweng-fedora:/home/cweng 241 cweng-fedora:/home/cweng/clamav-0.82 111 gzip --version gzip 1.3.3 (2002-03-08) Copyright 2002 Free Software Foundation Copyright 1992-1993 Jean-loup Gailly This program comes with ABSOLUTELY NO WARRANTY. You may redistribute copies of this program under the terms of the GNU General Public License. For more information about these matters, see the file named COPYING. Compilation options: DIRENT UTIME STDC_HEADERS HAVE_UNISTD_H HAVE_MEMORY_H HAVE_STRING_H HAVE_LSTAT Written by Jean-loup Gailly. cweng-fedora:/home/cweng/clamav-0.82 112 tar --version tar (GNU tar) 1.13.25 Copyright © 2001 Free Software Foundation, Inc. This program comes with NO WARRANTY, to the extent permitted by law. You may redistribute it under the terms of the GNU General Public License; see the file named COPYING for details. Written by John Gilmore and Jay Fenlason. cweng-fedora:/home/cweng/clamav-0.82 113 __ Do you Yahoo!? Yahoo! Mail - 250MB free storage. Do more. Manage less. http://info.mail.yahoo.com/mail_250 ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users __ Do you Yahoo!? Yahoo! Mail - 250MB free storage. Do more. Manage less. http://info.mail.yahoo.com/mail_250 ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
[Clamav-users] Installing ClamAV on Debian (2.4.27 Kernel)
AMD (i386) Athlon XP, 256 Meg RAM, Debian 'sarge', kernel 2.4.27 Every attempt to install ClamAV fails with the complaint raised by the post-install script for 'freshclam' blockquote [16:40:36] bash3 $ sudo dpkg --configure -a Setting up clamav-freshclam (0.81-2) ... debconf: unable to initialize frontend: Dialog debconf: (Dialog frontend is incompatible with emacs shell buffers) debconf: falling back to frontend: Readline debconf: unable to initialize frontend: Readline debconf: (Term::ReadLine::GNU is incompatable with emacs shell buffers.) debconf: falling back to frontend: Teletype Starting ClamAV virus database updater: ERROR: Can't open /var/log/clamav/freshclam.log in append mode (check permissions!). ERROR: Problem with internal logger. invoke-rc.d: initscript clamav-freshclam, action start failed. dpkg: error processing clamav-freshclam (--configure): subprocess post-installation script returned error exit status 1 /blockquote I have tried various modifications to the perms on the directory or logfile; currently set as: drwxrwxrwx 2 clamav adm 4096 Feb 13 17:33 clamav and: -rw-r- 1 clamav adm0 Feb 13 17:33 freshclam.log My attempts included removing the directory and purging the package, then re-installing. Nothing seems to satisfy the initscript. Can anyone suggest my next move? -- David A. Cobb, Software Engineer, Public Access Advocate By God's Grace, I am a Christian man; by my actions a great sinner. -- The Way of a Pilgrim: R.French, Tr. Life is too short to tolerate crappy software! ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
[Clamav-users] Re: [Clamav-announce] announcing ClamAV 0.83
and where might one find this new ClamAV 0.83? there's no link to it that i can find on clamav.net, nor any mention of it at all. most recent news is for 0.82. At 04:30 PM 2/13/2005, you wrote: Dear ClamAV users, due to a high number of bad files produced by broken software, the MS05-002 exploit detector now only checks specific RIFF files. This version also fixes a stability problem of clamav-milter/clamd and improves e-mail scanning. -- The ClamAV team (http://www.clamav.net/team.html) -- Luca Gibelli (luca at clamav.net) - http://www.ClamAV.net - A GPL virus scanner PGP Key Fingerprint: C782 121E 8C3A 90E3 7A87 D802 6277 8FF4 5EFC 5582 PGP Key Available on: Key Servers || http://www.clamav.net/gpg/nervoso.gpg ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-announce Paul Theodoropoulos http://www.anastrophe.com http://www.smileglobal.com ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Re: [Clamav-announce] announcing ClamAV 0.83
On Sun, 13 Feb 2005 [EMAIL PROTECTED] wrote: and where might one find this new ClamAV 0.83? there's no link to it that i can find on clamav.net, nor any mention of it at all. most recent news is for 0.82. Click the 0.82 link, you'll get the sourceforge page which lists 0.83 == Chris Candreva -- [EMAIL PROTECTED] -- (914) 967-7816 WestNet Internet Services of Westchester http://www.westnet.com/ ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Re: [Clamav-announce] announcing ClamAV 0.83
[EMAIL PROTECTED] wrote: and where might one find this new ClamAV 0.83? there's no link to it that i can find on clamav.net, nor any mention of it at all. most recent news is for 0.82. Dive into the 0.82 link to get to the page on sourceforge. 0.83 is there. Alex ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
[Clamav-users] clamav-milter questions
Is there a performance benefit to using --external? I'm wondering if this is similar to the clamscan/clamdscan performance difference. Does clamav-milter cache the virus database when running in the internal mode, or does it have to load it for each message? Is there anything similar to clamdwatch that can be run out of cron to test that clamav-milter is alive? How does clamav-milter know about freshclam updates? I assume it has to check for updates regularly? Is this selfcheck interval configurable somewhere? Damian Menscher -- -=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=- -=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=- -=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=- -=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=- -=#| The above opinions are not necessarily those of my employers. |#=- ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Installing ClamAV on Debian (2.4.27 Kernel)
On Sun, Feb 13, 2005 at 08:04:41PM -0500, David A. Cobb said: AMD (i386) Athlon XP, 256 Meg RAM, Debian 'sarge', kernel 2.4.27 Every attempt to install ClamAV fails with the complaint raised by the post-install script for 'freshclam' blockquote [16:40:36] bash3 $ sudo dpkg --configure -a Setting up clamav-freshclam (0.81-2) ... debconf: unable to initialize frontend: Dialog debconf: (Dialog frontend is incompatible with emacs shell buffers) debconf: falling back to frontend: Readline debconf: unable to initialize frontend: Readline debconf: (Term::ReadLine::GNU is incompatable with emacs shell buffers.) debconf: falling back to frontend: Teletype Starting ClamAV virus database updater: ERROR: Can't open /var/log/clamav/freshclam.log in append mode (check permissions!). ERROR: Problem with internal logger. invoke-rc.d: initscript clamav-freshclam, action start failed. dpkg: error processing clamav-freshclam (--configure): subprocess post-installation script returned error exit status 1 /blockquote I have tried various modifications to the perms on the directory or logfile; currently set as: drwxrwxrwx 2 clamav adm 4096 Feb 13 17:33 clamav and: -rw-r- 1 clamav adm0 Feb 13 17:33 freshclam.log My attempts included removing the directory and purging the package, then re-installing. Nothing seems to satisfy the initscript. Can anyone suggest my next move? I would suggest fixing your debconf blowup first, as this may sort things out for you in a roundabout manner. The config file freshclam.conf is generated by debconf on install, and I have a feeling that something is wronf with the config file, and you are getting a misleading error message. What are the contents of freshclam.conf? permissions? -- -- | Stephen Gran | It's not the men in my life, but the| | [EMAIL PROTECTED] | life in my men that counts. -- Mae| | http://www.lobefin.net/~steve | West| -- pgpPVMtoV1ThN.pgp Description: PGP signature ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Re: [Clamav-announce] announcing ClamAV 0.83
Alex S Moore wrote: [EMAIL PROTECTED] wrote: and where might one find this new ClamAV 0.83? there's no link to it that i can find on clamav.net, nor any mention of it at all. most recent news is for 0.82. Dive into the 0.82 link to get to the page on sourceforge. 0.83 is there. Alex ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users Why didn't I get the announcement? I got all the replies!!! -- _/_/_/_/ _/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/_/ _/ _/ _/ _/_/_/_/ _/ _/ _/ Bill Maidment Maidment Enterprises Pty Ltd Unless you are named Alfred E. Newman, you may read only the odd numbered words (every other word beginning with the first) of the message above. If you have violated that, then you hereby owe the sender AU$10 for each even numbered word you have read. Adapted from Stupid Email Disclaimers (see http://www.goldmark.org/jeff/stupid-disclaimers/) ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Re: [Clamav-announce] announcing ClamAV 0.83
On Mon, 14 Feb 2005, Bill Maidment wrote: Why didn't I get the announcement? I got all the replies!!! Read the archive of this list back when 0.82, 0.81, 0.80, 0.75.1, 0.75, or any other release was announced. Then subscribe to the clamav-announce list. Damian Menscher -- -=#| Physics Grad Student SysAdmin @ U Illinois Urbana-Champaign |#=- -=#| 488 LLP, 1110 W. Green St, Urbana, IL 61801 Ofc:(217)333-0038 |#=- -=#| 4602 Beckman, VMIL/MS, Imaging Technology Group:(217)244-3074 |#=- -=#| [EMAIL PROTECTED] www.uiuc.edu/~menscher/ Fax:(217)333-9819 |#=- -=#| The above opinions are not necessarily those of my employers. |#=- ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users