Re: [Clamav-users] why and when to use clamd?

2006-02-17 Thread Stephen Gran
On Thu, Feb 16, 2006 at 11:47:00PM -0500, Steve Feehan said: Hi. I have installed the Debian clamav-milter package. I've configured sendmail to use it and everything seems to be working OK. clamav-milter does not depend upon clamav-daemon (which contains clamd). When and why would I want to

Re: [Clamav-users] why and when to use clamd?

2006-02-17 Thread Nigel Horne
On Thu, Feb 16, 2006 at 11:47:00PM -0500, Steve Feehan said: I see the --external option in the clamav-milter(8) man page, but the explanation is confusing. I specify --external to tell clamav-milter to pass off scanning the mail to clamd, but how do I specify the LocalSocket (the man page

Re: [Clamav-users] why and when to use clamd?

2006-02-17 Thread Steve Feehan
On 2/17/06, Nigel Horne [EMAIL PROTECTED] wrote: On Thu, Feb 16, 2006 at 11:47:00PM -0500, Steve Feehan said: I see the --external option in the clamav-milter(8) man page, but the explanation is confusing. I specify --external to tell clamav-milter to pass off scanning the mail to clamd,

[Clamav-users] New mac virus

2006-02-17 Thread John Jolet
Does anyone know if clam (running as clamd or clamxav) on mac os X will catch the new virus that's apparently propagating via aim? ___ http://lurker.clamav.net/list/clamav-users.html

[Clamav-users] Virus Database update Documentation

2006-02-17 Thread Robert Setterlund
I have reviewed the documentation and found some of the information that I am looking for. But I need documentation on the exact process and the steps that freshclam performs when it updates a pattern file. Something link, freshclam checks and finds a new pattern file, the files is

Re: [Clamav-users] Virus Database update Documentation

2006-02-17 Thread Charles Swiger
On Feb 17, 2006, at 9:56 AM, Robert Setterlund wrote: I have reviewed the documentation and found some of the information that I am looking for. But I need documentation on the exact process and the steps that freshclam performs when it updates a pattern file. Something link, freshclam

Re: [Clamav-users] New mac virus

2006-02-17 Thread Tomasz Kojm
On Fri, 17 Feb 2006 08:43:26 -0600 John Jolet [EMAIL PROTECTED] wrote: Does anyone know if clam (running as clamd or clamxav) on mac os X will catch the new virus that's apparently propagating via aim? ClamAV detects it since yesterday (Feb 16) as Trojan.Leap.A (sig published by Diego) but the

Re: [Clamav-users] Phishing detection

2006-02-17 Thread Oliver Stöneberg
Sites were hot at the time the messages were received, so either my concept of how ClamAV blocks phishing is wrong or the detection method is not as generic as I would have thought. Generic fishing signature can be done... but... they are very difficult to get right, without any false

Re: [Clamav-users] Phishing detection

2006-02-17 Thread Tomasz Kojm
On Fri, 17 Feb 2006 19:55:20 +0100 Oliver Stöneberg [EMAIL PROTECTED] wrote: ClamAV still doesn't ctach all variants of a Parite.B Please show me an active variant of Parite.B that is not detected by ClamAV and at the same time is not a false positive detection of some 3rd party scanners.

Re: [Clamav-users] Phishing detection

2006-02-17 Thread Oliver Stöneberg
ClamAV still doesn't ctach all variants of a Parite.B Please show me an active variant of Parite.B that is not detected by ClamAV and at the same time is not a false positive detection of some 3rd party scanners. Then I will owe you a beer ;-) Depends how you define active. I have

[Clamav-users] False Positive I think

2006-02-17 Thread George R . Kasica
On Fri, 17 Feb 2006 20:15:09 +0100, you wrote: On Fri, 17 Feb 2006 19:55:20 +0100 Oliver Stöneberg [EMAIL PROTECTED] wrote: ClamAV still doesn't ctach all variants of a Parite.B Please show me an active variant of Parite.B that is not detected by ClamAV and at the same time is not a false

[Clamav-users] Re: Phishing detection

2006-02-17 Thread Sven Strickroth
Oliver Stöneberg [EMAIL PROTECTED] wrote in news:[EMAIL PROTECTED] That might be right, but the creator of the Phihsing signatures (Sven) is pretty serious about what he is doing. Thanks. :) The reason, because I create so much Phishing sigs is very simple: I prefer this type of malware, but