[Clamav-users] viruses in comments in scripts not detected by 0.93

2008-05-02 Thread David Shrimpton
Hi, Some viruses eg WScr.Unsafe.D for which a hexdump signature exists and which used to be detected by 0.91.2 are no longer detected by 0.93 . WScr.Unsafe.D arrives in email embedded in a HTML comment tag enclosed by HTML script tags. eg HTML BODY SCRIPT !--

[Clamav-users] virus in comment in script not detected by 0.93

2008-05-02 Thread David Shrimpton
Hi, Some viruses eg WScr.Unsafe.D for which a hexdump signature exists and which used to be detected by 0.91.2 are no longer detected by 0.93 . eg WScr.Unsafe.D arrives in html file embedded in a HTML comment tag enclosed by HTML script tags. eg HTML BODY SCRIPT !-- virus script -- /SCRIPT

Re: [Clamav-users] viruses in comments in scripts not detected by 0.93

2008-05-02 Thread Steve Basford
The implication of the above is that clamav 0.93 would now no longer detect many once prevalent viruses for which it only has hexdump signatures. The whitespace change will cause slightly lower detection rates on some Third Party sigs too (depending on the sig type)... unless the old sigs are

Re: [Clamav-users] viruses in comments in scripts not detected by 0.93

2008-05-02 Thread David Shrimpton
Thanks, This quote from the bugzilla posts is quite amusing: As for the official clamav signatures, please stand assured that when the new code will be in the stable release, all the broken signatures will be properly fixed. -- David Shrimpton On Fri, 2 May 2008, Steve Basford wrote:

Re: [Clamav-users] Help need with 0.93 compile error

2008-05-02 Thread Matus UHLAR - fantomas
On 30.04.08 16:53, RODOLPHE CARMIGNANI wrote: System: RHE3 Zlib: 1.2.3 from RH do you also have zlib devel package installed ? (I guess it's zlib-dev or similar) don't you have zlib manually installed somewhere? I used Clamav for a while and I compiled 0.9X series without problems. I'm

Re: [Clamav-users] Input/Output error on 0.92.1

2008-05-02 Thread Matus UHLAR - fantomas
On 30.04.08 18:49, Luis Miguel R. wrote: http://empresas.orange.es/amenaempresas/file/espanol/texto/icon_7.2.zip ($:~/Desktop)- clamscan icon_7.2.zip icon_7.2.zip: Input/Output error what do kernel logs say? -- Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/ Warning:

Re: [Clamav-users] viruses in comments in scripts not detected by 0.93

2008-05-02 Thread David Shrimpton
A signature that detects WScr.Unsafe.D under 0.93 is below HTML.WScr.Unsafe.D:3:*:22293b7362663d666c2e737562666f6c646572733b666f72287661726d79653d6e6577656e756d657261746f7228736266293b216d79652e6174656e6428293b6d79652e6d6f76656e6578742829296964643d6d79652e6974656d28293b6964733d6e65 create by:

Re: [Clamav-users] Help need with 0.93 compile error

2008-05-02 Thread nightduke
I can't compile version 0.93. /root/clamav/clamav-0.93/freshclam/manager.c:913: undefined reference to `gzclos e' manager.o(.text+0xf59):/root/clamav/clamav-0.93/freshclam/manager.c:884: undefin ed reference

Re: [Clamav-users] Help need with 0.93 compile error

2008-05-02 Thread James Pratt
http://lurker.clamav.net/message/20080430.172823.6ac0bd25.en.html -Original Message- From: [EMAIL PROTECTED] [mailto:clamav-users- [EMAIL PROTECTED] On Behalf Of nightduke Sent: Friday, May 02, 2008 11:19 AM To: ClamAV users ML Subject: Re: [Clamav-users] Help need with 0.93

Re: [Clamav-users] Help need with 0.93 compile error

2008-05-02 Thread nightduke
How can i add my libraries at ld.so.conf? cat ld.so.conf include ld.so.conf.d/*.conf Thanks Nightduke 2008/5/2, James Pratt [EMAIL PROTECTED]: http://lurker.clamav.net/message/20080430.172823.6ac0bd25.en.html -Original Message- From: [EMAIL PROTECTED] [mailto:clamav-users-

Re: [Clamav-users] Help need with 0.93 compile error

2008-05-02 Thread James Pratt
echo /usr/local/lib /etc/ld.so.conf , then run : ldconfig -Original Message- From: [EMAIL PROTECTED] [mailto:clamav-users- [EMAIL PROTECTED] On Behalf Of nightduke Sent: Friday, May 02, 2008 11:27 AM To: ClamAV users ML Subject: Re: [Clamav-users] Help need with 0.93 compile error

Re: [Clamav-users] Help need with 0.93 compile error

2008-05-02 Thread nightduke
Done but i have the same problem... ../shared/tar.c:82: undefined reference to `gzwrite' tar.o(.text+0x107):../shared/tar.c:95: undefined reference to `gzwrite' tar.o(.text+0x1c2):../shared/tar.c:111: undefined reference to `gzwrite' manager.o(.text+0xf24): In function `buildcld':

Re: [Clamav-users] Help need with 0.93 compile error

2008-05-02 Thread Dennis Peterson
nightduke wrote: How can i add my libraries at ld.so.conf? cat ld.so.conf include ld.so.conf.d/*.conf Thanks Nightduke Here's some links to follow: http://tinyurl.com/n9cd http://tinyurl.com/2e6ud For Linux: http://linux.die.net/man/8/ldconfig For Solaris:

Re: [Clamav-users] Help need with 0.93 compile error

2008-05-02 Thread Török Edwin
nightduke wrote: Done but i have the same problem... ../shared/tar.c:82: undefined reference to `gzwrite' tar.o(.text+0x107):../shared/tar.c:95: undefined reference to `gzwrite' tar.o(.text+0x1c2):../shared/tar.c:111: undefined reference to `gzwrite' manager.o(.text+0xf24): In function

Re: [Clamav-users] Help need with 0.93 compile error

2008-05-02 Thread Török Edwin
nightduke wrote: How can i apply this patch? cd /path/to/clamav-sources wget https://wwws.clamav.net/bugzilla/attachment.cgi?id=656 -o zlib.patch patch -p0 zlib.patch ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net

Re: [Clamav-users] Help need with 0.93 compile error

2008-05-02 Thread nightduke
How can i apply this patch? Thanks a lot Nightduke 2008/5/2, Török Edwin [EMAIL PROTECTED]: nightduke wrote: Done but i have the same problem... ../shared/tar.c:82: undefined reference to `gzwrite' tar.o(.text+0x107):../shared/tar.c:95: undefined reference to `gzwrite'

Re: [Clamav-users] Help need with 0.93 compile error

2008-05-02 Thread nightduke
patch -p0 zlib.patch patch: Only garbage was found in the patch input. And then what can i do? Thanks a lot. Nightduke 2008/5/2, Török Edwin [EMAIL PROTECTED]: nightduke wrote: How can i apply this patch? cd /path/to/clamav-sources wget

Re: [Clamav-users] viruses in comments in scripts not detected by 0.93

2008-05-02 Thread Török Edwin
David Shrimpton wrote: Hi, Some viruses eg WScr.Unsafe.D for which a hexdump signature exists and which used to be detected by 0.91.2 are no longer detected by 0.93 . Hi, Please submit a sample at http://www.clamav.org/sendvirus/ Thanks, This quote from the bugzilla posts is quite

Re: [Clamav-users] Help need with 0.93 compile error

2008-05-02 Thread Török Edwin
nightduke wrote: patch -p0 zlib.patch patch: Only garbage was found in the patch input. And then what can i do? Check what zlib.patch contains, and if it got damages somehow. Use a patch that understands unified context diffs (try -u). --Edwin

Re: [Clamav-users] Help need with 0.93 compile error

2008-05-02 Thread James Pratt
You can try doing a ln -s /usr/local/lib/libclamav.so.4.0.1 /usr/local/lib/libclamav.so.4, re-run ldconfig and try again.. -Original Message- From: [EMAIL PROTECTED] [mailto:clamav-users- [EMAIL PROTECTED] On Behalf Of nightduke Sent: Friday, May 02, 2008 12:28 PM To: ClamAV users

Re: [Clamav-users] Help need with 0.93 compile error

2008-05-02 Thread nightduke
I did ldconfig and it's fixed.Thanks a lot. Can the patch be applied at current stable version of clamav? Thanks Nightduke 2008/5/2, James Pratt [EMAIL PROTECTED]: You can try doing a ln -s /usr/local/lib/libclamav.so.4.0.1 /usr/local/lib/libclamav.so.4, re-run ldconfig and try again..

Re: [Clamav-users] Help need with 0.93 compile error

2008-05-02 Thread Török Edwin
nightduke wrote: I did ldconfig and it's fixed.Thanks a lot. Can the patch be applied at current stable version of clamav? It will be included in 0.93.1 and it is applied on the 0.93 release branch. --Edwin ___ Help us build a comprehensive ClamAV

Re: [Clamav-users] Help need with 0.93 compile error

2008-05-02 Thread nightduke
Fixed I do ldconfig and freshclam and the error libclamav.so.4 disappears. Thanks a lot. Nightduke 2008/5/2, nightduke [EMAIL PROTECTED]: Finally i applied the patch i was downloading with wget but... wget https://wwws.clamav.net/bugzilla/attachment.cgi?id=656--no-check-certificate

[Clamav-users] freshclam (0.93) corrupting daily.cld

2008-05-02 Thread Oscar Usifer
Folks, After freshclam downloads and notifies clamd to reload, clamd crashs refusing restart. I see in the logs as follow. Note this is a custom build ClamAV 0.93 for Trustix. Thanks, OSC [EMAIL PROTECTED] /var/lib/clamav]$ /etc/init.d/clamd start Starting clamd: LibClamAV Error: cli_tgzload:

Re: [Clamav-users] viruses in comments in scripts not detected by 0.93

2008-05-02 Thread David Shrimpton
Sample Submitted. thanks David Please submit a sample at http://www.clamav.org/sendvirus/ ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] unable to compile clamav 0.93 on AIX 5.3

2008-05-02 Thread Ejaz
Hi, As per the sugestion i was trying to upgrade Clamav thorugh SVN i.e clamav-devel-latest In my solaris 8, but still the same issue as it was informed earlier its looking for BZ2_bzDecompress So please help us. Ejaz gcc -g -O2 -o .libs/clamscan output.o getopt.o cfgparser.o misc.o

Re: [Clamav-users] clamd taking 100% CPU utilization

2008-05-02 Thread Shahzad Abid
Can you point out where can I find .rpm of clamav for FC5? On 4/30/08, Ejaz [EMAIL PROTECTED] wrote: Try to upgrade to the latest one. ejaz - Original Message - From: Shahzad Abid [EMAIL PROTECTED] To: clamav-users@lists.clamav.net Sent: Wednesday, April 30, 2008 3:43 PM