Re: [Clamav-users] Outdated Engine warning suppress

2008-10-16 Thread veselin
Thanks for the input.

Veselin


On Wed, Oct 15, 2008 at 09:58:19AM -0400, Charles Gregory wrote:
 Veselin@ wrote:
  I'm running Debian in a production environment,
  I cannot afford using the volatile repository,
 On Wed, 15 Oct 2008, Bowie Bailey wrote:
  Either install it from volatile, build it from source, or find a 3rd
  party package that you can install.  An antivirus tool is one thing that
  you need to keep current.
 
 If you are concerned about a new version of clamav 'failing', you may want
 to consider installing the volatile version separately, and keep the
 stable version as 'backup'. Then you could create a piece of code (in
 procmail, or wherever convenient) to check that the volatile ClamAV did
 not return an error. If it does, run the stable version, which you can
 store separately, but still use the same database. Naturally, until you
 discover the problem with the latest version, you'll take a performance
 hit, but this provides maximal AV protection for the system. Better than
 continuing to run on an out-dated engine. 
 
 My 0.02 dollars.
 
 - Charles
 
 ___
 Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
 http://www.clamav.net/support/ml
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[Clamav-users] Outdated Engine warning suppress

2008-10-15 Thread Veselin
Hello,
could you please advise if there is a way to run clamscan, 
suppressing the engine outdated warning:

LibClamAV Warning: ***  


LibClamAV Warning: ***  This version of the ClamAV engine is outdated. ***  


LibClamAV Warning: *** DON'T PANIC! Read http://www.clamav.net/support/faq ***  


LibClamAV Warning: ***  
 

I'm running Debian in a production environment,
I cannot afford using the volatile repository, 
meaning that my engine will always be outdated.

Thank you.

Veselin
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[Clamav-users] Clamscan takes 80minutes to scan a file

2008-09-08 Thread Veselin Kantsev
Hello,
I'm running 
ClamAV 0.90.1/8187, Debian 2.6.18-4-powerpc 


Clamscan takes way too long to process even a single file.

Scan summary shows 80 minutes for scanning one 1 small txt file.

Tested with different file types/sizes, same result.

Removed and reinstalled Clamav package, no difference.


Any advise on what could be slowing clamscan down so much?

Regards,
Veselin
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] Clamscan takes 80minutes to scan a file

2008-09-08 Thread Veselin Kantsev
thank you Tomasz
ClamAV 0.93.3 works OK

regards,
veselin


On Mon, Sep 08, 2008 at 03:28:45PM +0200, Tomasz Kojm wrote:
 On Mon, 8 Sep 2008 14:25:15 +0100
 Veselin Kantsev [EMAIL PROTECTED] wrote:
 
  Any advise on what could be slowing clamscan down so much?
 
 You're using a very old version of ClamAV which has a bug making it
 very slow.
 
 -- 
oo. Tomasz Kojm [EMAIL PROTECTED]
   (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg
  \..._ 0DCA5A08407D5288279DB43454822DC8985A444B
//\   /\  Mon Sep  8 15:27:51 CEST 2008
 ___
 Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
 http://www.clamav.net/support/ml
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[Clamav-users] ClamAV scan report

2008-08-19 Thread Veselin Kantsev
Hello,
A question about the scan output of ClamAV.

I have a script that finds files that have been modified in the last
N days from a folder and then passes the list to clamscan.

I'm using cat LIST.txt | xargs -0 clamscan -ir --stdout  REPORT.txt

When the scan is finished the report looks like this:

--- SCAN SUMMARY ---
Known viruses: 396676
Engine version: 0.93.1
Scanned directories: 0
Scanned files: 684
Infected files: 0
Data scanned: 440.22 MB
Time: 51.853 sec (0 m 51 s)

--- SCAN SUMMARY ---
Known viruses: 396676
Engine version: 0.93.1
Scanned directories: 0
Scanned files: 86
Infected files: 0
Data scanned: 41.97 MB
Time: 6.677 sec (0 m 6 s)





Why are there two summaries?

Sometimes when I'm searching for files in multiple folders there is even
more summaries generated.


Thank you.
Veselin
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] ClamAV scan report

2008-08-19 Thread Veselin Kantsev
Thanks you Tilman.

From what I understand, xargs passes the command line arguments in
batches, launching clamscan once for each batch.


Veselin



On Tue, Aug 19, 2008 at 11:41:18AM +0200, Tilman Schmidt wrote:
 Veselin Kantsev schrieb:
 I have a script that finds files that have been modified in the last
 N days from a folder and then passes the list to clamscan.

 I'm using cat LIST.txt | xargs -0 clamscan -ir --stdout  REPORT.txt

 When the scan is finished the report looks like this:

 --- SCAN SUMMARY ---
 Known viruses: 396676
 Engine version: 0.93.1
 Scanned directories: 0
 Scanned files: 684
 Infected files: 0
 Data scanned: 440.22 MB
 Time: 51.853 sec (0 m 51 s)

 --- SCAN SUMMARY ---
 Known viruses: 396676
 Engine version: 0.93.1
 Scanned directories: 0
 Scanned files: 86
 Infected files: 0
 Data scanned: 41.97 MB
 Time: 6.677 sec (0 m 6 s)


 Why are there two summaries?

 Because the xargs command in your script ran clamscan twice.

 Sometimes when I'm searching for files in multiple folders there is even
 more summaries generated.

 That's how xargs works. See man xargs.

 HTH
 T.

 -- 
 Tilman Schmidt
 Phoenix Software GmbH
 Bonn, Germany




 ___
 Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
 http://www.clamav.net/support/ml
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[Clamav-users] LibClamAV Warning: Bad compression in flate stream

2008-07-08 Thread Veselin Kantsev
Hello,
I get this in my daily scan reports: 
LibClamAV Warning: Bad compression in flate stream

Could you please advise what is causing this?


ClamAV 0.92.1
Debian Lenny 2.6.21-2-686

-- 
Regards,

Veselin Kantsev
[EMAIL PROTECTED]
Campbell-Lange Workshop

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] LibClamAV Warning: Bad compression in flate stream

2008-07-08 Thread Veselin Kantsev
Thank you much Tomasz.

Veselin
On Tue, Jul 08, 2008 at 07:09:31PM +0200, Tomasz Kojm wrote:
 On Tue, 8 Jul 2008 18:01:57 +0100
 Veselin Kantsev [EMAIL PROTECTED] wrote:
 
  Hello,
  I get this in my daily scan reports: 
  LibClamAV Warning: Bad compression in flate stream
  
  Could you please advise what is causing this?
  
  
  ClamAV 0.92.1
 
 That's from the pdf handler, upgrade to 0.93.3 and this warning
 will disappear.
 
 -- 
oo. Tomasz Kojm [EMAIL PROTECTED]
   (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg
  \..._ 0DCA5A08407D5288279DB43454822DC8985A444B
//\   /\  Tue Jul  8 19:08:32 CEST 2008
 ___
 Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
 http://www.clamav.net/support/ml


___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


Re: [Clamav-users] random named folders in /var/lib/clamav/

2008-06-19 Thread Veselin Kantsev
Thank you mcuh Edwin.

Veselin
On Wed, Jun 18, 2008 at 07:57:11PM +0300, Török Edwin wrote:
 Veselin Kantsev wrote:
  Hello, Im running ClamAV 0.92.1 on a Debian lenny 2.6.21-2-amd64 server.
  Im finding multiple folders with random names like 
  clamav-83327dd0a90c83be874bc6ad067df427
  located in /var/lib/clamav/.
 
  Could you please advise what are these for and if I need them, as they are
  using up quite some space.

 
 You don't need them, they can be safely removed.
 They are likely left behind during a failed update.
 If you get the random named folders again, try upgrading to 0.93.1, and
 if the problem persists please open a bugreport.
 
 Best regards,
 --Edwin
 
 ___
 Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
 http://www.clamav.net/support/ml

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml


[Clamav-users] random named folders in /var/lib/clamav/

2008-06-18 Thread Veselin Kantsev
Hello, Im running ClamAV 0.92.1 on a Debian lenny 2.6.21-2-amd64 server.
Im finding multiple folders with random names like 
clamav-83327dd0a90c83be874bc6ad067df427
located in /var/lib/clamav/.

Could you please advise what are these for and if I need them, as they are
using up quite some space.

The folders contain the same files: COPYING, main.db, main.fp, main.hdb,
main.info, main.mdb, main.ndb, main.zmd


-- 
Regards,
Veselin 

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml