[Clamav-users] freshclam problem with internal logger

2010-10-11 Thread Vernon A. Fort
No doubt a problem with logrotate. Is there a fix for this? ERROR: /var/log/clamav/freshclam.log is locked by another process ERROR: Problem with internal logger (UpdateLogFile = /var/log/clamav/freshclam.log). lsof | grep freshclam.log freshclam 16920 root3wW REG 104,6

Re: [Clamav-users] Keeping Trend Micro and Symantec fed

2005-09-12 Thread Vernon A. Fort
D.J. Fan wrote: Thanks again ClamAV developers and maintainers. Today will be the fourth time I submit a virus caught by ClamAV and missed by both Trend Micro and Symantec to them. Obviously yet another new Bagle variant caught by an older ClamAV signature: A virus was found:

Re: [Clamav-users] Managing the CLAM

2005-04-01 Thread Vernon A. Fort
Chris Heiner wrote: Are there any good command mode instructions to retrieve update information and other log information on the Clam AV.? The only command we are aware of is freshclam. Commands: freshclam (config file: /etc/freshclam.conf) clamd (config file: /etc/clamd.conf)

Re: [Clamav-users] Re: Any way to add a line to cleaned email?

2005-01-06 Thread Vernon A. Fort
Noel Jones wrote: On Fri, Jan 07, 2005 at 01:12:02AM +, Thalador Du'Fosnee wrote: Ok, let me get this right. Clamav cannot clean? What good is it? Cleaning of viruses is a marketing ploy. Very few viruses in recent years infect files, they overwrite the good data in the file with their

Re: [Clamav-users] thank you

2004-10-28 Thread Vernon A. Fort
Mike Lambert wrote: Thank you, team ClamAV, for your your hard work on the latest release. ClamAV 0.80 (FreeBSD 4.9) is by far the most stable and memory efficient clamd yet. *applause* Regards, Mike Lambert ___ I concur!! I did have problem with

Re: [Clamav-users] Freshclam warning

2004-10-19 Thread Vernon A. Fort
Tomasz Kojm wrote: On Tue, 19 Oct 2004 14:58:56 -0500 "Vernon A. Fort" [EMAIL PROTECTED] wrote: I have been getting the following warning with freshclam for the last several hours. WARNING: DNS record is older than 3 hours. WARNING: Invalid DNS reply. All cvd

Re: [Clamav-users] GDI+ bug exploit Mutations

2004-10-17 Thread Vernon A. Fort
Vernon A. Fort wrote: Steve Basford wrote: Hi, Can someone test ClamAV with these files: http://www.hiddenbit.org/demo_files/jpeg.zip Source: http://lists.netsys.com/pipermail/full-disclosure/2004-October/027530.html Cheers, Steve ___ http

[Clamav-users] Redhat 7.2 and 7.3 clamav-devel-latest

2004-08-02 Thread Vernon A. Fort
Attempting to compile clamav-devel-latest on a redhat 7.2 or 7.3 box but I'm getting autoconf / automake errors. Can I re-run the automake and autoconf and if so, what are the command line args. Here's the output just after the configure runs: cd . /bin/sh /tmp/clamav-20040731/missing

[Clamav-users] Sigtool Build Time

2004-07-28 Thread Vernon A. Fort
I'm tring to understand the Build time string in the sigtoo -i daily.cvd file: Build time: 27 Jul 2004 15-12 +0200 specifically with the 15-12 +0200. I want to convert this to Central time (US), any pointers. Vernon --- This SF.Net

Re: [Clamav-users] Sigtool Build Time

2004-07-28 Thread Vernon A. Fort
Steven Stern wrote: On Wed, 28 Jul 2004 10:15:53 -0500, Vernon A. Fort [EMAIL PROTECTED] wrote: I'm tring to understand the Build time string in the sigtoo -i daily.cvd file: Build time: 27 Jul 2004 15-12 +0200 specifically with the 15-12 +0200. I want to convert this to Central time (US

[Clamav-users] Bagle Varient

2004-07-16 Thread Vernon A. Fort
I have email messages that are being detected as Worm.Bagle.Gen-zippwd but when I unzip, clamav detects the binary as Bagle.AF. I cannot submit a sample because its already detected. If someone wants a few sample email messages, let me know where to send them. Vernon

Re: [Clamav-users] Bagle Varient

2004-07-16 Thread Vernon A. Fort
Steve Lenti wrote: On Fri, 16 Jul 2004 08:39:16 -0500, Vernon A. Fort [EMAIL PROTECTED] wrote: I have email messages that are being detected as Worm.Bagle.Gen-zippwd but when I unzip, clamav detects the binary as Bagle.AF. I cannot submit a sample because its already detected. If someone wants

Re: [Clamav-users] Clamscan didn't work in the real world

2004-04-28 Thread Vernon A. Fort
Victor Yu wrote: Greeting, I just installed Clam on a Linux server. After installation, I run #clamscan /usr/local/share/clamav/test, it found the virus, the output like this: - /usr/local/share/clamav/test/test1:

Re: [Clamav-users] Question on SomeFool Virus

2004-04-06 Thread Vernon A. Fort
Antony Stone wrote: On Tuesday 06 April 2004 9:57 am, Vernon A. Fort wrote: I have several emails which clamav detects as 'Worm.SomeFool.Gen-2', but Sophos nor McAcfee will detect the virus. Would this be some new varient that clamav fould. From the description, this sig was added to detect

[Clamav-users] Question on SomeFool Virus

2004-04-06 Thread Vernon A. Fort
I have several emails which clamav detects as 'Worm.SomeFool.Gen-2', but Sophos nor McAcfee will detect the virus. Would this be some new varient that clamav fould. From the description, this sig was added to detect possible future varients of the NetSky viruses. Should I submit this? or

[Clamav-users] Virus DB Update

2004-03-30 Thread Vernon A. Fort
I noticed that virusdb was updated, according to the clamav-virusdb list, to daily version 226 but my freshclam is still reporting that 225 is the latest. Am I missing something? Vernon --- This SF.Net email is sponsored by: IBM Linux

Re: [Clamav-users] Virus DB Update

2004-03-30 Thread Vernon A. Fort
Colin A. Bartlett wrote: Vernon A. Fort Sent: Tuesday, March 30, 2004 11:11 AM I noticed that virusdb was updated, according to the clamav-virusdb list, to daily version 226 but my freshclam is still reporting that 225 is the latest. Am I missing something? FYI, my freshclam returns