Re: [Clamav-users] Creating your own signatures

2005-06-21 Thread jef moskot
On Sat, 18 Jun 2005, jef moskot wrote: If I forward the spam with the attached image to myself, clamscan picks it up. If I forward the image itself in a different message to myself, clamscan also detects it. However, if I clamscan the original mail file with the spam in it, clamscan doesn't

Re: [Clamav-users] New error messages after upgrade to 0.86

2005-06-21 Thread Damian Menscher
On Tue, 21 Jun 2005, George Chelidze wrote: The error messages are: sh: /usr/sbin/sendmail: No such file or directory After fast investigation I found that SENDMAIL_BIN changed from /usr/lib/sendmail to /usr/sbin/sendmail. The reason why I am affected with thi change is that I run

[Clamav-users] False positive Trojan.Netdevil

2005-06-21 Thread GRISERI Giovanni
I caught a false positive Trojan.Netdevil.15-2 FOUND on many self extracting exe files made with WINRAR version 3.4.2. clamd version 0.85.1 s.o.: Debian GNU/Linux 3.1, kernel 2.4.27 Anyone else found the same problem ? ___

RE: [Clamav-users] Analyze Perl Script

2005-06-21 Thread Dave Wells
Hi, A few people have asked for an attachement instead of the script being in-line so I have re-posted this as an attachment. Regards Dave Wells -Original Message- From: Ed Kasky [mailto:[EMAIL PROTECTED] Sent: 20 June 2005 17:56 To: Dave Wells Subject: Re: [Clamav-users] Analyze

Re: [Clamav-users] Analyze Perl Script

2005-06-21 Thread Dale Walsh
On Jun 21, 2005, at 04:40 AM, Dave Wells wrote: Hi, A few people have asked for an attachement instead of the script being in-line so I have re-posted this as an attachment. Regards Dave Wells -Original Message- From: Ed Kasky [mailto:[EMAIL PROTECTED] Sent: 20 June 2005 17:56 To:

RE: [Clamav-users] ClamAV on Exchange 200x

2005-06-21 Thread Steffen Heil
Hi Does Exchange 2000 still accept mail for non-existent users, as it does for 5.5? Unless there's a feature/setting I'm missing, yes it does. No. But it is no predefined feature. You need to do this, as you do most in unix/linux: You need to define an custom event sink. You can do that

RE: [Clamav-users] problem with clamav-0.85.1

2005-06-21 Thread Samuel Benzaquen
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of suneel cumar Sent: Monday, June 20, 2005 11:42 PM To: clamav-users@lists.clamav.net Subject: [Clamav-users] problem with clamav-0.85.1 i have upgraded the clamav 0.74 to 0.85.1. ClamAV has changed A

[Clamav-users] Error on upgrading ti 0.85.1

2005-06-21 Thread suneel cumar
Hi All, Am just trying to debug the clamav-0.85.1. But it seems to give lot of error which is am not very much not able to solve and no document for newer whether it consist of clamd daemon to listen the reuest from socket or not . Clamd is not visible for me. Is it Clamd is required and if yes

Re: [Clamav-users] Error on upgrading ti 0.85.1

2005-06-21 Thread Stephen Gran
On Tue, Jun 21, 2005 at 09:45:22AM -0400, Jim Maul said: suneel cumar wrote: Jun 20 19:35:01 sunil amavis[24550]: (24550-07) ClamAV-clamd: Can't connect to UNIX socket /usr/sbin/clamscan: No such file or directory, retrying (2) maybe you shouldnt be passing /usr/bin/clamscan as a unix

Re: [Clamav-users] Error on upgrading ti 0.85.1

2005-06-21 Thread Brian Morrison
On Tue, 21 Jun 2005 06:18:08 -0700 (PDT) in [EMAIL PROTECTED] suneel cumar [EMAIL PROTECTED] wrote: Hi All, Am just trying to debug the clamav-0.85.1. But it seems to give lot of error which is am not very much not able to solve and no document for newer whether it consist of clamd daemon

Re: [Clamav-users] False positive Trojan.Netdevil

2005-06-21 Thread Damian Menscher
On Tue, 21 Jun 2005, GRISERI Giovanni wrote: I caught a false positive Trojan.Netdevil.15-2 FOUND on many self extracting exe files made with WINRAR version 3.4.2. clamd version 0.85.1 s.o.: Debian GNU/Linux 3.1, kernel 2.4.27 Please submit samples (and mark as a false positive) here:

Re: [Clamav-users] Using clamav to scan adware

2005-06-21 Thread Niek
On 6/20/2005 10:24 PM +0200, Joanna Roman wrote: Just because people have submited those adware samples, it does not mean the people must have caught them with ClamAV right ? Get a product dedicated to spyware/adware scanning. Niek ___

[Clamav-users] Error compiling ClamAV 0.86

2005-06-21 Thread Ed Kasky
I am experiencing a problem when trying to compile 0.86 with milter that sems to be happening only in this release. 0.85.1 compiles no problem on the same system. With 0.86 I get the following running make: /usr/src/clamav-0.86/clamav-milter/clamav-milter.c:1577: undefined reference to

Re: [Clamav-users] Error compiling ClamAV 0.86

2005-06-21 Thread Troy Ayers
Ed Kasky wrote: I am experiencing a problem when trying to compile 0.86 with milter that sems to be happening only in this release. 0.85.1 compiles no problem on the same system. With 0.86 I get the following running make: /usr/src/clamav-0.86/clamav-milter/clamav-milter.c:1577:

RE: [Clamav-users] ClamAV on Exchange 200x

2005-06-21 Thread Matthew.van.Eerde
John Gallagher wrote: Depending on your active directory structure it is relatively simple to grab the exchange users so your mail relay can make this decision before passing the mail on to the exchange server. You may need to work on the script a little to pull aliases and mail forward info.

Re: [Clamav-users] Error compiling ClamAV 0.86

2005-06-21 Thread Ed Kasky
At 11:35 AM Tuesday, 6/21/2005, you wrote -= Ed Kasky wrote: I am experiencing a problem when trying to compile 0.86 with milter that sems to be happening only in this release. 0.85.1 compiles no problem on the same system. With 0.86 I get the following running make:

Re: [Clamav-users] Error compiling ClamAV 0.86

2005-06-21 Thread Dan Sjolseth
Quoting Ed Kasky [EMAIL PROTECTED]: At 11:35 AM Tuesday, 6/21/2005, you wrote -= Ed Kasky wrote: I am experiencing a problem when trying to compile 0.86 with milter that sems to be happening only in this release. 0.85.1 compiles no problem on the same system. With 0.86 I get the

Re: [Clamav-users] Error compiling ClamAV 0.86

2005-06-21 Thread Troy Ayers
Since sendmail 8.13.3 was released 1/12/2005, and your mfapi.h files date shows Aug 20 2004, its probably from a previous (older) version of sendmail. Get the latest/greatest sendmail and install it and libmilter. Dan Sjolseth mfapi.h is dated Aug 20 2004 for both the 8.13.3 and 8.13.4

[Clamav-users] Re: Error compiling ClamAV 0.86

2005-06-21 Thread Ed Kasky
At 01:43 PM Tuesday, 6/21/2005, you wrote -= Since sendmail 8.13.3 was released 1/12/2005, and your mfapi.h files date shows Aug 20 2004, its probably from a previous (older) version of sendmail. Get the latest/greatest sendmail and install it and libmilter. mfapi.h is dated Aug 20 2004 for

Re: [Clamav-users] Error compiling ClamAV 0.86

2005-06-21 Thread Nigel Horne
On Tuesday 21 Jun 2005 19:28, Ed Kasky wrote: I am experiencing a problem when trying to compile 0.86 with milter that sems to be happening only in this release. 0.85.1 compiles no problem on the same system. With 0.86 I get the following running make:

Re: [Clamav-users] Error compiling ClamAV 0.86

2005-06-21 Thread Ed Kasky
At 09:19 PM Tuesday, 6/21/2005, Nigel Horne wrote -= On Tuesday 21 Jun 2005 19:28, Ed Kasky wrote: I am experiencing a problem when trying to compile 0.86 with milter that sems to be happening only in this release. 0.85.1 compiles no problem on the same system. With 0.86 I get the

Re: [Clamav-users] Re: Error compiling ClamAV 0.86

2005-06-21 Thread nizar
On Tue, 2005-06-21 at 18:26 -0700, Ed Kasky wrote: At 01:43 PM Tuesday, 6/21/2005, you wrote -= Since sendmail 8.13.3 was released 1/12/2005, and your mfapi.h files date shows Aug 20 2004, its probably from a previous (older) version of sendmail. Get the latest/greatest sendmail and