[Clamav-users] Ubuntu package and Clamuko

2009-09-24 Thread Frédéric SOSSON
Hello, I'm using Ubuntu 9.04 and clamav-0.95.2 package. When I set ClamukoScanOnAccess yes and ClamukoScanOnOpen yes in clamd.conf, the daemon logs that message: Clamuko is not available. Is there any another package to install ? regards, Fred ___

Re: [Clamav-users] DHL invoices

2009-09-24 Thread Török Edwin
On 2009-09-24 01:02, Jari Fredriksson wrote: I am a tad confused about your reporting comment as the clamav web reporting mechanism works fine at least for me and you can also report via virustotal as well. Anyway glad your happy with your config. Tom btw its winnow as in to remove the

Re: [Clamav-users] DHL invoices

2009-09-24 Thread Jari Fredriksson
Seems to work. I just got this: -- A virus was found: W32/Downldr3.GW Banned name: .exe,.exe-ms,open.exe Scanners detecting a virus: F-PROT Antivirus for UNIX, BitDefender Content type: Virus Internal reference code for the message

Re: [Clamav-users] DHL invoices

2009-09-24 Thread Luca Gibelli
Hello Jari, clamav NOW detects that even without pua, things updated. But the older DHL-incoices. No. Not even with detect-pua=yes. what does the form answer you when you try to submit it? It should reject it with a message. That message can help us to track down the issue. Best regards --

Re: [Clamav-users] DHL invoices

2009-09-24 Thread Jari Fredriksson
Hello Jari, clamav NOW detects that even without pua, things updated. But the older DHL-incoices. No. Not even with detect-pua=yes. what does the form answer you when you try to submit it? It should reject it with a message. That message can help us to track down the issue. Best

Re: [Clamav-users] DHL invoices

2009-09-24 Thread Török Edwin
On 2009-09-24 16:01, Jari Fredriksson wrote: Hello Jari, clamav NOW detects that even without pua, things updated. But the older DHL-incoices. No. Not even with detect-pua=yes. what does the form answer you when you try to submit it? It should reject it with a message. That

Re: [Clamav-users] DHL invoices

2009-09-24 Thread Luca Gibelli
Hello Jari, clamav NOW detects that even without pua, things updated. But the older DHL-incoices. No. Not even with detect-pua=yes. what does the form answer you when you try to submit it? It should reject it with a message. That message can help us to track down the issue. It says

Re: [Clamav-users] DHL invoices

2009-09-24 Thread Steve Basford
Yeah, we already know that. Can you please cutpaste the full message returned by the form? Thanks, Hi Luca, I've *just* uploaded 4 copies of the dhl invoice malware that have been missed by up-to-date official sigs. These were blocked using Sanesecurity.Malware.12505.UNOFFICIAL. Hope it

Re: [Clamav-users] DHL invoices

2009-09-24 Thread Tom Shaw
At 2:19 PM +0100 9/24/09, Steve Basford wrote: Yeah, we already know that. Can you please cutpaste the full message returned by the form? Thanks, Hi Luca, I've *just* uploaded 4 copies of the dhl invoice malware that have been missed by up-to-date official sigs. These were blocked using

Re: [Clamav-users] DHL invoices

2009-09-24 Thread Tom Shaw
At 9:53 AM -0400 9/24/09, Tom Shaw wrote: At 2:19 PM +0100 9/24/09, Steve Basford wrote: Yeah, we already know that. Can you please cutpaste the full message returned by the form? Thanks, Hi Luca, I've *just* uploaded 4 copies of the dhl invoice malware that have been missed by

Re: [Clamav-users] DHL invoices

2009-09-24 Thread Jari Fredriksson
On 2009-09-24 16:01, Jari Fredriksson wrote: Hello Jari, clamav NOW detects that even without pua, things updated. But the older DHL-incoices. No. Not even with detect-pua=yes. what does the form answer you when you try to submit it? It should reject it with a message. That message

[Clamav-users] GTUBE test pattern not being picked up

2009-09-24 Thread James Brown
ClamAV does not pick up the GTUBE test pattern. GTUBE - the Generic Test for Unsolicited Bulk Email. This is one of the tests that nospamtoday uses. See: http://www.nospamtoday.com/emailsecurity/ Is this because it is redundant because of the Eicar test signature? James.