Re: [Clamav-users] clamscan doesn't detect virus in .zip

2004-01-06 Thread Odhiambo Washington
* Tomasz Papszun [EMAIL PROTECTED] [20040105 19:50]: wrote: On Mon, 05 Jan 2004 at 13:32:31 -0300, René Bellora wrote: Tomasz Papszun wrote: A blind shot: does it make a difference if you run 'clamscan -r videos.zip'?... it doesn't: # clamscan -r videos.zip videos.zip: OK

[Clamav-users] Which list

2004-01-06 Thread Chris Hastie
There appears to be some discussion going on on the Clamav-virusdb list this morning. I was under the impression that list was an announcement only list notifying of updates to the virus databases. Can this policy not be enforced somehow, restricting who can post to the list and ensuring the

[Clamav-users] Another sample that --mbox dosn't detect

2004-01-06 Thread Diego d'Ambra
Following up on discussion yesterday about option --mbox not being able to detect virus I've found another sample. Since the sample has been sent to ClamAV through the ClamAV submission system, I've remove any private information from the sample that can be downloaded at

Re: [Clamav-users] Which list

2004-01-06 Thread Tomasz Papszun
On Tue, 06 Jan 2004 at 10:48:12 +, Chris Hastie wrote: There appears to be some discussion going on on the Clamav-virusdb list this morning. I was under the impression that list was an announcement only list notifying of updates to the virus databases. Can this policy not be enforced Your

[Clamav-users] clamuko: corrupt or unknown clamd scanner error or memory/resource/perms problem - exit status 2

2004-01-06 Thread Dilip M
Hi , I'm running Qmail on machine is Redhat 7.3 Everything was fine till i upgraded Clam-AV from 0-60 to 0.65. Just Complied clam-av 0.65 as per http://www.qmailrocks.org/qmailscanner_db.htm i'm held up in this stage :( # ./test_installation.sh -doit setting QMAILQUEUE to

[Clamav-users] OLE2 unpacker

2004-01-06 Thread Trog
In case anyone is interested... I have completed the first version of an OLE2 file unpacker (as used in MS Office Documents = Office97). It is currently at: http://www.uncon.org/files/ole2extract.c Should extract all component files from Office documents. Am interested in failures. Haven't

Re: [Clamav-users] Another sample that --mbox dosn't detect

2004-01-06 Thread Nigel Horne
On Tuesday 06 Jan 2004 11:49 am, Diego d'Ambra wrote: Following up on discussion yesterday about option --mbox not being able to detect virus I've found another sample. I can see what's wrong. I'll look into it ASAP and upload a fix to CVS. Any DB maintainers that want to take a look at the

[Clamav-users] Which list

2004-01-06 Thread Tomasz Kojm
On Tue, 6 Jan 2004 10:48:12 + Chris Hastie [EMAIL PROTECTED] wrote: There appears to be some discussion going on on the Clamav-virusdb list this morning. I was under the impression that list was an announcement only list notifying of updates to the virus databases. Can this policy not be

Re: [Clamav-users] OLE2 unpacker

2004-01-06 Thread Tomasz Kojm
On Tue, 06 Jan 2004 12:56:06 + (GMT) Trog [EMAIL PROTECTED] wrote: In case anyone is interested... I have completed the first version of an OLE2 file unpacker (as used in MS Office Documents = Office97). It is currently at: http://www.uncon.org/files/ole2extract.c Should extract

[Clamav-users] Exim paniclog says clamd: buffer too small

2004-01-06 Thread Mark Douglas
Hello I can't seem to find a reference to this anywhere. I'm running exim- 4.24 with exiscan-acl patch revision 13 and clamav 0.65. Clamd died on New Years Eve, causing all mail to be rejected with a 451. Simply restarting it resulted in its falling over regularly (apparently every time it

Re: [Clamav-users] OLE2 unpacker

2004-01-06 Thread Trog
Quoting Tomasz Kojm [EMAIL PROTECTED]: Looks great. I will test it against our all infected word document samples today night. If you need some samples just let me know. I've tested it against my collection of 345 Word and 58 Excel macro virus sample documents without any problems. At this

[Clamav-users] Some basics doubts :)

2004-01-06 Thread Dilip M
Hi, I just got Clam-AV and Freshclam working :) Was little tough :( I'm running Qmail on Redhat7.3 # more /var/log/clam-update.log ClamAV update process started at Tue Jan 6 20:03:08 2004 main.cvd is up to date

Re: [Clamav-users] Some basics doubts :)

2004-01-06 Thread Tomasz Kojm
On Tue, 06 Jan 2004 20:14:43 +0530 Dilip M [EMAIL PROTECTED] wrote: My clam-update.log is as aboveis it up2date ? Yes, your virus database is up to date. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] www.ClamAV.net (\/)\.

Re: [Clamav-users] Some basics doubts :)

2004-01-06 Thread Tomasz Papszun
On Tue, 06 Jan 2004 at 20:14:43 +0530, Dilip M wrote: My clam-update.log is as aboveis it up2date ? Yes. Sometime back read that if we send mail to some site,it will reply with virus! Which ID ? so that i come to know that my clam-av in up2date and working fine:) I don't know such

[Clamav-users] clamd not starting

2004-01-06 Thread Matt
I'm running clamscan 0.65 and it was working until the server was rebooted... now clamd won't start.. [EMAIL PROTECTED] root]# /usr/local/sbin/clamd -V clamd / ClamAV version 0.65 however doing a /usr/local/sbin/clamd just causes it to pause for a moment then return to the command prompt and it

Re: [Clamav-users] clamd not starting

2004-01-06 Thread Carl Holtje ;021;vcsg6;
First thing to check: was the socket (/tmp/clamd) removed? If not, this will prevent clamd from loading... Hope it helps.. Carl On Tue, 6 Jan 2004, Matt wrote: I'm running clamscan 0.65 and it was working until the server was rebooted... now clamd won't start.. [EMAIL PROTECTED] root]#

Re: [Clamav-users] clamd not starting

2004-01-06 Thread Matt
that did it! blah... stupid little thing =) On Tue, 2004-01-06 at 14:03, Carl Holtje ;021;vcsg6; wrote: First thing to check: was the socket (/tmp/clamd) removed? If not, this will prevent clamd from loading... Hope it helps.. Carl On Tue, 6 Jan 2004, Matt wrote: I'm running

Re: [Clamav-users] clamd not starting

2004-01-06 Thread Carl Holtje ;021;vcsg6;
In your shutdown scripts, you might include a little block similar to: if [ -S /tmp/clamd ] then `rm /tmp/clamd` fi to ensure a clean restart... Carl On Tue, 6 Jan 2004, Matt wrote: that did it! blah... stupid little thing =) On Tue, 2004-01-06 at 14:03, Carl Holtje

Re: [Clamav-users] clamd not starting

2004-01-06 Thread Tomasz Kojm
On Tue, 6 Jan 2004 14:44:15 -0500 (EST) Carl Holtje ;021;vcsg6; [EMAIL PROTECTED] wrote: In your shutdown scripts, you might include a little block similar to: if [ -S /tmp/clamd ] then `rm /tmp/clamd` fi to ensure a clean restart... or enable FixStaleSocket in

Re: [Clamav-users] clamscan --mbox doesn't detect a virus

2004-01-06 Thread René Bellora
Nigel Horne wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Monday 05 Jan 2004 6:12 pm, René Bellora wrote: Fedora Core 1 Same as me. I don't know what else to suggest. may be compare md5 hashes of the build directory? regards, René

Re: [Clamav-users] Some basics doubts :)

2004-01-06 Thread Christoph Cordes
Hello Dilip, Tuesday, January 6, 2004, 3:44:43 PM, you wrote: DM Hi, DM I just got Clam-AV and Freshclam working :) Was little tough :( DM I'm running Qmail on Redhat7.3 DM # more /var/log/clam-update.log DM DM

Re: [Clamav-users] Some basics doubts :)

2004-01-06 Thread Dilip M
On Tue, 6 Jan 2004 21:58:07 +0100, Christoph Cordes [EMAIL PROTECTED] wrote: Hello Dilip, Tuesday, January 6, 2004, 3:44:43 PM, you wrote: DM Hi, DM I just got Clam-AV and Freshclam working :) Was little tough :( DM I'm running Qmail on Redhat7.3 DM # more /var/log/clam-update.log DM