Re: [Clamav-users] Getting line numbers

2007-10-01 Thread Micah
No and yes. But you can write a small script, perhaps even a long command, to do just that. - -- René Berber Sorry if I'm a bit thick...but how? How can I get ClamScan to tell me what line (for a text file) matched a signature? Or How can I get ClamScan to tell me what string in the

Re: [Clamav-users] Getting line numbers

2007-10-01 Thread Dennis Peterson
Micah wrote: No and yes. But you can write a small script, perhaps even a long command, to do just that. - -- René Berber Sorry if I'm a bit thick...but how? How can I get ClamScan to tell me what line (for a text file) matched a signature? Or How can I get ClamScan to tell me

Re: [Clamav-users] Getting line numbers

2007-10-01 Thread Micah
There are scripts on line you can download that will split your single file into individual files - each a complete message. These you scan one at a time. After you've found and dealt with the infected message(s) you reassemble the individual files into a single file again. Start

Re: [Clamav-users] Getting line numbers

2007-10-01 Thread Todd Lyons
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, Sep 30, 2007 at 02:03:10PM -0500, René Berber wrote: information from ClamScan about which email contains the hit? Is there a way to have the line number of the hit spit out? Or the signature that was matched revealed?

Re: [Clamav-users] Getting line numbers

2007-10-01 Thread Dennis Peterson
Micah wrote: There are scripts on line you can download that will split your single file into individual files - each a complete message. These you scan one at a time. After you've found and dealt with the infected message(s) you reassemble the individual files into a single file again.

Re: [Clamav-users] clamd stuck at 100% cpu usage

2007-10-01 Thread Roberto Ullfig
Jeff Thurston wrote: Im running clamav 91.2 (90.3 did the same thing). After about an hour or so the clamd process gets stuck at 100%. I've checked various logs for the cause and haven't found anything. Clamav is being run by amavis-new 2.3 if that info is of any interest. This is a recent

[Clamav-users] No Support for Digital Signatures

2007-10-01 Thread Paul Arnone
Prior to upgrading to ClamAV 91.2 on our FreeBSD 6.2 OS, I used portupgrade to install the latest version of the GMP library as suggested in the Troubleshooting section of FAQs. When I run freshclam, however, I still receive the message, NO SUPPORT FOR DIGITAL SIGNATURES. What else do I need to

Re: [Clamav-users] Getting line numbers

2007-10-01 Thread Micah
http://www.clamav.org/support/faq/ (the 8th item in Miscellaneous) says: The entire process takes less than a minute here on a file of around 4g in size. dp Okay, so I used mb2md to convert the mbox to 1692 files and then ran the scanner. Check this out: --- SCAN SUMMARY

Re: [Clamav-users] No Support for Digital Signatures

2007-10-01 Thread Chuck Swiger
On Oct 1, 2007, at 4:22 PM, Paul Arnone wrote: Prior to upgrading to ClamAV 91.2 on our FreeBSD 6.2 OS, I used portupgrade to install the latest version of the GMP library as suggested in the Troubleshooting section of FAQs. When I run freshclam, however, I still receive the message, NO

Re: [Clamav-users] Getting line numbers

2007-10-01 Thread Dennis Peterson
Micah wrote: http://www.clamav.org/support/faq/ (the 8th item in Miscellaneous) says: The entire process takes less than a minute here on a file of around 4g in size. dp Okay, so I used mb2md to convert the mbox to 1692 files and then ran the scanner. Check this out: ---

Re: [Clamav-users] clamd stuck at 100% cpu usage

2007-10-01 Thread Christoph Moench-Tegeder
## Roberto Ullfig ([EMAIL PROTECTED]): We've also seen clamd stuck at 100% when PDF scanning (new feature introduced recently) large files. We've disabled PDF scanning for now. We will need to put in our own check to prevent PDF scanning of files over a certain size. I've seen a similar

[Clamav-users] Strange behavior of Clamav with HTML email from Outlook

2007-10-01 Thread Chinh Nguyen Tam
Greetings, We've notice some strange behavior of clamav in our email server for. When we try to send some email (HTML format, Outlook 2003) with URL inside, clamav detects these email as Email.Foolball-2 virus. If we send the emails with the same URL in Thunderbird HTML format or in pure text,

Re: [Clamav-users] Strange behavior of Clamav with HTML email from Outlook

2007-10-01 Thread Chinh Nguyen Tam
Sorry, I missed the attached file. Thank you very much in advance! Chinh Nguyen Tam wrote: Greetings, We've notice some strange behavior of clamav in our email server for. When we try to send some email (HTML format, Outlook 2003) with URL inside, clamav detects these email as

Re: [Clamav-users] Strange behavior of Clamav with HTML email from Outlook

2007-10-01 Thread Dennis Peterson
Chinh Nguyen Tam wrote: Greetings, We've notice some strange behavior of clamav in our email server for. When we try to send some email (HTML format, Outlook 2003) with URL inside, clamav detects these email as Email.Foolball-2 virus. If we send the emails with the same URL in

Re: [Clamav-users] Strange behavior of Clamav with HTML email from Outlook

2007-10-01 Thread Chinh Nguyen Tam
Dennis Peterson wrote: Chinh Nguyen Tam wrote: Greetings, We've notice some strange behavior of clamav in our email server for. When we try to send some email (HTML format, Outlook 2003) with URL inside, clamav detects these email as Email.Foolball-2 virus. If we send the emails with the

Re: [Clamav-users] Getting line numbers

2007-10-01 Thread Christoph Cordes
Am 02.10.2007 um 00:17 schrieb Dennis Peterson: To be honest this is a pretty weak pattern to create a yea or nea decision with. You're probably right, however, this mails didn't offer too much to pick them up. And please be sure that i checked the signature against 90.000 mailfiles

Re: [Clamav-users] Strange behavior of Clamav with HTML email from Outlook

2007-10-01 Thread Dennis Peterson
Chinh Nguyen Tam wrote: Dennis Peterson wrote: Chinh Nguyen Tam wrote: Greetings, We've notice some strange behavior of clamav in our email server for. When we try to send some email (HTML format, Outlook 2003) with URL inside, clamav detects these email as Email.Foolball-2 virus. If we

Re: [Clamav-users] Strange behavior of Clamav with HTML email from Outlook

2007-10-01 Thread Christoph Cordes
Am 02.10.2007 um 05:05 schrieb Chinh Nguyen Tam: Dennis Peterson wrote: Chinh Nguyen Tam wrote: Greetings, We've notice some strange behavior of clamav in our email server for. When we try to send some email (HTML format, Outlook 2003) with URL inside, clamav detects these email as

Re: [Clamav-users] Strange behavior of Clamav with HTML email from Outlook

2007-10-01 Thread Chinh Nguyen Tam
Christoph Cordes wrote: Am 02.10.2007 um 05:05 schrieb Chinh Nguyen Tam: Dennis Peterson wrote: Chinh Nguyen Tam wrote: Greetings, We've notice some strange behavior of clamav in our email server for. When we try to send some email (HTML format, Outlook 2003) with URL inside, clamav

Re: [Clamav-users] Strange behavior of Clamav with HTML email from Outlook

2007-10-01 Thread Chinh Nguyen Tam
Dennis Peterson wrote: Chinh Nguyen Tam wrote: Dennis Peterson wrote: Chinh Nguyen Tam wrote: Greetings, We've notice some strange behavior of clamav in our email server for. When we try to send some email (HTML format, Outlook 2003) with URL inside, clamav detects these email as

Re: [Clamav-users] Strange behavior of Clamav with HTML email from Outlook

2007-10-01 Thread Chinh Nguyen Tam
Chinh Nguyen Tam wrote: Christoph Cordes wrote: Am 02.10.2007 um 05:05 schrieb Chinh Nguyen Tam: Dennis Peterson wrote: Chinh Nguyen Tam wrote: Greetings, We've notice some strange behavior of clamav in our email server for. When we try to send some email (HTML format, Outlook 2003)