[Clamav-users] I-Worm/Generic.RX undetected

2006-09-20 Thread Daniel Hertanu
Hi Yesterday I received 3 emails in which the local antivirus (AVG for Windows, Free edition) has detected a virus named I-Worm/Generic.RX. The email server is a sendmail with clamav-milter. Having a look into the log file I discovered that clamav-milter declared the emails as clean.

RE: [Clamav-users] I-Worm/Generic.RX undetected

2006-09-20 Thread Nigel Horne
, why it was not detected. Because you haven't submitted a sample. . Thank you. Daniel -Nigel ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] I-Worm/Generic.RX undetected

2006-09-20 Thread James Kosin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Daniel Hertanu wrote: Hi Yesterday I received 3 emails in which the local antivirus (AVG for Windows, Free edition) has detected a virus named I-Worm/Generic.RX. The email server is a sendmail with clamav-milter. Having a look into the log file

[Clamav-users] clamscan resource hog

2006-09-20 Thread Benjamin Adams
I'm trying to get the load down on my mail server but clamscan keeps coming up and using resources. Load Avg: 1.65, 2.37, 2.22 CPU usage: 5.0% user, 10.9% sys, 84.0% idle SharedLibs: num = 176, resident = 33.0M code, 3.72M data, 13.9M LinkEdit MemRegions: num = 16529, resident =

Re: [Clamav-users] clamscan resource hog

2006-09-20 Thread Rick Macdougall
Benjamin Adams wrote: I'm trying to get the load down on my mail server but clamscan keeps coming up and using resources. Load Avg: 1.65, 2.37, 2.22 CPU usage: 5.0% user, 10.9% sys, 84.0% idle SharedLibs: num = 176, resident = 33.0M code, 3.72M data, 13.9M LinkEdit MemRegions: num =

Re: [Clamav-users] clamscan resource hog

2006-09-20 Thread kwijibo
Benjamin Adams wrote: I'm trying to get the load down on my mail server but clamscan keeps coming up and using resources. clamav /usr/bin/clamscan --stdout --disable-summary -r /var/amavis/amavis-20060920T103310-24504/parts clamav amavisd (ch1-24545-01) clamav freshclam -d -D

[Clamav-users] GMP problem

2006-09-20 Thread Jona Tallieu (T T NV)
Hi all, trying to upgrade the standard CLAMAV on Mac OS X Server 10.4.7, but during ./configure I keep getting the error: configure: WARNING: ** GNU MP 2 or newer NOT FOUND - digital signature support will be disabled ! I tried re-installing GMP, but still get the error. Anyone any

Re: [Clamav-users] clamscan resource hog

2006-09-20 Thread Dennis Peterson
Benjamin Adams wrote: I'm trying to get the load down on my mail server but clamscan keeps coming up and using resources. [snippage] I'm not sure what to do to fix this problem, thanks for any help. Clamscan has to reload all the virus patterns each time it runs so there is a big

Re: [Clamav-users] GMP problem

2006-09-20 Thread Dennis Peterson
Jona Tallieu (T T NV) wrote: Hi all, trying to upgrade the standard CLAMAV on Mac OS X Server 10.4.7, but during ./configure I keep getting the error: configure: WARNING: ** GNU MP 2 or newer NOT FOUND - digital signature support will be disabled ! I tried re-installing GMP, but

RE: [Clamav-users] I-Worm/Generic.RX undetected

2006-09-20 Thread Randal, Phil
Daniel Hertanu wrote: Yesterday I received 3 emails in which the local antivirus (AVG for Windows, Free edition) has detected a virus named I-Worm/Generic.RX. The email server is a sendmail with clamav-milter. Having a look into the log file I discovered that clamav-milter declared the

Re: [Clamav-users] clamscan resource hog

2006-09-20 Thread Benjamin Adams
yep, clamscan is linked right with Amavisd. I'm going to change over to clamd. Just trying to find out how to do this. I'm guessing to disable I need to change something in Amavis and postfix/master.cf Currently I'm just trying to start clamd: ERROR: Please edit the example config file

Re: [Clamav-users] clamscan resource hog

2006-09-20 Thread Dennis Peterson
Benjamin Adams wrote: yep, clamscan is linked right with Amavisd. I'm going to change over to clamd. Just trying to find out how to do this. I'm guessing to disable I need to change something in Amavis and postfix/master.cf Currently I'm just trying to start clamd: ERROR: Please edit the

Re: [Clamav-users] clamscan resource hog

2006-09-20 Thread Benjamin Adams
got error gone :P On Sep 20, 2006, at 11:22 AM, Benjamin Adams wrote: yep, clamscan is linked right with Amavisd. I'm going to change over to clamd. Just trying to find out how to do this. I'm guessing to disable I need to change something in Amavis and postfix/master.cf Currently I'm just

RE: [Clamav-users] clamscan resource hog

2006-09-20 Thread Nigel Horne
Two quick ways to improve performance: 1) use clamdscan not clamscan 2) use software that is not written in an interpreted language such as Perl. -Nigel ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] GMP problem

2006-09-20 Thread Todd Lyons
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, Sep 20, 2006 at 05:04:41PM +0200, Jona Tallieu (T T NV) wrote: configure: WARNING: ** GNU MP 2 or newer NOT FOUND - digital signature support will be disabled ! I tried re-installing GMP, but still get the error. Anyone any idea what

Re: [Clamav-users] GMP problem

2006-09-20 Thread Dennis Peterson
Todd Lyons wrote: On Wed, Sep 20, 2006 at 05:04:41PM +0200, Jona Tallieu (T T NV) wrote: configure: WARNING: ** GNU MP 2 or newer NOT FOUND - digital signature support will be disabled ! I tried re-installing GMP, but still get the error. Anyone any idea what else could be causing

Re: [Clamav-users] clamscan resource hog

2006-09-20 Thread Tomasz Papszun
[...] It is important to start clamd with a user id that has enough privileges to scan the files that are submitted to it. In your case that would appear to be what ever user Amavisd runs as. Even better: create a separate user:group for clamav, add that user to amavisd's group (by means of

[Clamav-users] Worm.Stration.AO

2006-09-20 Thread Chris
This was not found when incoming mail was scanned, however, I saved the attachment and ran clamscan on it and it was picked up. Clamav is called via a plugin in SpamAssassin. This happened last night and again tonight. Any possible reason? -- Chris pgpfY7pS7nRvZ.pgp Description: PGP

Re: [Clamav-users] clamscan resource hog

2006-09-20 Thread Dennis Peterson
Tomasz Papszun wrote: [...] It is important to start clamd with a user id that has enough privileges to scan the files that are submitted to it. In your case that would appear to be what ever user Amavisd runs as. Even better: create a separate user:group for clamav, add that user to