Re: [clamav-users] Compiling error: /usr/lib/libxml2.so: error adding symbols: File in wrong format

2014-05-08 Thread Alexander Tampermeier
Hello Shawn, thank you for your response. This is output of 'file /usr/lib/libxml2.so': /usr/lib/libxml2.so: symbolic link to `libxml2.so.2.9.1' And 'file /usr/lib/libxml2.so.2.9.1' outputs: /usr/lib/libxml2.so.2.9.1: ELF 32-bit LSB shared object, Intel 80386, version 1 (SYSV), dynamically

Re: [clamav-users] Compiling error: /usr/lib/libxml2.so: error adding symbols: File in wrong format

2014-05-08 Thread Shawn Webb
Can you run these commands, and paste the output of commands 2 and 3 to your pastebin service (friendly remember to pipe stderr to stdout): 1. make clean distclean 2. CC=gcc ${BUILD64} ./configure --prefix=/usr --sysconfdir=/etc/clamav --with-zlib=/usr --with-dbdir=/usr/share/clamav

Re: [clamav-users] Compiling error: /usr/lib/libxml2.so: error adding symbols: File in wrong format

2014-05-08 Thread Alexander Tampermeier
Hello Shawn, I executed 'make clean distclean'. I pasted the output of command #2 (CC=gcc ${BUILD64} ./configure ...) at http://de.pastebin.de/124756 Output of command #3 (make) is pasted at http://de.pastebin.de/124757 Regards Alexander Am 08.05.2014 08:40, schrieb Shawn Webb: Can you

Re: [clamav-users] Compiling error: /usr/lib/libxml2.so: error adding symbols: File in wrong format

2014-05-08 Thread Shawn Webb
Did you add the --disable-silent-rules to your ./configure run? It looks like step 3 is still producing friendly output. On Thu, May 8, 2014 at 3:21 AM, Alexander Tampermeier alexan...@tampermeier.at wrote: Hello Shawn, I executed 'make clean distclean'. I pasted the output of command #2

Re: [clamav-users] Crash on reload. Version 0.98.3. Mac OS X 10.7.5

2014-05-08 Thread Shawn Webb
Hey All, This bug only affects OSX machines and is due to an improper return. This commit fixes it: https://github.com/vrtadmin/clamav-devel/commit/9e47301bc96964b33fe578170296c780924b3b7b Additionally, this bug has been filed as bug 10986: https://bugzilla.clamav.net/show_bug.cgi?id=10986

Re: [clamav-users] Compiling error: /usr/lib/libxml2.so: error adding symbols: File in wrong format

2014-05-08 Thread Alexander Tampermeier
Shawn, I am very sorry. Obviously I mixed something up totally. Here is the corrected output of the configure command (now including option --disable-silent-rules): http://de.pastebin.de/124760 And here is the corrected output of the make command: http://de.pastebin.de/124761 Regards

Re: [clamav-users] Compiling error: /usr/lib/libxml2.so: error adding symbols: File in wrong format

2014-05-08 Thread Shawn Webb
No worries. Since I'm most familiar with more conventional Linux distributions, I'm not entirely sure what's going on, but it appears your compiler/linker is still trying to link against the 32bit libraries rather than the 64bit ones: -Wl,-rpath -Wl,/usr/lib64/../lib64 -Wl,-rpath

Re: [clamav-users] clamav-users Digest, Vol 116, Issue 2

2014-05-08 Thread G.W. Haywood
Hi there, On Fri, 2 May 2014, Greg Mueller wrote: It has Debian on it and was booting fine. But now when it starts to boot it gets this message. What did you do to it between when it was booting fine and when it stopped booting fine? You didn't tell us, we need to know, and we aren't

Re: [clamav-users] Crash on reload. Version 0.98.3. Mac OS X 10.7.5

2014-05-08 Thread Shawn Webb
Thanks! I'll have a fix for you first thing in the morning. It looks like there might be a buggy edge case. Thanks, Shawn On May 7, 2014 9:46 PM, James Brown jlbr...@bordo.com.au wrote: On 8 May 2014, at 11:42 am, Shawn Webb sw...@sourcefire.com wrote: Hey James, Can you paste your

[clamav-users] Clamav is not finding any viruses

2014-05-08 Thread Thorvald Hallvardsson
Hi, I have got clamav running on the box and recently had a complain from the customer saying that he is getting viruses. In fact Clamav is finding phishing messages but any virus (besides eicar) is not being found. Tried to test it from the command line and it says that the files I'm checking

[clamav-users] Version 0.98.3 compile failure on Solaris

2014-05-08 Thread Lars Hecking
The configure code checking for the newly required openssl library is broken. [...] configure:16590: checking for OpenSSL installation configure:16632: checking for SSL_library_init in -lssl configure:16657: gcc -o conftest -I/tmp/ssl/ssl/include -L/tmp/ssl/ssl/lib -lss l -lcrypto conftest.c

[clamav-users] Version 0.98.3 fails on Solaris

2014-05-08 Thread Martin Preen
Hello, after building 0.98.3 on Solaris 10 (Sparc) I got some error messages from freshclam. The first run: ERROR: Corrupted database file /var/clamav/main.cvd: Can't allocate memory Corrupted database file renamed to /var/clamav/main.cvd.broken ERROR: Corrupted database file

Re: [clamav-users] Clamav is not finding any viruses

2014-05-08 Thread Steven Morgan
Hi Thorvald, You can also check which vendors' AV systems detect viruses on a file at virustotal.com. Also, please submit your virus file to http://www.clamav.net/lang/en/sendvirus/ so that we can write a ClamAV signature for it. Thanks, Steve On Thu, May 8, 2014 at 11:01 AM, Thorvald

Re: [clamav-users] Version 0.98.3 fails on Solaris

2014-05-08 Thread Shawn Webb
On Thu, May 8, 2014 at 11:13 AM, Martin Preen pr...@informatik.uni-freiburg.de wrote: Hello, after building 0.98.3 on Solaris 10 (Sparc) I got some error messages from freshclam. The first run: ERROR: Corrupted database file /var/clamav/main.cvd: Can't allocate memory Corrupted database

Re: [clamav-users] Version 0.98.3 compile failure on Solaris

2014-05-08 Thread Shawn Webb
On Thu, May 8, 2014 at 11:04 AM, Lars Hecking lheck...@users.sourceforge.net wrote: The configure code checking for the newly required openssl library is broken. [...] configure:16590: checking for OpenSSL installation configure:16632: checking for SSL_library_init in -lssl

[clamav-users] Crash on db reload: 0.98.3 (OS: win32, ARCH: i386

2014-05-08 Thread Steve Basford
Just a quick report... 0.98.3 crashes... 0.98.1 no issues... Thu May 08 15:29:06 2014 - +++ Started at Thu May 08 15:29:06 2014 Thu May 08 15:29:06 2014 - clamd daemon 0.98.3 (OS: win32, ARCH: i386, CPU: i386) Thu May 08 15:29:06 2014 - Log file size limited to 104857600 bytes. Thu May 08

Re: [clamav-users] Version 0.98.3 fails on Solaris

2014-05-08 Thread Martin Preen
Shawn Webb wrote: On Thu, May 8, 2014 at 11:13 AM, Martin Preen pr...@informatik.uni-freiburg.de wrote: Hello, after building 0.98.3 on Solaris 10 (Sparc) I got some error messages from freshclam. The first run: ERROR: Corrupted database file /var/clamav/main.cvd: Can't allocate memory

Re: [clamav-users] Version 0.98.3 fails on Solaris

2014-05-08 Thread Martin Preen
Shawn Webb wrote: On Thu, May 8, 2014 at 11:13 AM, Martin Preen pr...@informatik.uni-freiburg.de wrote: Hello, after building 0.98.3 on Solaris 10 (Sparc) I got some error messages from freshclam. The first run: ERROR: Corrupted database file /var/clamav/main.cvd: Can't allocate memory

Re: [clamav-users] Crash on db reload: 0.98.3 (OS: win32, ARCH: i386

2014-05-08 Thread Steven Morgan
Hi Steve, We're looking into this. A couple questions: which version of windows? 32bit or 64bit windows? 32bit or 64bit ClamAV? Thanks, Steve On Thu, May 8, 2014 at 11:41 AM, Steve Basford steveb_cla...@sanesecurity.com wrote: Just a quick report... 0.98.3 crashes... 0.98.1 no issues...

Re: [clamav-users] Crash on db reload: 0.98.3 (OS: win32, ARCH: i386

2014-05-08 Thread Steven Morgan
Sorry, didn't pay attention to subject line :) On Thu, May 8, 2014 at 11:55 AM, Steven Morgan smor...@sourcefire.comwrote: Hi Steve, We're looking into this. A couple questions: which version of windows? 32bit or 64bit windows? 32bit or 64bit ClamAV? Thanks, Steve On Thu, May 8, 2014

Re: [clamav-users] Version 0.98.3 fails on Solaris

2014-05-08 Thread Dennis Peterson
On 5/8/14, 8:23 AM, Shawn Webb wrote: Hey Martin, Is there a way you can get to me main.cvd.broken? I'm wondering if the change to OpenSSL for hashing has somehow changed parsing CVDs and CLDs on big-endian machines running Solaris. I thoroughly tested the code on a sparc64 machine (an old

Re: [clamav-users] Compiling error: /usr/lib/libxml2.so: error adding symbols: File in wrong format

2014-05-08 Thread David Raynor
Alexander, For libxml2, the configure script is finding and running the xml2-config script that is part of a typical xml2 install to get the appropriate CFLAGS and LIBS values to get to libxml2. Your fallback option, if this gets too complicated, is to simply run configure with --disable-xml and

Re: [clamav-users] Version 0.98.3 fails on Solaris

2014-05-08 Thread Peter Bonivart
On Thu, May 8, 2014 at 5:23 PM, Shawn Webb sw...@sourcefire.com wrote: I can install Solaris on this sparc64 machine as early as next week. OpenCSW provides a complete Solaris build farm if you're interested, we used to host automatic builds for ClamAV before Sourcefire aquired it.

Re: [clamav-users] Version 0.98.3 fails on Solaris

2014-05-08 Thread Pierre Dehaen
On 8 May 2014 at 11:23, Shawn Webb wrote: On Thu, May 8, 2014 at 11:13 AM, Martin Preen Is there a way you can get to me main.cvd.broken? I'm wondering if the change to OpenSSL for hashing has somehow changed parsing CVDs and CLDs on big-endian machines running Solaris. I thoroughly tested

Re: [clamav-users] Crash on db reload: 0.98.3 (OS: win32, ARCH: i386

2014-05-08 Thread Shawn Webb
On Thu, May 8, 2014 at 11:41 AM, Steve Basford steveb_cla...@sanesecurity.com wrote: Just a quick report... 0.98.3 crashes... 0.98.1 no issues... Thu May 08 15:29:06 2014 - +++ Started at Thu May 08 15:29:06 2014 Thu May 08 15:29:06 2014 - clamd daemon 0.98.3 (OS: win32, ARCH: i386, CPU:

Re: [clamav-users] Clamav is not finding any viruses

2014-05-08 Thread Kris Deugau
Thorvald Hallvardsson wrote: Hi, I have got clamav running on the box and recently had a complain from the customer saying that he is getting viruses. In fact Clamav is finding phishing messages but any virus (besides eicar) is not being found. Tried to test it from the command line and it

Re: [clamav-users] Version 0.98.3 fails on Solaris

2014-05-08 Thread Dennis Peterson
On 5/8/14, 9:00 AM, Dennis Peterson wrote: On 5/8/14, 8:23 AM, Shawn Webb wrote: Hey Martin, Is there a way you can get to me main.cvd.broken? I'm wondering if the change to OpenSSL for hashing has somehow changed parsing CVDs and CLDs on big-endian machines running Solaris. I thoroughly

Re: [clamav-users] Crash on db reload: 0.98.3 (OS: win32, ARCH: i386

2014-05-08 Thread Steve Basford
On Thu, May 8, 2014 5:46 pm, Shawn Webb wrote: Hey Steve Could you send me over a copy of your clamd.conf, please? Thanks, Shawn Here you go... http://pastebin.com/EzRLk9iW Cheers, Steve Sanesecurity ___ Help us build a comprehensive

Re: [clamav-users] Crash on db reload: 0.98.3 (OS: win32, ARCH: i386

2014-05-08 Thread Steve Basford
Hey Steve, Could you send me over a copy of your clamd.conf, please? Hi Shawn, I can reproduce... Installed a clamav without 3rd party stuff, fresh onto a test XP box I had not doing anything gulp run freshclam run clamd run clamdscan to prove its all working 1) clamdscan --reload to force

Re: [clamav-users] Clamav is not finding any viruses

2014-05-08 Thread Steve Basford
On Thu, May 8, 2014 5:47 pm, Kris Deugau wrote: I have been adding MD5 signatures, and somewhat more recently, .zmd .zip-content-filename signatures (for doubled-extension files), but I do not have time to dig more deeply and create more general signatures. -kgd Hi, You could add

Re: [clamav-users] Compiling error: /usr/lib/libxml2.so: error adding symbols: File in wrong format

2014-05-08 Thread Alexander Tampermeier
Dave, thank you for your detailed response. First, I tried to configure with option --disable-xml as you suggested but this attempt led to further problems: CC libclamav_internal_utils_la-regerror.lo CC libclamav_internal_utils_la-regexec.lo CC

Re: [clamav-users] Crash on db reload: 0.98.3 (OS: win32, ARCH: i386

2014-05-08 Thread Steven Morgan
Thanks, we have reproduced the problem as well and will have it fixed shortly. Steve M On Thu, May 8, 2014 at 7:19 PM, Paul Whelan paul...@blakecomp.co.uk wrote: On 8 May 2014 at 18:48, Steve Basford wrote: Hey Steve, Could you send me over a copy of your clamd.conf, please? Hi

[clamav-users] Version 0.98.3 hard loops on clamdscan -V

2014-05-08 Thread Eric Shubert
Immediately after upgrading from 0.98 to 0.98.3, when clamdscan --stdout -V is run (via simscanmk -g), the clamdscan appears to go into a hard loop (eats a lot of cpu endlessly). Here are non-default config settings: [root@qmt-cos5 etc]# grep -v ^# clamd.conf | grep -v ^$ LogClean yes LogVerbose