How are virues like IRC.LXD.A, IRC.Gadez.A encountered
? When a user submit a virus, how do clamav team know
that they are of IRC types ??? Just curious .
__
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.
On Thu, 28 Apr 2005 15:09:37 -0700, Todd Lyons <[EMAIL PROTECTED]>
wrote:
>Chris de Vidal wanted us to know:
>
>>Is our situation that foreign? I was half expecting someone to tell me
>>"We have a 5TB FTP server and can scan it all under 40 minutes with .25
>>extra load average! You just have to
- Original Message -
From: "Jim Maul" <[EMAIL PROTECTED]>
To: "ClamAV users ML"
Sent: Friday, April 29, 2005 10:20 PM
Subject: Re: [Clamav-users] Zip module failures and Malformedhexstrings
and0viruses, Oh my!
> Brian Morrison wrote:
> > On Fri, 29 Apr 2005 12:09:16 -0500 in
> > [EMAIL
> i get this error - trying to send e-mails thorough my mail server . i have
> tried to stop clamd and Mimedefang . but it just works for 3-4 min and
then
> this error comes again
>
> Any Idea how to solve -
>
>
> An unknown error has occurred. Subject 'Re: aaq', Account:
> 'mail.worldcall.net.
On Fri, 2005-04-29 at 14:22 -0400, Andre Nicholson wrote:
> Homepage says 0.83 is the latest stable although the SourceForge download
> page has 0.84,
> released today at 11:12, as available.
>
> Is there something wrong with the release or has an announcement just been a
> little late?
The ann
Homepage says 0.83 is the latest stable although the SourceForge download page
(Bhas 0.84,
(Breleased today at 11:12, as available.
(B
(BIs there something wrong with the release or has an announcement just been a
(Blittle late?
(B
(BAndre
(B
(B___
Tomasz Kojm wrote:
> On Thu, 28 Apr 2005 17:01:24 -0700
> Kurt Buff <[EMAIL PROTECTED]> wrote:
>
> > Tomasz Kojm wrote:
> > > ClamAV 0.90 will support the NodalCore hardware accelerator:
> > >
> > > http://sourceforge.net/forum/forum.php?forum_id=458047
> >
> > > With hw acceleration my old Athlo
THAT'S IT !!!
Really, the clamd.log had some permission issues, but I had not noticed that
because clamd was logging into the file successfully:
Fri Apr 29 14:50:12 2005 -> +++ Started at Fri Apr 29 14:50:12 2005
Also, in version .80 the log was done by the stream function
(StreamSaveToDisk o
* Wash <[EMAIL PROTECTED]> [20050429 20:54]: wrote:
> * Jose Luis Hime <[EMAIL PROTECTED]> [20050429 20:48]: wrote:
> > I just want a separated log file for clamav messages. If I can do that using
> > the syslog, that is ok to me. Could you send how to configure that? I
* Jose Luis Hime <[EMAIL PROTECTED]> [20050429 20:48]: wrote:
> I just want a separated log file for clamav messages. If I can do that using
> the syslog, that is ok to me. Could you send how to configure that? I would
> appreciate a lot!
mkdir /var/log/clamav/
chown -R clamav
I just want a separated log file for clamav messages. If I can do that using
the syslog, that is ok to me. Could you send how to configure that? I would
appreciate a lot!
On the other hand, it seems clamd has a little problem with its own log
function (but I am no sure about that!). May be this co
Jose Luis Hime wrote:
> If I use the option "LogSyslog", then the viruses are logged into the
> file/var/log/maillog correctly. Thanks for your tip, it opened my eyes
> to that.
>
> The problem is that I want a specific logfile to be used, not through
> the Linux syslog function. So I commented o
Jose Luis Hime wrote:
If I use the option "LogSyslog", then the viruses are logged into the file
/var/log/maillog correctly. Thanks for your tip, it opened my eyes to that.
The problem is that I want a specific logfile to be used, not through the
Linux syslog function. So I commented out the "LogSy
If I use the option "LogSyslog", then the viruses are logged into the file
/var/log/maillog correctly. Thanks for your tip, it opened my eyes to that.
The problem is that I want a specific logfile to be used, not through the
Linux syslog function. So I commented out the "LogSyslog" option, forcing
Scott Henderson @ Bunzl Phoenix wrote:
Have a look at the binary packages pages on www.clamav.net,
there are
two packagers there Petr Kristof and DAG. Both do RPMs that can be
easily rebuilt on RedHat systems, although I'll admit I
haven't used
RH
7.3 in a while now.
Im running Petr's clamav
> > Have a look at the binary packages pages on www.clamav.net,
> there are
> > two packagers there Petr Kristof and DAG. Both do RPMs that can be
> > easily rebuilt on RedHat systems, although I'll admit I
> haven't used
> > RH
> > 7.3 in a while now.
>
> Im running Petr's clamav package on
Brian Morrison wrote:
On Fri, 29 Apr 2005 12:09:16 -0500 in
[EMAIL PROTECTED] "Scott
Henderson @ Bunzl Phoenix" <[EMAIL PROTECTED]> wrote:
I don't see how to upgrade...
Which OS are you using? It may be possible to get a packaged
version and install that, if it is in a different directory
then y
On Fri, 29 Apr 2005 12:09:16 -0500 in
[EMAIL PROTECTED] "Scott
Henderson @ Bunzl Phoenix" <[EMAIL PROTECTED]> wrote:
> > > I don't see how to upgrade...
> >
> > Which OS are you using? It may be possible to get a packaged
> > version and install that, if it is in a different directory
> > then
* Brian Morrison <[EMAIL PROTECTED]> [20050429 19:40]: wrote:
> On Fri, 29 Apr 2005 19:31:10 +0300 in
> [EMAIL PROTECTED] Odhiambo Washington
> <[EMAIL PROTECTED]> wrote:
>
> > IIRC, clamav-0.65 is nolonger unsupported and might not be able to
> > access t
> > I don't see how to upgrade...
>
> Which OS are you using? It may be possible to get a packaged
> version and install that, if it is in a different directory
> then you can get the configuration sorted out before letting
> it loose on your mail.
> Brian Morrison
Red Hat 7.3 (kernel = 2.4.
Jose Luis Hime wrote:
> It did not work. This option is required if I would be using the
> "LogSyslog" option. I tested it, just to check it out, but nothing
> happened again.
Have you rotated the log without notifying Clam?
Matt
___
http://lurker.c
On Fri, 29 Apr 2005 11:46:46 -0500 in
[EMAIL PROTECTED] "Scott
Henderson @ Bunzl Phoenix" <[EMAIL PROTECTED]> wrote:
> > This is easy to solve ;-)
> > 1. Upgrade to clamav-0.84rc2 - it is very stable.
> > Run freshclam to get a new copy of the viruses db.
> >
> > IIRC, clamav-0.65 is nolonger uns
* Scott Henderson @ Bunzl Phoenix <[EMAIL PROTECTED]> [20050429 19:47]: wrote:
> > This is easy to solve ;-)
> > 1. Upgrade to clamav-0.84rc2 - it is very stable.
> > Run freshclam to get a new copy of the viruses db.
> >
> > IIRC, clamav-0.65 is nolonger unsup
Scott Henderson @ Bunzl Phoenix said:
>> This is easy to solve ;-)
>> 1. Upgrade to clamav-0.84rc2 - it is very stable.
>> Run freshclam to get a new copy of the viruses db.
>>
>> IIRC, clamav-0.65 is nolonger unsupported and might not be
>> able to access the new db types.
>
> Thank you. I've nev
> This is easy to solve ;-)
> 1. Upgrade to clamav-0.84rc2 - it is very stable.
> Run freshclam to get a new copy of the viruses db.
>
> IIRC, clamav-0.65 is nolonger unsupported and might not be
> able to access the new db types.
Thank you. I've never upgraded clam. Is there a white paper or
On Fri, 29 Apr 2005 19:31:10 +0300 in
[EMAIL PROTECTED] Odhiambo Washington
<[EMAIL PROTECTED]> wrote:
> IIRC, clamav-0.65 is nolonger unsupported and might not be able to
> access the new db types.
Change that to "cannot access"
--
Brian Morrison
bdm at fenrir dot org dot uk
GnuPG key
It did not work. This option is required if I would be using the "LogSyslog"
option. I tested it, just to check it out, but nothing happened again.
The log file is displaying the startup and shutdown events, bu no scanning
from e-mails.
Fri Apr 29 13:23:45 2005 -> +++ Started at Fri Apr 29 13:23:
* Scott Henderson @ Bunzl Phoenix <[EMAIL PROTECTED]> [20050429 19:25]: wrote:
> ---Things were running fine with my clamAV 0.65 until it was stopped and
> restarted during a routine, automated log file rotation. At the end of
> the log file right before rotation, I see:
>
>
---Things were running fine with my clamAV 0.65 until it was stopped and
restarted during a routine, automated log file rotation. At the end of
the log file right before rotation, I see:
Sun Apr 24 02:42:04 2005 -> SelfCheck: Database status OK.
Sun Apr 24 03:12:58 2005 ->
/var/amavis/amavis-2005
On Friday 29 Apr 2005 17:05, Jose Luis Hime wrote:
> My clamd.conf is the following. See that I am using LogVerbose and LogClean,
> but nothing is logged.
> #LogFacility LOG_MAIL
Enable LOG_MAIL and you should see what you want.
--
Nigel Horne. Arranger, Composer, Typesetter.
NJH Music, Barnsl
Hello:
I upgraded from clamav 0.80 to 0.84rc1. Since then, I do not have any
viruses logged into my log file.
I read a similar thread from Rawnak, but in my case I am NOT using the
SysLog option...
Since the upgrade I am receiving some viruses in my network workstations, so
I am very concerned a
* Daniel J McDonald <[EMAIL PROTECTED]> [20050429 18:25]: wrote:
> I saw a little list chatter when 0.84-RC1 came out about a few problems.
> I haven't seen any messages at all about RC2. Does that mean that
> people are running it successfully and smoothly?
I am running i
Daniel J McDonald wrote:
> I saw a little list chatter when 0.84-RC1 came out about a few problems.
> I haven't seen any messages at all about RC2. Does that mean that
> people are running it successfully and smoothly?
RC2 on FreeBSD up for 3 days now...
D.
__
On Fri, 29 Apr 2005 10:24:03 -0500 in
[EMAIL PROTECTED] Daniel J McDonald
<[EMAIL PROTECTED]> wrote:
> I saw a little list chatter when 0.84-RC1 came out about a few
> problems. I haven't seen any messages at all about RC2. Does that
> mean that people are running it successfully and smoothly?
>
I saw a little list chatter when 0.84-RC1 came out about a few problems.
I haven't seen any messages at all about RC2. Does that mean that
people are running it successfully and smoothly?
--
Daniel J McDonald, CCIE # 2495, CNX
Austin Energy
[EMAIL PROTECTED]
___
On Fri, Apr 29, 2005 at 10:51:40AM +0200, Gian Carlo said:
> On Fri, Apr 29, 2005 at 08:31:26AM +0100, Rawnak wrote:
>
> > I use clamav 0.83 on Debian. I upgrade it using the deb package
> >
> > Ever since I upgrade to this version, I do not get an virus info in my
> > /var/log/clamav/clamav.log
Trog said this with great authority:
> If your users are also accessing the data via Samba, then use on-access
> scanning via Samba VFS. The vscan module does that
> http://www.openantivirus.org/projects.php#samba-vscan
Another good idea!
CD
Ever lied? You're a liar. Ever stolen? You're a thi
Lionel Bouton said this with great authority:
> You may try to wrap the scan in a Perl script which only scan files with
> modified mtimes.
Good idea!
CD
Ever lied? You're a liar. Ever stolen? You're a thief. Ever hated? The
bible equates hate with murder. Ever lusted? Jesus equated lust w
Jakub Suchy said this with great authority:
> Is it possible to access your data in differrent way than via Samba? Samba
> is very ineffective and slow and is causing overheads. Maybe you should
> also try 2.6.x kernel with more effective I/O scheduler
We're not going through Samba to clamscan the
Chris de Vidal wrote the following on 04/28/05 22:09 :
>Matt Fretwell said this while chewing gum:
>
>
>> Scan on an evening when your users are gone?
>>
>>
>
>Thanks for the fast reply!
>
>A 1.25TB Samba server takes several days to do a full scan with clamscan.
>
>
>
You may try to wrap
Chris de Vidal wrote:
> > <12 line signature snipped>
>
> You'll like my newer, shorter one :-)
>
> CD
>
> Ever lied? You're a liar. Ever stolen? You're a theif. Ever hated?
> The bible equates hate with murder. Ever lusted? Jesus equated lust with
> adultery. You've broken God's law. H
On Fri, Apr 29, 2005 at 08:31:26AM +0100, Rawnak wrote:
> I use clamav 0.83 on Debian. I upgrade it using the deb package
>
> Ever since I upgrade to this version, I do not get an virus info in my
> /var/log/clamav/clamav.log file.
You have...
> LogSyslog
...in clamd.conf.
You can find "missing
On Fri, 2005-04-29 at 10:26 +0200, Jakub Suchy wrote:
> > Rob MacGregor wrote:
> >> On 4/28/05, Chris de Vidal <[EMAIL PROTECTED]> wrote:
>
> >>>We have a 1.25TB Samba server that
> > Yes I/O bottleneck.
>
> Is it possible to access your data in differrent way than via Samba? Samba
> is very inef
> Rob MacGregor wrote:
>> On 4/28/05, Chris de Vidal <[EMAIL PROTECTED]> wrote:
>>>We have a 1.25TB Samba server that
> Yes I/O bottleneck.
Is it possible to access your data in differrent way than via Samba? Samba
is very ineffective and slow and is causing overheads. Maybe you should
also try
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Rob MacGregor wrote:
> On 4/28/05, Chris de Vidal <[EMAIL PROTECTED]> wrote:
>
>>ClamAV 0.83 from dag.wieers.com
>>CentOS 3.3 (A.K.A RedHat Enterprise Linux AS3)
>>Kernel 2.4.28
>>
>>I have a full system scan cron job. We have a 1.25TB Samba server t
On Thu, 2005-04-28 at 20:41 -0700, Joanna Roman wrote:
> Link:
> http://clamav-du.securesites.net/cgi-bin/clamgrok?virus=Trojan.Lowzone-37&search-type=contains&case-sensitivity=No&database=daily&database=main&display=database&display=virus&.submit=&.cgifields=database&.cgifields=case-sensitivity&.c
Hi
I use clamav 0.83 on Debian. I upgrade it using the deb package
Ever since I upgrade to this version, I do not get an virus info in my
/var/log/clamav/clamav.log file.
It is still catching vvirus, because they get reported in my main mail
log file.
below is my clamav conf
///
47 matches
Mail list logo
