Re: [Clamav-devel] Why Clamav programs add certificate type x509?

2012-05-01 Thread aCaB
below. Hello chatsiri, I didn't understand much in your email. At any rate crtmgr is part of a digital signature verification scheme which is available on master and whose main application is to avoid false positives on digitally signed files. HtH, -- aCaB

Re: [Clamav-devel] scanning large zip files - file loaded entirely into (RSS) memory during extraction?

2011-12-12 Thread aCaB
that is memory efficient. After all we're targeting malware which is on avg 2-300 KB in size. What is the purpose of fmap/fmap_need_ptr_once? That's basically an alloc and read. HtH, --aCaB ___ http://lurker.clamav.net/list/clamav-devel.html Please submit

Re: [Clamav-devel] scanning large zip files - file loaded entirely into (RSS) memory during extraction?

2011-12-12 Thread aCaB
mind, sorry. Just to make sure: what part of the code would need refactoring? The unz() function. Cheers, --aCaB ___ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches to our Bugzilla: http://bugs.clamav.net

Re: [Clamav-devel] Error building clamav-0.97.1 in FreeBSD 9.0-CURRENT i386

2011-06-20 Thread aCaB
On 06/20/11 18:57, Renato Botelho wrote: [1] http://www.bayofrum.net/~crees/tinderlogs/clamav-0.97.1.log Can you guys please attach unit_tests/test-suite.log to https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2923 Thanks, -aCaB ___ http

Re: [Clamav-devel] Shipping ClamAV with commercial software

2010-03-10 Thread aCaB
Alexander N. Telegin wrote: Wrong. The first point is I'm asking for advice from experienced [snip] As per the rules of this mailing list, please do not top post. -aCaB ___ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches

Re: [Clamav-devel] Shipping ClamAV with commercial software

2010-03-09 Thread aCaB
a penny to either the software makers, nor to your poor lawyer. Do you really expect any sort of help in here? -aCaB ___ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches to our Bugzilla: http://bugs.clamav.net

Re: [Clamav-devel] ClamAV-clamd av-scanner FAILED and ClamAV-clamscan av-scanner FAILED

2009-08-24 Thread aCaB
at http://bugs.clamav.net/ If you do so make sure you follow the guidelines available at http://www.clamav.net/bugs -aCaB ___ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches to our Bugzilla: http://bugs.clamav.net

Re: [Clamav-devel] Why MD5 signatures prevail?

2009-07-06 Thread aCaB
Ibraheem Khan wrote: Hello Edwin, Thank you for useful information. I have a question as well: 1) Is PE section MD5 signature created from a particular section like code or data or it can be any section. Can be any section. -acab ___ http

Re: [Clamav-devel] [Clamav] Cannot dlopen: file not found - unrar support unavailable

2009-03-25 Thread aCaB
nicolas dumont wrote: Is there a way in my Makefile or elsewhere to have the libclamunrar directly called inside my binary without modifying the call to lt_dlopenext(libclamunrar_iface) ? Your Makefile? Where is it? -aCaB ___ http

Re: [Clamav-devel] [Clamav] Cannot dlopen: file not found - unrar support unavailable

2009-03-25 Thread aCaB
, i can see what's wrong and possibly offer a complete patch. -aCaB ___ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches to our Bugzilla: http://bugs.clamav.net

Re: [Clamav-devel] New ClamAV Milter + Patch

2009-03-02 Thread aCaB
shell/perl mailq -qQ parser, you would probably agree that doing it in the milter is not the way to go. Cheers, -aCaB ___ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches to our Bugzilla: http://bugs.clamav.net

Re: [Clamav-devel] clamav-milter doesn't stop with kill -TERM

2009-01-29 Thread aCaB
libmilter does (and kills clamav-milter on TERM). Please be aware that it may take a few seconds for the process to die. -aCaB ___ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches to our Bugzilla: http://bugs.clamav.net

Re: [Clamav-devel] struct cl_limits questions

2008-12-16 Thread aCaB
changes. HtH, -aCaB ___ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches to our Bugzilla: http://bugs.clamav.net

Re: [Clamav-devel] libtool trouble compiling 0.94.1

2008-11-04 Thread aCaB
Vincent Régnard wrote: Hi all, Compiling 0.94.1 within the same environement as I did without trouble for 0.94, I encounter the following error that stops the compilation process: + make make all-recursive make[1]: Entering directory `/mnt/pitux_data/rpmbuild/RPM/BUILD/clamav-0.94.1'

Re: [Clamav-devel] libtool trouble compiling 0.94.1

2008-11-04 Thread aCaB
(which is older and not compatible). It never triggered before because we were in turn shipping an outdated libtool as well, but at some point due to problems with darwin (IIRC) we had to upgrade. If you can get the reconfigure script to run without --force you should have no problems. -aCaB

Re: [Clamav-devel] ClamAV vs. Wildlist

2008-01-14 Thread aCaB
be greatly appreciated. Thanks! Hi Matt, Check http://www.av-test.org/ for a wildlist-based comparison. -aCaB ___ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches to our Bugzilla: http://bugs.clamav.net

Re: [Clamav-devel] Some considerations about libclamunrar

2007-11-21 Thread aCaB
for pointing it out. -aCaB ___ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches to our Bugzilla: http://bugs.clamav.net

Re: [Clamav-devel] Segfault in libclamav (0.91.2)

2007-09-06 Thread aCaB
Sergey wrote: Is this the gcc 4.1.0 bug only ? What about 3.4.4 and 3.3.3 ? Hi Sergey, no other reports so far, besides 4.1.0 which is b0rked and will likely be blacklisted starting from the next release. It's unfortunate that some distro has got it installed by default. -aCaB

Re: [Clamav-devel] Segfault in libclamav (0.91.2)

2007-09-04 Thread aCaB
and upgrade to at least 4.1.1. Please see https://wwws.clamav.net/bugzilla/show_bug.cgi?id=613 If it's not the case, please provide us with a sample. Thanks, -aCaB ___ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches to our Bugzilla

Re: [Clamav-devel] Freshclam feature to mitigate zero-hour virus impact

2007-08-14 Thread aCaB
... -aCaB ___ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches to our Bugzilla: http://bugs.clamav.net

Re: [Clamav-devel] shutup some warnings

2007-05-22 Thread aCaB
and the bastardized NSIS versions once for all. This will help with your build as well (IIRC you include lzma decompression for 7zip) which I s'pose may have similar problems. aCaB ___ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches

Re: [Clamav-devel] shutup some warnings

2007-05-22 Thread aCaB
of this week. In the meantime stick to stable, comment out the offending code or provide me with a patch. -aCaB ___ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches to our Bugzilla: http://bugs.clamav.net

Re: [Clamav-devel] One problem in filetype.c in clamav0.90

2007-02-28 Thread aCaB
Gianluigi Tiesi wrote: There is a reason if we (clamwin) changed this, we still prefer to skip unknown files, and we don't need to care much about html and mail files, so I've made some tweaks (not only this one) to save some cpu cycles avoiding scan of unneeded files. I'm aware that for a

Re: [Clamav-devel] Signature DB docs and signing server

2006-11-18 Thread aCaB
old enough and if you knew what you were doing you'd probably recall about someone else, back in the dos age, who was feeling very smart. And you'd also remember about a virus which was only spreading when scanned by the smart guy's AV. May Eugene protect your users, -aCaB

Re: [Clamav-devel] version numbers of libclamav shared object

2006-10-24 Thread aCaB
Eugene Crosser wrote: Sorry if this is already found and/or fixed. [...] Anyone interested to verify/investigate this? Hi Eugene, It's been already reported. Just keep an eye to http://bugs.clamav.net if you want to know when it's fixed. Regards

Re: [Clamav-devel] heuristic

2006-10-05 Thread aCaB
testing and FP checking. Regards, -aCaB ___ http://lurker.clamav.net/list/clamav-devel.html

Re: [Clamav-devel] [PATCH] Implement --phish-discovery-mode to gather data for phishing signature creation

2006-09-17 Thread aCaB
Ian Castle wrote: The attached patch is meant for discussion rather than inclusion. Forgot something or was it stripped by mailman? -aCaB ___ http://lurker.clamav.net/list/clamav-devel.html

Re: [Clamav-devel] Virus scanning, private signatures.

2006-01-02 Thread aCaB
James Courtier-Dutton wrote: Is this feature currently available in clamav, or will I have to add it myself? Hi James, it's a faq. sigtool --md5 EVIL.EXE /PATH/TO/YOUR/DB/my_own_database.hdb -aCaB ___ http://lurker.clamav.net/list/clamav-devel.html

Re: [Clamav-devel] Can clamav scan the execute file which in memory?

2005-12-14 Thread aCaB
. The clamav core is somewhat f(seek|read) centric. Therfore adding support for what you ask would mean adding a further level of complexity, wrapping most file functions etc. If you want you can try writing a patch... Regards, -aCaB ___ http

Re: [Clamav-devel] winldra.exe

2005-12-05 Thread aCaB
James Courtier-Dutton wrote: How else can I report this? 1) Point your browser to http://www.clamav.net/ 2) Click on the submit a sample link 3) Hold on please... 4) Fill in the various fields 5) Hit the submit button ___

Re: [Clamav-devel] (no subject)

2005-06-30 Thread aCaB
at clamav.net and ask him to consider integrating it. Cheers, acab ___ http://lurker.clamav.net/list/clamav-devel.html

Re: [Clamav-devel] signatures howto for small, polimorphic viruses

2004-06-15 Thread aCaB
Gabor FUNK ha scritto: http://www.clamav.net/doc/0.72/signatures.pdf That's the one I thought I will also make a tutorial on how to get a proper signature on a virus by using hiew/biew and other tools. Un(?)fortunately, I started with maltese (http://vil.nai.com/vil/content/v_752.htm). [no, the

Re: [Clamav-devel] recognizing pats within text bodies?

2003-08-16 Thread aCaB
this can be very tricky and painful to implement but would still be appreciated Thanks, acab Tomasz Kojm ha scritto: On Thu, 14 Aug 2003 13:12:20 -0400 Bennett Todd [EMAIL PROTECTED] wrote: For funsies, I decided to play around with adding Eicar to my .sig. I was unsurprised that clamscan nailed

Re: [clamav-devel] ehrm....

2003-06-27 Thread aCaB
submission sent via Hotmail is rejected doesn't mean that the clamav db contains it. On Fri, 27 Jun 2003, clamav wrote: if its blocked, it means they're already in the db. so why submit them? otherwise zipping them with the password 'virus' is the suggested method i believe. aCaB wrote: I've