[Clamav-devel] Moving Database Dir

2004-11-07 Thread peyush
Hi, Version 0.80 Configure Options: ./configure --disable-clamav --sysconfdir=/usr/local/clamav/conf --with-dbdi r=/usr/local/clamav/database SCENARIO: I am trying to move the database dir to another location "/usr/local/clamav/database/" I dont have "/usr/local/share/clamav/" directory on my sy

Re: [Clamav-devel] extended signatures - proposal

2004-11-07 Thread Gabor FUNK
FG:>> We could also define subtypes for PE files, such as FG:>> compressed/non compressed and/or FG:>> UPX, FSG, Petite, etc... TK:>> Oh, you're complicating things here. Signatures should TK:>> be independent of executable compressors - it's a job TK:>> of libclamav to provide a decompressed data

Re: [Clamav-devel] LibClamAV Warnings without clamscan's '--no-mail' option

2004-11-07 Thread Robert Allerstorfer
On Sun, 7 Nov 2004, 16:41 GMT+00 Nigel Horne wrote: > On Sunday 07 Nov 2004 1:51 pm, Robert Allerstorfer wrote: >> # clamscan /usr/lib/python2.2/email/test/data/msg_33.txt >> LibClamAV Warning: messageFindArgument: no '=' sign found in MIME header >> LibClamAV Warning: Multipart MIME message cont

Re: [Clamav-devel] LibClamAV Warnings without clamscan's '--no-mail' option

2004-11-07 Thread Nigel Horne
On Sunday 07 Nov 2004 1:51 pm, Robert Allerstorfer wrote: > # clamscan /usr/lib/python2.2/email/test/data/msg_33.txt > LibClamAV Warning: messageFindArgument: no '=' sign found in MIME header > LibClamAV Warning: Multipart MIME message contains no boundaries > /usr/lib/python2.2/email/test/data/ms

Re: [Clamav-devel] LibClamAV Warnings without clamscan's '--no-mail' option

2004-11-07 Thread Paul L Daniels
Robert, > The msg_*.txt files belong to the 'python' package and reside in the > source tree's Lib/email/test/data directory. 'test_MimeWriter' belongs Thanks, I'll still download these just to add them to my regression testing suite - to be sure ;-) Paul. -- PLDaniels - Software -

Re: [Clamav-devel] LibClamAV Warnings without clamscan's '--no-mail' option

2004-11-07 Thread Paul L Daniels
Nigel, > I am working on RFC2231 at the moment. Have fun with it, I went through the same thing 3 months ago with ripMIME. Sure wish they'd never invented all these /different/ methods of encoding data in the headers. Regards. -- PLDaniels - Software - Xamime Unix systems Internet D

Re: [Clamav-devel] LibClamAV Warnings without clamscan's '--no-mail' option

2004-11-07 Thread Robert Allerstorfer
Hi Paul, > Robert, do you have this email/mailpack available for download somewhere? these files are part of the 'python' and 'python-devel' RPM packages for RedHat EL3 and are also, of course in the Python source downloadable from http://python.org/ftp/python/2.2.3/Python-2.2.3.tgz The msg_*.t

Re: [Clamav-devel] LibClamAV Warnings without clamscan's '--no-mail' option

2004-11-07 Thread Nigel Horne
On Sunday 07 Nov 2004 1:51 pm, Robert Allerstorfer wrote: > Hi, > > when clamscan 0.80 is run without its '--no-mail' option, I get > LibClamAV Warnings on several files: > > # clamscan /usr/lib/python2.2/email/test/data/msg_33.txt > LibClamAV Warning: messageFindArgument: no '=' sign found in MIME

Re: [Clamav-devel] LibClamAV Warnings without clamscan's '--no-mail' option

2004-11-07 Thread Paul L Daniels
Following up on my last post, my mistake (midnight, too much coffee and dazed from watching LoTR). I see that with a different font that the middle 'quotes' in the lines are in fact two single quotes, not a single double-quote as I first thought. > protocol*=ansi-x3.4-1968''application

Re: [Clamav-devel] LibClamAV Warnings without clamscan's '--no-mail' option

2004-11-07 Thread Paul L Daniels
Robert, > Content-Type: multipart/signed; micalg*=ansi-x3.4-1968''pgp-md5; > protocol*=ansi-x3.4-1968''application%2Fpgp-signature; > boundary*="ansi-x3.4-1968''EeQfGwPcQSOJBaQU" This is a new way of defining a boundary for me - Has anyone got an RFC specification for this? The

[Clamav-devel] LibClamAV Warnings without clamscan's '--no-mail' option

2004-11-07 Thread Robert Allerstorfer
Hi, when clamscan 0.80 is run without its '--no-mail' option, I get LibClamAV Warnings on several files: # clamscan /usr/lib/python2.2/email/test/data/msg_33.txt LibClamAV Warning: messageFindArgument: no '=' sign found in MIME header LibClamAV Warning: Multipart MIME message contains no boundari

[Clamav-devel] Windows pure port available (beta)

2004-11-07 Thread Bogusław Brandys
Hello all, I'd like to announce pure Windows port of core clamav devel (0.80 CVS version). This is beta release.More infor here : www.bransoft.com/clamav.html In near future will be incorporated into clamav CVS tree (I hope). Please test it and send me suggestions. Best Regards Boguslaw Brandys

Re: [Clamav-devel] polymorphic viruses

2004-11-07 Thread Bogusław Brandys
Tomasz Kojm wrote: On Sat, 6 Nov 2004 22:28:03 -0800 Ozgun Erdogan <[EMAIL PROTECTED]> wrote: Hi all, I'm thinking of writing an emulation engine for polymorphic viruses. Good luck! It'd be great (very very helpful) if I could find a couple of different files infected by the same polymorphic vir

Re: [Clamav-devel] polymorphic viruses

2004-11-07 Thread Bogusław Brandys
Tomasz Kojm wrote: On Sat, 6 Nov 2004 22:28:03 -0800 Ozgun Erdogan <[EMAIL PROTECTED]> wrote: Hi all, I'm thinking of writing an emulation engine for polymorphic viruses. Good luck! It'd be great (very very helpful) if I could find a couple of different files infected by the same polymorphic vir

Re: [Clamav-devel] polymorphic viruses

2004-11-07 Thread Tomasz Kojm
On Sat, 6 Nov 2004 22:28:03 -0800 Ozgun Erdogan <[EMAIL PROTECTED]> wrote: > Hi all, > > I'm thinking of writing an emulation engine for polymorphic viruses. Good luck! > It'd be great (very very helpful) if I could find a couple of > different files infected by the same polymorphic virus. What