[Clamav-users] Re: Multiple viruses in same file.

2004-02-25 Thread Virgo Prna
On Wed, 25 Feb 2004 09:32:50 +0800, cc [EMAIL PROTECTED] wrote: But wouldn't that waste cpu cycles when it has already been confirmed that the said file is infected? I mean, if say you were scanning your Actually, my idea was to have switch to enable it Not to do it by default,

Re: [Clamav-users] clamav-milter, Please try again later message.

2004-02-25 Thread Sergey
On Wednesday 25 February 2004 10:56, Sergey wrote: Feb 25 04:03:59 clamav-milter[7350]: clamfi_header: Received: from 192.168.1.1 ([192.168.1.1]) by mail(WinRoute Pro 4.1) with SMTP; Tue, 24 Feb 2004 21:34:29 +0400 Feb 25 04:03:59 clamav-milter[7350]: clamfi_header: From: XX

Re: [Clamav-users] Re: Multiple viruses in same file.

2004-02-25 Thread Tomasz Kojm
On Wed, 25 Feb 2004 08:01:48 + (UTC) Virgo Prna [EMAIL PROTECTED] wrote: Actually, my idea was to have switch to enable it Not to do it by default, but to have this ability for testing purposes. Like That was supported in ClamAV = 0.15 (enabled by default and could be disabled

[Clamav-users] Freshclam: Maximal time (1200 seconds) reached

2004-02-25 Thread Tarjei Knapstad
The freshclam daemon process died the other day, and the last entry in my log looks like: ClamAV update process started at Wed Feb 18 06:51:56 2004 ERROR: Can't connect to port 80 of host database.clamav.net (193.1.219.100) ERROR: Connection with database.clamav.net (IP: 193.1.219.100) failed.

[Clamav-users] Re: Multiple viruses in same file.

2004-02-25 Thread Jim Maul
-Original Message- From: Virgo Pärna [EMAIL PROTECTED] Sent: Wednesday, 25. Feb 2004 3:01 -0500 To: [EMAIL PROTECTED] Subject: [Clamav-users] Re: Multiple viruses in same file. On Wed, 25 Feb 2004 09:32:50 +0800, cc [EMAIL PROTECTED] wrote: But wouldn't that waste cpu cycles when it

Re: [Clamav-users] Re: Multiple viruses in same file.

2004-02-25 Thread Antony Stone
On Wednesday 25 February 2004 4:26 pm, Jim Maul wrote: Which raises another question - if NAV and clamav detected virus differently, does this mean, that NAV virus database has newest viruses first while clamav has newest last? Isnt this an issue of AV programs calling viruses by

[Clamav-users] Help generating W32.Netsky.C signature?

2004-02-25 Thread Andrew McCall
Hi Folks, I have a live copy of what I presume to be W32.Netsky.C on my server right now in Maildir format. I am trying to generate a signature for it using the following command: /usr/local/clamav/bin/clamscan --stdout --mbox 1077205367.25429.saturn,S=1212 I receive the following report:

Re: [Clamav-users] Help generating W32.Netsky.C signature?

2004-02-25 Thread Andrew McCall
Update: I am getting lots of emails that appear to be viruses, following the same pattern as W32.Netsky.B, and this is my original reason for thinking it was a new variant of this virus. The attachments are 0 bytes - so even if I was able to work out how to generate a signature, I couldn't!

Re: [Clamav-users] 0 byte attachments (was: Help generating W32.Netsky.C signature?)

2004-02-25 Thread Thomas Lamy
Andrew McCall wrote: Update: I am getting lots of emails that appear to be viruses, following the same pattern as W32.Netsky.B, and this is my original reason for thinking it was a new variant of this virus. The attachments are 0 bytes - so even if I was able to work out how to generate a

[Clamav-users] Clam name for Bizex virus ?

2004-02-25 Thread Christopher X. Candreva
Assumeing Clam already has a signature for this one, what name is Clam useing for it ? http://securityresponse.symantec.com/avcenter/venc/data/w32.bizex.worm.html == Chris Candreva -- [EMAIL PROTECTED] -- (914) 967-7816 WestNet Internet

[Clamav-users] segmentation fault on clamav-0.67 on Solaris

2004-02-25 Thread Piotr Kasztelowicz
Hello I attempt to compile clamav-0.67 on Solaris 2.7 on sparc wirh newest gmp, gcc-3.2 and zlib. The compilation was going without problems, but the software does not work. If I was attempting to try 'freshclam' or 'clamscan' the effect was 'segmentation fault' My question - what is wrong I

Re: [Clamav-users] Freshclam: Maximal time (1200 seconds) reached

2004-02-25 Thread Tomasz Kojm
On 25 Feb 2004 11:32:20 +0100 Tarjei Knapstad [EMAIL PROTECTED] wrote: The freshclam daemon process died the other day, and the last entry in my log looks like: ClamAV update process started at Wed Feb 18 06:51:56 2004 ERROR: Can't connect to port 80 of host database.clamav.net

Re: [Clamav-users] segmentation fault on clamav-0.67 on Solaris

2004-02-25 Thread Peter Bonivart
Piotr Kasztelowicz wrote: I attempt to compile clamav-0.67 on Solaris 2.7 on sparc wirh newest gmp, gcc-3.2 and zlib. The compilation was going without problems, but the software does not work. If I was attempting to try 'freshclam' or 'clamscan' the effect was 'segmentation fault' My question -

[Clamav-users] Couple of questions regarding ClamAV

2004-02-25 Thread Jason
Hello everyone. I'm new to the list and ClamAV. I'm looking for a Anti-virus solution to run on our company mail server. A friend of mine recommended clamav as a great solution for our needs. I have not finazlied the details of my setup, but right now, im looking for a Anti-virus scanner.

Re: [Clamav-users] Couple of questions regarding ClamAV

2004-02-25 Thread Peter Bonivart
Jason wrote: Couple of questions about ClamAV. Can someone give me a run down on stability of ClamAV? Is it pretty much just set it up and let it run? Reliability? Performance. A daemonized version of software was very important to me, that is why im looking at ClamAV. I recommend you take a

[Clamav-users] Virus listing

2004-02-25 Thread David Gregg
Could not find in the archives... Does anybody know how/where to obtain a listing of all viruses that ClamAV 'knows' about? Thanks. --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps Web services for Linux

Re: [Clamav-users] Virus listing

2004-02-25 Thread Hanford, Seth
Could not find in the archives... Does anybody know how/where to obtain a listing of all viruses that ClamAV 'knows' about? Thanks. On a related note... # cd /usr/local/share/clamav # sigtool -u daily.cvd LibClamAV Error: Unknown type flag . ERROR: Can't unpack file.

[Clamav-users] Re: Couple of questions regarding ClamAV

2004-02-25 Thread Jason
Peter Bonivart wrote: Hi Peter, Thanks for the input. I recommend you take a look at MailScanner, it's a framework that handles unpacking MIME attachments and sends batches of attachments to Clam (or any combination of around 20 supported scanners) so Clam is only used in it's most basic and

[Clamav-users] ./configure --prefix=/usr/local --enable-milter failes on ClamAV- 0.67

2004-02-25 Thread Marc Brooks
The Clamav milter fails on % make. Attached is the config.log:: Thanks in advance! -- This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. It was created by configure, which was

Re: [Clamav-users] Virus listing

2004-02-25 Thread Peter Bonivart
David Gregg wrote: Does anybody know how/where to obtain a listing of all viruses that ClamAV 'knows' about? sigtool -l -- /Peter Bonivart --Unix lovers do it in the Sun Sun Fire V210, Solaris 9, Sendmail 8.12.10, MailScanner 4.25-14, SpamAssassin 2.63 + DCC 1.2.30, ClamAV 0.67 + GMP 4.1.2

Re: [Clamav-users] Virus listing

2004-02-25 Thread Andrew McCall
On Wednesday, February 25, 2004, at 09:40 pm, David Gregg wrote: Could not find in the archives... Does anybody know how/where to obtain a listing of all viruses that ClamAV 'knows' about? I think sigtool -l shows them. Thanks. --- SF.Net

Re: [Clamav-users] Virus listing

2004-02-25 Thread David Gregg
using sigtool on W2k... Doesn't appear to be able to list all viruses in database. ANy suggestions? - Original Message - From: Peter Bonivart [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, February 25, 2004 2:24 PM Subject: Re: [Clamav-users] Virus listing David Gregg

Re: [Clamav-users] Virus listing

2004-02-25 Thread dimon
Quoting Andrew McCall [EMAIL PROTECTED]: On Wednesday, February 25, 2004, at 09:40 pm, David Gregg wrote: Could not find in the archives... Does anybody know how/where to obtain a listing of all viruses that ClamAV 'knows' about? I think sigtool -l shows them. Doesn't work for

Re: [Clamav-users] Virus listing

2004-02-25 Thread Tomasz Papszun
On Wed, 25 Feb 2004 at 16:00:51 -0700, [EMAIL PROTECTED] wrote: Doesn't work for me: # sigtool -l sigtool: invalid option -- l ERROR: Unknown option passed. # sigtool -h Clam AntiVirus: Signature Tool (sigtool) 0.65

Re: [Clamav-users] Couple of questions regarding ClamAV

2004-02-25 Thread Jesper Juhl
On Wed, 25 Feb 2004, Jason wrote: Hello everyone. I'm new to the list and ClamAV. I'm looking for a Anti-virus solution to run on our company mail server. A friend of mine recommended clamav as a great solution for our needs. I have not finazlied the details of my setup, but right now, im

Re: [Clamav-users] Virus listing

2004-02-25 Thread Jesper Juhl
On Wed, 25 Feb 2004 [EMAIL PROTECTED] wrote: Quoting Andrew McCall [EMAIL PROTECTED]: On Wednesday, February 25, 2004, at 09:40 pm, David Gregg wrote: Could not find in the archives... Does anybody know how/where to obtain a listing of all viruses that ClamAV 'knows'

Re: [Clamav-users] Help generating W32.Netsky.C signature?

2004-02-25 Thread Jesper Juhl
On Wed, 25 Feb 2004, Andrew McCall wrote: Hi Folks, I have a live copy of what I presume to be W32.Netsky.C on my server right now in Maildir format. I am trying to generate a signature for it using the [...] I *know* this file is a new virus, and want to generate a signature from it.

RE: [Clamav-users] Virus listing

2004-02-25 Thread Michael St. Laurent
David Gregg mailto:[EMAIL PROTECTED] wrote: Could not find in the archives... Does anybody know how/where to obtain a listing of all viruses that ClamAV 'knows' about? If you have Ver. 0.67 or higher (0.67-1 or CVS) then sigtool -l will do the trick. Otherwise, I'm not certain. --

Re: [Clamav-users] Zip files.

2004-02-25 Thread russ
On Wed, 2004-02-25 at 11:40, Peter McCreath wrote: Any pointers would be greatly appreciated, Did you run freshclam as soon as you saw the few get past? Two zip file got past me, then I ran freshclam, and start catching Somefool.B and they where all zip files. Just a thought, -- Russel

[Clamav-users] Anybody using milter with --server and a firewall in between?

2004-02-25 Thread Stephen Gran
Hello all, I'm working on restructuring an ISP's mail servers, and as part of it, we're setting up some load sharing measures. One of them is shifting clamav off of the actual mail servers, and running clamav-milter with the --server option to connect to a remote clamd. The problem we found was

[Clamav-users] Good Work!

2004-02-25 Thread Jonathan Soong
SomeFool stopped! Blocked 50+ SomeFool infected mails in last 10 minutes! :) J --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps Web services for Linux with a free DVD software kit from IBM. Click Now!

[Clamav-users] Windows/Web Logging

2004-02-25 Thread isp-lists [at] beachcomp.com
Hi all, Newbie question.. Is there a way to setup web based logging or stats (view) on clam running on a Windows box? Thanks --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps Web services for Linux with a

[Clamav-users] clamd: Segmentation Fault?

2004-02-25 Thread Philipp Grosswiler
Unfortunately, clamd crashed today morning at 05:00 (almost exactly at 05:00). I only realized it by accident. This is what the log is showing: Thu Feb 26 04:58:10 2004 - stream: Worm.MyDoom.E.UPX FOUND Thu Feb 26 05:01:21 2004 - Segmentation fault :-( Bye.. Thu Feb 26 05:11:18 2004 - SelfCheck:

Re: [Clamav-users] clamd: Segmentation Fault?

2004-02-25 Thread Thomas Lamy
Philipp Grosswiler wrote: Unfortunately, clamd crashed today morning at 05:00 (almost exactly at 05:00). I only realized it by accident. This is what the log is showing: Thu Feb 26 04:58:10 2004 - stream: Worm.MyDoom.E.UPX FOUND Thu Feb 26 05:01:21 2004 - Segmentation fault :-( Bye.. Thu Feb 26