Re: [Clamav-users] Re: clamd: cant save pid in file socket file is in use by another process

2004-02-05 Thread Thomas Lamy
mario kammerer wrote: Am Thu, 5 Feb 2004 00:11:23 +0100 hat Tomasz Kojm [EMAIL PROTECTED] geschrieben: On Wed, 04 Feb 2004 23:40:35 +0100 mario kammerer [EMAIL PROTECTED] wrote: 1)ERROR: Socket file /tmp/clamd exists. Either remove it, or configure a different one. Enable FixStaleSocket in

[Clamav-users] Freshclam on Win32 issues MD5 verification error

2004-02-05 Thread Ignasi Prat
Hi Clamav users: I'm running the Clamav Win32 version and it is working pretty well until I try to automatically update the database with freshclam. If I update the database by downloading manually the .CVDfiles to the "\share\clamav" dir everything is fine. But when I try to run the

Re: [Clamav-users] Contents of DBDIR {Scanned}

2004-02-05 Thread Jo Mills
On Wed, Feb 04, 2004 at 11:44:05AM -0600, Justin wrote: On Wed, 4 Feb 2004, Jo Mills wrote: Justin, Just a thought - what was the return code from freshclam? Was it 1 by any chance? I would be interested to know. Thanks for the reply, Jo. It looks like it's exiting with a 1.

Re: [Clamav-users] CG Pro and ClamAV finds virus but can't find it when scanning with clamscan manually

2004-02-05 Thread Kristof Hardy
Fajar A. Nugraha wrote: Interesting. Can you make the .msg file available online? I'd like too see it. Thanks, it's available at http://pot.catsanddogs.com/~kristof/40820.msg System is Red Hat 9, running CgPro and cgpav-1.3 What? A 1.3 already? I didn't know. Thanks for mentioning. I've only

Re: [Clamav-users] CG Pro and ClamAV finds virus but can't find it when scanning with clamscan manually

2004-02-05 Thread Fajar A. Nugraha
This is simply because CGP uses non-standar mbox format. e.g. it adds these lines on top : P I 04-02-2004 16:35:40 [EMAIL PROTECTED] R W 04-02-2004 16:35:40 _FY_ [EMAIL PROTECTED] O L Before the header Received: by mail.area013.be (CommuniGate Pro PIPE 4.1.4) with PIPE

Re: [Clamav-users] CG Pro and ClamAV finds virus but can't find it when scanning with clamscan manually

2004-02-05 Thread Tomasz Papszun
On Thu, 05 Feb 2004 at 10:07:24 +0100, Kristof Hardy wrote: Interesting. Can you make the .msg file available online? I'd like too see it. Thanks, it's available at http://pot.catsanddogs.com/~kristof/40820.msg Clamscan doesn't find a virus because this file is not in the standard email

Re: [Clamav-users] Freshclam on Win32 issues MD5 verification error

2004-02-05 Thread Ignasi Prat
I'm running clamav on a Windows XP machine. I've granted all rights to the user in all the clamav tree. The ClamAV was downloaded yesterday, and the compilation seems the same (isn't it ?): C:\clamav-devel\binfreshclam -V freshclam / ClamAV version devel-20031125 C:\clamav-devel\binfreshclam

[Clamav-users] intercepted mails

2004-02-05 Thread Japhet Samson
I have installed clamav with clamav-milter enabled, and it is working fine. It intercepts mails with Sco.A virus, but it sends a copy of alert to the sender, recipient and postmaster. I get alot bounce messages because most of senders addresses are not valid addresses. can somebody show me how to

Re: [Clamav-users] Freshclam on Win32 issues MD5 verification error

2004-02-05 Thread Ignasi Prat
I specifically delete all .cvd and adjust my mirros.txt again and it still works fine C:\clamav-devel\binfreshclam ClamAV update process started at Thu Feb 5 16:57:43 2004 Reading CVD header (main.cvd): OK Downloading main.cvd [*] main.cvd updated (version: 19, sigs: 19987, f-level: 1,

[Clamav-users] Clamav and quoted-printable

2004-02-05 Thread Bruno Treguier
Hi everyone, First of all, I'm a recent clamav user (I know, I know, I should NOT be ! :-) ), so please be indulgent with me. I however, of course searched the archives in order to see whether my problem had a solution, but found nothing relevant. I may have missed something, though. Here is my

Re: [Clamav-users] Freshclam on Win32 issues MD5 verification error

2004-02-05 Thread Ignasi Prat
Please don't top-post. Answer _below_ previous messages, not above them. Remove unneeded fragments of previous messages when quoting. Especially commercial footers, mailing list footers, big signatures. Note that I haven't removed them in this message deliberately - to show you how ugly

Re: [Clamav-users] [Debug info] sig 11 crashes with clamav-milter on FreeBSD

2004-02-05 Thread Nigel Horne
On Thursday 05 Feb 2004 1:00 am, Ryan wrote: Hi again, Please see my original post for background information: http://www.mail-archive.com/[EMAIL PROTECTED]/msg04704.htm I couldn't see the version of clamav-milter in either this post or the background information one. Please do clamav-milter

Re: [Clamav-users] Clamav and quoted-printable

2004-02-05 Thread Tomasz Papszun
On Thu, 05 Feb 2004 at 12:09:00 +0100, Bruno Treguier wrote: [...] Here is my problem: I submitted yesterday a new version of the paypal trojan, which has been accepted as Trojan.Spy.Paypal.A. My submission was made via the web service. The mail was an text/html one, with a

Re: [Clamav-users] Freshclam on Win32 issues MD5 verification error

2004-02-05 Thread Ignasi Prat
Is MD5 signature packed with CVD files ? could I force a signature test with a downloaded file to try to separate a download problem of another kind of problem ? Yes, 'sigtool -i main.cvd ; sigtool -i daily.cvd'. Directly http (at avmirror2.prod.rxgsys.com/database/) downloaded files give

Re: [Clamav-users] Freshclam on Win32 issues MD5 verification error

2004-02-05 Thread Tomasz Papszun
On Thu, 05 Feb 2004 at 13:15:24 +0100, Ignasi Prat wrote: Yes, 'sigtool -i main.cvd ; sigtool -i daily.cvd'. Directly http (at avmirror2.prod.rxgsys.com/database/) downloaded files give this beautiful result: C:\clamav-devel\binsigtool -i /cygdrive/c/clamav-devel/share/clamav/main.cvd

Re: [Clamav-users] Clamav and quoted-printable

2004-02-05 Thread Bruno Treguier
On Thu, Feb 05, 2004 at 12:35:06PM +0100, Tomasz Papszun wrote: On Thu, 05 Feb 2004 at 12:09:00 +0100, Bruno Treguier wrote: [...] Here is my problem: I submitted yesterday a new version of the paypal trojan, which has been accepted as Trojan.Spy.Paypal.A. My submission was made via the

RE: [Clamav-users] Freshclam on Win32 issues MD5 verification error

2004-02-05 Thread Tim McGarvey
No ideas about how to solve this, but I get exactly the same behavior running 0.65, as well as 20040203 devel version. Running on Win32 as well (Windows 2k server) and CygWin. Tim McGarvey -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of

[Clamav-users] downgraded to 0.60 - 0.65 didnt work for me at all sind last days

2004-02-05 Thread mario kammerer
hi all! i have to say that i had to go back to version 0.60. 0.65 didnt work @ all for me last days since the new worm is out. high processor, everytime messages from clam concerning low memory, socket error, cant save pid and so on and so on. couldnt solve any problem i had with 0.65.

[Clamav-users] MailScanner and Clam Av

2004-02-05 Thread Allan Machado
I installed the Clamav and MailScanner, now this is appearing in maillog: ProcessClamAVOutput: unrecognised line Full path: /var/spool/MailScanner/incoming/18195/.. Please contact the authors. What´s worng? Best Regards, Allan Machado Linux User 154453 -- Esta mensagem foi

[Clamav-users] CVD location on database Mirror : / or /database (WAS Re: [Clamav-users] Freshclam on Win32 issues MD5 verification error)

2004-02-05 Thread Fajar A. Nugraha
Ignasi Prat wrote: Directly http (at avmirror2.prod.rxgsys.com/database/) downloaded files give this beautiful result: You know what, your post (and a recent short fiasco on my server) made me try out most ClamAV mirrors. The result is quite surprising As I recalled, there was an entry on

Re: [Clamav-users] Clamav-milter runaway process problems

2004-02-05 Thread Nigel Horne
On Thursday 05 Feb 2004 2:03 pm, Mike Brodbelt wrote: I've made the odd bit of noise about this on the list before, but I'm repeating myself because this particular problem is inordinately painful for me... Two other questions - has clamd died? Have you set userprocesses in clamav.conf?

Re: [Clamav-users] downgraded to 0.60 - 0.65 didnt work for me at all sind last days

2004-02-05 Thread Fajar A. Nugraha
mario kammerer wrote: _hi_ http://www.eclipsecon.org/osdn all! i have to say that i had to go back to version 0.60. 0.65 didnt work @ all for me last days since the new worm is out. high processor, everytime messages from clam concerning low memory, socket error, cant save pid and so on and so

Re: [Clamav-users] Freshclam on Win32 issues MD5 verification error

2004-02-05 Thread Ignasi Prat
No ideas about how to solve this, but I get exactly the same behavior running 0.65, as well as 20040203 devel version. Running on Win32 as well (Windows 2k server) and CygWin. Tim McGarvey I'm running here at WinXP. Ignasi Prat

Re: [Clamav-users] CVD location on database Mirror : / or /database (WAS Re: [Clamav-users] Freshclam on Win32 issues MD5 verification error)

2004-02-05 Thread Ignasi Prat
I guess it's safe to conclude that new versions (mine is devel-20040204) looks for *.cvd in /, not in /database. However OLDER versions (in this case devel-20031125, the one used to make Win32 binary) seems to looks for *.cvd in /database, which would explain the Verification: MD5

Re: [Clamav-users] [Debug info] sig 11 crashes with clamav-milter on FreeBSD

2004-02-05 Thread Ryan
Nigel Horne wrote to [EMAIL PROTECTED]: On Thursday 05 Feb 2004 1:00 am, Ryan wrote: Hi again, Please see my original post for background information: http://www.mail-archive.com/[EMAIL PROTECTED]/msg04704.htm I couldn't see the version of clamav-milter in either this post or the

Re: [Clamav-users] [Debug info] sig 11 crashes with clamav-milter on FreeBSD

2004-02-05 Thread Nigel Horne
On Thursday 05 Feb 2004 3:38 pm, you wrote: ttyp1 [EMAIL PROTECTED]:/staff/ryan $ clamav-milter --version ClamAV version 0.65, clamav-milter version 0.60p This is very old, but it is true that it is the most up to date release version. The new version of clamAV, 0.66, will include many

[Clamav-users] Re: downgraded to 0.60 - 0.65 didnt work for me at all sind last days

2004-02-05 Thread mario kammerer
Am Thu, 05 Feb 2004 21:36:02 +0700 hat Fajar A. Nugraha [EMAIL PROTECTED] geschrieben: mario kammerer wrote: _hi_ http://www.eclipsecon.org/osdn all! i have to say that i had to go back to version 0.60. 0.65 didnt work @ all for me last days since the new worm is out. high processor,

Re: [Clamav-users] Clamav-milter runaway process problems

2004-02-05 Thread Mike Brodbelt
Nigel Horne wrote: On Thursday 05 Feb 2004 2:03 pm, Mike Brodbelt wrote: I've made the odd bit of noise about this on the list before, but I'm repeating myself because this particular problem is inordinately painful for me... Two other questions - has clamd died? No - clamdscan still

Re: [Clamav-users] Logrotate won't restart clamd

2004-02-05 Thread Frank Richter
Hi, I have the same problem (0.65 and devel). It seems the signal handling isn't sufficient. In clamd/server.c sighup is set, but it seems it's never really used to re-open the logfile. case SIGHUP: sighup = 1; - Frank -- Email: [EMAIL PROTECTED] http://www.tu-chemnitz.de/~fri/ Work:

[Clamav-users] Re: ClamAV process seems to be taking forever

2004-02-05 Thread Chris Barnes
Ing. Germán González B. [EMAIL PROTECTED] wrote: In RH /etc/sysconfig/clamav-milter Gracias. -- + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Chris Barnes AOL IM: CNBarnes [EMAIL PROTECTED] Yahoo IM: chrisnbarnes

Re: [Clamav-users] Clamav-milter runaway process problems

2004-02-05 Thread Nigel Horne
On Thursday 05 Feb 2004 4:15 pm, Mike Brodbelt wrote: No - clamdscan still works, or did last time I tested it. What operating system? What arguments are you giving to clamav-milter? Are you using UNIX or TCP sockets to talk to clamd? -Nigel -- Nigel Horne. Arranger, Composer, Typesetter.

Re: [Clamav-users] [Debug info] sig 11 crashes with clamav-milter on FreeBSD

2004-02-05 Thread Ryan
Nigel Horne wrote to [EMAIL PROTECTED]: On Thursday 05 Feb 2004 3:38 pm, you wrote: ttyp1 [EMAIL PROTECTED]:/staff/ryan $ clamav-milter --version ClamAV version 0.65, clamav-milter version 0.60p This is very old, but it is true that it is the most up to date release version. The

Re: [Clamav-users] Clamav-milter runaway process problems

2004-02-05 Thread Nigel Horne
On Thursday 05 Feb 2004 4:15 pm, Mike Brodbelt wrote: Have you set userprocesses in clamav.conf? No. First I've heard of it - what does it do? Not work. Mike. -Nigel -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED]

Re: [Clamav-users] Clamav-milter runaway process problems

2004-02-05 Thread Gianmarco Giovannelli
At 05/02/2004, you wrote: Hi, I've made the odd bit of noise about this on the list before, but I'm repeating myself because this particular problem is inordinately painful for me... Running Clamav and clamav-milter (now the 20040204 snapshot, but this is an ongoing issue) with sendmail 8.12.10,

Re: [Clamav-users] [Debug info] sig 11 crashes with clamav-milter on FreeBSD

2004-02-05 Thread Ryan
snapshot from CVS. Well, sure.. I'll jump on that this afternoon. It couldn't be less stable than what I'm using now. :-) OK. I tested and am now running the following: ttyp0 [EMAIL PROTECTED]:/etc/mail # clamav-milter --version ClamAV version devel-20040205, clamav-milter version 0.66k

[Clamav-users] clamav-milter (notifications setup)

2004-02-05 Thread Sergey
:46:39 host clamav-milter[24411]: clamfi_envfrom: [EMAIL PROTECTED] Feb 5 23:46:39 host clamav-milter[24411]: clamfi_envrcpt: [EMAIL PROTECTED] Feb 5 23:46:39 host clamav-milter[24411]: clamfi_envrcpt: [EMAIL PROTECTED] I use curient snapshot (clamav-devel-20040205) Where I wrong ? -- Regards

[Clamav-users] Error when running make for version 0.66k

2004-02-05 Thread Christopher Lindley
I am trying to upgrade to clamav-milter 0.66k when I run make I get the following errors: /home/clindley/clamav-0.65/clamav-milter/clamav-milter.c:877: undefined reference to `cli_strtok' clamav-milter.o(.text+0x79f):/home/clindley/clamav-0.65/clamav-milter/clamav-milter.c:894:

RE: [Clamav-users] [Debug info] sig 11 crashes with clamav-milter on FreeBSD

2004-02-05 Thread Michael St. Laurent
Ryan mailto:[EMAIL PROTECTED] wrote: OK. I tested and am now running the following: ttyp0 [EMAIL PROTECTED]:/etc/mail # clamav-milter --version ClamAV version devel-20040205, clamav-milter version 0.66k It seems to, thus far, be working perfectly... bouncing about a dozen SCO

[Clamav-users] Accessing the virus-db via php or perl

2004-02-05 Thread Luc de Louw
Hi all, I want to set up a website were people can check if a particular virus is allready in the database. I know, there is the r/o mailinglist on sourceforge, but most of my customers do not speak english. I most propably will set up a multi-language website for checking that. What I need

Re: [Clamav-users] Clamav-milter runaway process problems

2004-02-05 Thread Tomasz Kojm
On Thu, 05 Feb 2004 19:38:26 +0100 Gianmarco Giovannelli [EMAIL PROTECTED] wrote: Thu Feb 5 11:34:54 2004 - Accepted connection on port 57892, fd 35 Thu Feb 5 11:35:27 2004 - Accepted connection on port 9254, fd 35 Thu Feb 5 11:41:32 2004 - Session 1 stopped due to timeout. Thu Feb 5

RE: [Clamav-users] [Debug info] sig 11 crashes with clamav-milter on FreeBSD

2004-02-05 Thread Troy Monaghen
On Thu, 2004-02-05 at 15:30, Michael St. Laurent wrote: Ryan mailto:[EMAIL PROTECTED] wrote: I would like to test by sending myself the test signature. Could someone let me know the best way to do that? Send yourself one of the EICAR test files from:

[Clamav-users] Can't seem to get clamav-milter to scan mail

2004-02-05 Thread Michael St. Laurent
I've installed the: https://www.olen.net/downloads/clamav-20040204-1.i386.rpm https://www.olen.net/downloads/clamav-milter-20040204-1.i386.rpm packages and followed the directions at: /usr/share/doc/clamav-milter-20040204/RPM-clamav-milter.txt These instructions are:

Re: [Clamav-users] Accessing the virus-db via php or perl

2004-02-05 Thread Tomasz Kojm
On Thu, 05 Feb 2004 22:43:41 +0100 Luc de Louw [EMAIL PROTECTED] wrote: What I need to know is: What format has the database? bdb? gnudb? somthing else? The simplest way to get the virus list is to execute sigtool -l (CVS version required). Best regards, Tomasz Kojm -- oo.

Re: [Clamav-users] clamav-milter (notifications setup)

2004-02-05 Thread Nigel Horne
On Thursday 05 Feb 2004 8:12 pm, Sergey wrote: I need to disable user notification then virus detected... I See key in man, but it's not work. :-( # ps ax|grep clamav-mi 22331 ?SN 0:00 clamav-milter -obl local:/var/run/clmilter.sock -p [EMAIL PROTECTED] --postmaster-only Try

Re: [Clamav-users] Error when running make for version 0.66k

2004-02-05 Thread Nigel Horne
On Thursday 05 Feb 2004 8:48 pm, Christopher Lindley wrote: I am trying to upgrade to clamav-milter 0.66k when I run make I get the following errors: /home/clindley/clamav-0.65/clamav-milter/clamav-milter.c:877: undefined reference to `cli_strtok'

Re: [Clamav-users] Accessing the virus-db via php or perl

2004-02-05 Thread Luc de Louw
Tomasz Kojm wrote: On Thu, 05 Feb 2004 22:43:41 +0100 Luc de Louw [EMAIL PROTECTED] wrote: What I need to know is: What format has the database? bdb? gnudb? somthing else? The simplest way to get the virus list is to execute sigtool -l (CVS version required). I cvs co the latest CVS version

Re: [Clamav-users] Can't seem to get clamav-milter to scan mail

2004-02-05 Thread Nigel Horne
On Thursday 05 Feb 2004 10:31 pm, Michael St. Laurent wrote: Unfortunately, I am *not* having good luck. None of the emails are actually being scanned by clamav. If you do a ps is clamav-milter running? Any clues in /var/log/maillog and /var/log/messages? Is clamd running? When you say

Re: [Clamav-users] Accessing the virus-db via php or perl

2004-02-05 Thread Tomasz Papszun
On Fri, 06 Feb 2004 at 0:05:50 +0100, Luc de Louw wrote: Tomasz Kojm wrote: The simplest way to get the virus list is to execute sigtool -l (CVS version required). I cvs co the latest CVS version compilation was fine, and I tried: bond:/usr/local/clamav-devel # sigtool -l

RE: [Clamav-users] Error when running make for version 0.66k

2004-02-05 Thread Christopher Lindley
Operating system is Redhat ES 3.0 Parameters given to configure were --enable-milter I did not make distclean I extracted the latest stable clamav tar and replaced the files in the clamav-milter directory with the new versions found at

RE: [Clamav-users] Can't seem to get clamav-milter to scan mail

2004-02-05 Thread Michael St. Laurent
Nigel Horne mailto:[EMAIL PROTECTED] wrote: Unfortunately, I am *not* having good luck. None of the emails are actually being scanned by clamav. If you do a ps is clamav-milter running? Yes. ps -elf | grep clamav-milter returns: 1 S clamav1857 1 0 75 0- 2479 schedu 13:40

Re: [Clamav-users] eicar test

2004-02-05 Thread russ
On Thu, 2004-02-05 at 21:30, Edmund wrote: Test #11: Eicar virus within a ZIP file Test #13: Eicar virus sent in a Microsoft TNEF file (winmail.dat) Have you edited the clamav.conf file to scan zip files? You also need to install the tnef package for tnef capabilities. HTH -- Russel Oliver

[Clamav-users] MD5 error

2004-02-05 Thread Thomas Kinghorn
Hi List. My platform is RH8, using clamav0.65 This morning I got the log message below: ERROR: Verification: MD5 verification error. This is the first time this has happened. Are there any issues with the database this morning? Thanks in advance. Regards, Tom Kinghorn