[Clamav-users] Re: clamav-devel 20040213 for windows

2004-02-16 Thread Ignasi Prat
I tried my build on non-cygwin Win2k's, and they have MD5 verification error too. I still can't figure out why Ignasi Pratt's build has handle_exceptions error though. Efectively I have no CYGWIN installed. I have not had time yet. All machines I tested had no CYGWIN installed. All crushed

Re: [Clamav-users] Error Message

2004-02-16 Thread Nigel Horne
On Monday 16 Feb 2004 4:37 am, Doug Hardie wrote: Feb 15 19:14:18 1.4 zoon clamav-milter: ClamAv: private data not NULL What does the message mean and is there a configuration parameter I need to alter to avoid it? This sounds like an error thrown by sendmail even though sendmail makes it

[Clamav-users] clamav-devel 20040216 for windows

2004-02-16 Thread Ignasi Prat
[*] 10 [main] freshclam 1856 handle_exceptions: Exception: STATUS_ILLEGAL_INSTR UCTION 7543 [main] freshclam 1856 open_stackdumpfile: Dumping stack trace to freshcl am.exe.stackdump C:\clamav-devel-latest\binfreshclam -V freshclam / ClamAV version devel-20040216 The same error is issued

Re: [Clamav-users] Re: clamav-devel 20040213 for windows

2004-02-16 Thread Fajar A. Nugraha
Ignasi Prat wrote: I tried my build on non-cygwin Win2k's, and they have MD5 verification error too. Efectively I have *no CYGWIN installed.* I have not had time yet. All machines I tested had no CYGWIN installed. All crushed with MD5. Just as I thought. ANyway, the developers seems to

Re: [Clamav-users] Clamscan -m segfault , possibly a big problem

2004-02-16 Thread Tomasz Papszun
On Sun, 15 Feb 2004 at 22:34:09 -0700, Starbane wrote: [...] --- SCAN SUMMARY --- Known viruses: 41374 ^ You've got some superfluous database files. There are only 20718 signatures currently. Maybe you've got old format database files left. You should remove

Re: [Clamav-users] SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES

2004-02-16 Thread Antony Stone
On Monday 16 February 2004 1:43 am, Muhamad Soleh Fajari wrote: Peter Bonivart wrote: Mário Luis Ghoneim wrote: What does it means? It means it can't check the digital signatures. It downloads the updates anyway but you can't be sure they have not been compromised. How can I to

Re: [Clamav-users] clamav-devel 20040216 for windows

2004-02-16 Thread Fajar A. Nugraha
Time: 0.592 sec (0 m 0 s) C:\clamav-devel-latestbin\clamscan -V clamscan / ClamAV version devel-20040216 This is on W2K, Sp4, no Cygwin. Again, have you tried it in other machines? Regards, Fajar A. Nugraha --- SF.Net is sponsored by: Speed Start

Re: [Clamav-users] Segmentation fault clamav clamav-milter

2004-02-16 Thread Trog
On Sun, 2004-02-15 at 21:47, Patrik wrote: Running clamav and clamav-milter on linux: ClamAV version devel-20040210, clamav-milter version 0.66m We're having lots of mails out and in from server everyday but we're not really able to trust clamd because it quits randomly. clamd.log says:

Re: [Clamav-users] Error Message

2004-02-16 Thread Andy Fiddaman
On Mon, 16 Feb 2004, Nigel Horne wrote: ; On Monday 16 Feb 2004 4:37 am, Doug Hardie wrote: ; ; Feb 15 19:14:18 1.4 zoon clamav-milter: ClamAv: private data not NULL ; What does the message mean and is ; there a configuration parameter I need to alter to avoid it? ; ; This sounds like an

[Clamav-users] Re: Clamscan -m segfault , possibly a big problem

2004-02-16 Thread Starbane
Tomasz Papszun wrote: On Sun, 15 Feb 2004 at 22:34:09 -0700, Starbane wrote: [...] --- SCAN SUMMARY --- Known viruses: 41374 ^ You've got some superfluous database files. There are only 20718 signatures currently. Maybe you've got old format database files

Re: [Clamav-users] Re: Clamscan -m segfault , possibly a big problem

2004-02-16 Thread Tomasz Papszun
On Mon, 16 Feb 2004 at 3:10:48 -0700, Starbane wrote: Tomasz Papszun wrote: On Sun, 15 Feb 2004 at 22:34:09 -0700, Starbane wrote: --- SCAN SUMMARY --- Known viruses: 41374 ^ You've got some superfluous database files. There are only 20718 signatures

[Clamav-users] Re: clamav-devel 20040216 for windows

2004-02-16 Thread Ignasi Prat
Seems I replied your previous post too early :) Using your daily CVS's since last week. :D C:\clamav-devel-latest\binfreshclam -v [snip] STATUS_ILLEGAL_INSTR UCTION 7543 [main] freshclam 1856 open_stackdumpfile: Dumping stack trace to freshcl am.exe.stackdump [snip] The same

[Clamav-users] Freshclam checks.

2004-02-16 Thread Carles Xavier Munyoz Bald
Hi, I'm running freshcam in daemon mode and cheking for updates 2 times at day. I have seen in the log file that it is doing the check every 2 hours istead of 2 times at day. I launch the daemon this way: /internet/ClamAV/bin/freshclam -d --checks=2 --quiet -l /internet/ClamAV/log/freshclam.log

[Clamav-users] help required with out of memory error

2004-02-16 Thread jason . walton
Hi, I've had spam assassin running with sendmail perfectly well for ages now. I then thought I'd add in clamav using the the defaults (if it isn't bust, don't fix it). Environment being run in is: Solaris 8 (intel) Sendmail 8.12.9 Spam Assassin 2.61 clamav 0.66 gcc 3.2.2 I have tried gcc 2.95

Re: [Clamav-users] Freshclam checks.

2004-02-16 Thread Tomasz Papszun
On Mon, 16 Feb 2004 at 13:38:27 +0100, Carles Xavier Munyoz Baldó wrote: Hi, I'm running freshcam in daemon mode and cheking for updates 2 times at day. I have seen in the log file that it is doing the check every 2 hours istead of 2 times at day. I launch the daemon this way:

Re: [Clamav-users] Freshclam checks.

2004-02-16 Thread Tomasz Kojm
On Mon, 16 Feb 2004 13:38:27 +0100 Carles Xavier Munyoz Bald [EMAIL PROTECTED] wrote: Hi, I'm running freshcam in daemon mode and cheking for updates 2 times at day. I have seen in the log file that it is doing the check every 2 hours istead of 2 times at day. I launch the daemon this way:

Re: [Clamav-users] Freshclam checks.

2004-02-16 Thread Tom Gwilt
On Mon, 16 Feb 2004, Tomasz Papszun wrote: On Mon, 16 Feb 2004 at 13:38:27 +0100, Carles Xavier Munyoz Baldó wrote: Hi, I'm running freshcam in daemon mode and cheking for updates 2 times at day. I have seen in the log file that it is doing the check every 2 hours istead of 2 times at

Re: [Clamav-users] clamav-devel-20040215 : automake build error on Fedora Core 1

2004-02-16 Thread Tomasz Kojm
On Mon, 16 Feb 2004 13:24:55 +0700 Fajar A. Nugraha [EMAIL PROTECTED] wrote: automake-1.6 --gnu Makefile aclocal.m4:4200: version mismatch. This is Automake 1.6.3, but aclocal.m4 aclocal.m4:4200: was generated for Automake 1.6.1. You should recreate aclocal.m4:4200: aclocal.m4 with aclocal

[Clamav-users] Upgrading to ClamAV 0.67 from 0.65

2004-02-16 Thread Craig Daters
I installed 0.65 on a RH9 system using the source install (as opposed to the RPM) and I now want to upgrade to 0.67 using the same method. What is the proper way to do this? Is there and uninstall/upgrade method for doing this? Or, do I just download it, un-tar the 0.67 files then run: $

[Clamav-users] Implementation Questions

2004-02-16 Thread Spam
I have installed ClamAV friday and have it successfully tagging viruses e-mail with a header, but am wondering how people have actually stoped the message that has a virus attached. It seems to me like the easiest way would be to just not devilver any mail that has a header saying it has a

Re: [Clamav-users] Implementation Questions

2004-02-16 Thread Antony Stone
On Monday 16 February 2004 3:27 pm, Spam wrote: I have installed ClamAV friday and have it successfully tagging viruses e-mail with a header, but am wondering how people have actually stoped the message that has a virus attached. It seems to me like the easiest way would be to just not

Re: [Clamav-users] Upgrading to ClamAV 0.67 from 0.65

2004-02-16 Thread Jesper Juhl
On Mon, 16 Feb 2004, Craig Daters wrote: I installed 0.65 on a RH9 system using the source install (as opposed to the RPM) and I now want to upgrade to 0.67 using the same method. What is the proper way to do this? Is there and uninstall/upgrade method for doing this? Or, do I just

Re: [Clamav-users] Implementation Questions

2004-02-16 Thread Craig Daters
MailScanner at http://www.mailscanner.info does this quite nicely! It is easy to install and get up and running. I have installed ClamAV friday and have it successfully tagging viruses e-mail with a header, but am wondering how people have actually stoped the message that has a virus attached.

[Clamav-users] Re: help required with out of memory error

2004-02-16 Thread jason . walton
HELP! Just in case it was down to the version of clamAV I was running, I just upgraded to the latest version (0.67-1) and I get the same errors: ./testSendmailIn [EMAIL PROTECTED] Connecting to localhost.nomadsoft.co.uk. via relay... 421 4.0.0 out of memory: Not enough space QUIT [EMAIL

Re: [Clamav-users] Implementation Questions

2004-02-16 Thread Matt K. Best
On Monday 16 February 2004 10:27, Spam wrote: I have installed ClamAV friday and have it successfully tagging viruses e-mail with a header, but am wondering how people have actually stoped the message that has a virus attached. It seems to me like the easiest way would be to just not devilver

Re: [Clamav-users] Upgrading to ClamAV 0.67 from 0.65

2004-02-16 Thread Odhiambo Washington
* Craig Daters [EMAIL PROTECTED] [20040216 18:37]: wrote: I installed 0.65 on a RH9 system using the source install (as opposed to the RPM) and I now want to upgrade to 0.67 using the same method. What is the proper way to do this? Is there and uninstall/upgrade method for doing

Re: [Clamav-users] Upgrading to ClamAV 0.67 from 0.65

2004-02-16 Thread Craig Daters
Thanks Jesper, I'll check it out. Here's what I do personally which seems to work great; I'm using Slackware Linux, and I build ClamAV from source. But, I don't want to just do make install as that leaves me with the responsabillity to manually clean out old versions by hand etc. So what I do

[Clamav-users] Database initialize error

2004-02-16 Thread Chadwick Wachs
After installing ClamAV on OS X 1.3.2 (client with XTools), I am getting the following error when I try to run the application: [chadwick:/usr/local/bin] root# /usr/local/sbin/clamd LibClamAV debug: Loading databases from /var/clamav_db ERROR: Database initialization error. There is an empty

Re: [Clamav-users] Upgrading to ClamAV 0.67 from 0.65

2004-02-16 Thread Craig Daters
$ ./configure --sysconfdir=/etc I do the same, but I am particular about the options I pass to configure. What kind of options are you particular about? Should I be particular about them too? -- -- Craig Daters ([EMAIL PROTECTED]) Systems Administrator West Press Printing 1663 West Grant Road

Re: [Clamav-users] Database initialize error

2004-02-16 Thread Antony Stone
On Monday 16 February 2004 4:46 pm, Chadwick Wachs wrote: After installing ClamAV on OS X 1.3.2 (client with XTools), I am getting the following error when I try to run the application: [chadwick:/usr/local/bin] root# /usr/local/sbin/clamd LibClamAV debug: Loading databases from

Re: [Clamav-users] Implementation Questions

2004-02-16 Thread Dennis Skinner
On Mon, 2004-02-16 at 10:27, Spam wrote: I have installed ClamAV friday and have it successfully tagging viruses e-mail with a header, but am wondering how people have actually stoped the message that has a virus attached. You want to run ClamAV at SMTP time and stop the virus before your

Re: [Clamav-users] Database initialize error

2004-02-16 Thread Tomasz Papszun
On Mon, 16 Feb 2004 at 9:46:48 -0700, Chadwick Wachs wrote: After installing ClamAV on OS X 1.3.2 (client with XTools), I am getting the following error when I try to run the application: [chadwick:/usr/local/bin] root# /usr/local/sbin/clamd LibClamAV debug: Loading databases from

Re: [Clamav-users] Error Message

2004-02-16 Thread Doug Hardie
On Feb 16, 2004, at 00:34, Nigel Horne wrote: On Monday 16 Feb 2004 4:37 am, Doug Hardie wrote: Feb 15 19:14:18 1.4 zoon clamav-milter: ClamAv: private data not NULL What does the message mean and is there a configuration parameter I need to alter to avoid it? This sounds like an error thrown

Re: [Clamav-users] Error Message

2004-02-16 Thread Doug Hardie
On Feb 16, 2004, at 01:52, Andy Fiddaman wrote: On Mon, 16 Feb 2004, Nigel Horne wrote: ; On Monday 16 Feb 2004 4:37 am, Doug Hardie wrote: ; ; Feb 15 19:14:18 1.4 zoon clamav-milter: ClamAv: private data not NULL ; What does the message mean and is ; there a configuration parameter I

[Clamav-users] Problem scanning ZIP archives with clamdscan and not clamscan

2004-02-16 Thread Lucas Albers
I've encounted this problem: clamscan will scan zip files and detect a virus. clamdscan will not. clamdscan part.1.body.zip /tmp/part.1.body.zip: OK --- SCAN SUMMARY --- Infected files: 0 clamscan part.1.body.zip --- SCAN SUMMARY --- part.1.body.zip: Worm.Gibe.F

RE: [Clamav-users] Implementation Questions

2004-02-16 Thread Michael St. Laurent
Antony Stone mailto:[EMAIL PROTECTED] wrote: I run MailScanner http://www.mailscanner.info as a wrapper to ClamAV and SpamAssassin (it can also handle many other A-V engines, and does further tests checks of its own), and I find this a very good solution to handling email. I recently moved

Re: [Clamav-users] Implementation Questions

2004-02-16 Thread Brian Bruns
On Monday, February 16, 2004 10:27 AM [EST], Spam [EMAIL PROTECTED] wrote: I have installed ClamAV friday and have it successfully tagging viruses e-mail with a header, but am wondering how people have actually stoped the message that has a virus attached. It seems to me like the easiest way

[Clamav-users] feature request in virusdb ml

2004-02-16 Thread Cedric Foll
Hi, I would like to have information obout the severity/frequence of viruses add in the mailing list. It should be nice to know when a virus added is very dangerous and that an update is required urgently. At least add the information provided during submission about frequency of the virus.

[Clamav-users] freshclam update rate

2004-02-16 Thread Bill Randle
I searched the archives, but didn't see an answer so pardon me if it's a FAQ. How often is it reasonable to call freshclam (either from cron or in daemon mode) to check for new virusdb updates? Obviously there's a tradeoff between detecting fast spreading viruses like MyDoom and overloading the db

[Clamav-users] Re: clamav-devel 20040213 for windows

2004-02-16 Thread Andrey Cherezov
Date: Mon, 16 Feb 2004 16:15:58 +0700 From: Fajar A. Nugraha [EMAIL PROTECTED] Subject: Re: [Clamav-users] Re: clamav-devel 20040213 for windows Just as I thought. ANyway, the developers seems to have fixed this by adding O_BINARY (again) for Cygwin build only. As usual, you can get my

Re: [Clamav-users] freshclam update rate

2004-02-16 Thread Lionel Bouton
Bill Randle wrote the following on 02/16/2004 10:12 PM : I searched the archives, but didn't see an answer so pardon me if it's a FAQ. How often is it reasonable to call freshclam (either from cron or in daemon mode) to check for new virusdb updates? Obviously there's a tradeoff between detecting

Re: [Clamav-users] Re: clamav-devel 20040213 for windows

2004-02-16 Thread Fajar A. Nugraha
Brian Bruns wrote: BTW, the only reason why we are putting out our own build (not to compete with you obviously) Obviously :) My builds are mainly for testing purposes; thus it is based on daily CVS snapshot. is because we are trying to eventually release a 'quality assured' version of clamav

Re: [Clamav-users] W32.Welchia.Worm

2004-02-16 Thread Luke Scharf
On Mon, 2004-02-16 at 14:49, Patricia Viana wrote: OK, it does some damage. like installing a small web server and overwriting html files for a screwed up page But after all, it does install some fixes and tries to remove the worms MyDoom.A and MyDoom.B!! It's probably the

[Clamav-users] TNEF?

2004-02-16 Thread Tommy McNeely
Just curious... I have all these Outlook users who claim they need TNEF files to not be blocked anymore, does clamav directly un-encode them for scanning, or do I need to get a perl module or external executable? Thanks, Tommy PS: building this on Solaris is making me pull hair out.. more later

Re: [Clamav-users] freshclam update rate

2004-02-16 Thread Luke Scharf
On Mon, 2004-02-16 at 16:35, Lionel Bouton wrote: Once an hour is fine, but if you use crontab please add a once randomly chosen sleep between 0 and 3599 second before launching freshclam. As lots of people using crontab put something like 0 * * * * ... The database mirrors have huge peaks

Re: [Clamav-users] Problems after freshclam

2004-02-16 Thread Lloyd Albin
Hello, Have you fixed the Dazuko support yet? I have not seen any message in this list saying that it has been fixed. I just installed v0.66 today when I enabled ClamukoScanOnLine I get the following error message ERROR: Parse error at line 190: Unknown option ClamukoScanOnLine. ERROR: Can't

Re: [Clamav-users] freshclam update rate

2004-02-16 Thread Bill Randle
On Mon, 2004-02-16 at 15:11, Luke Scharf wrote: On Mon, 2004-02-16 at 16:35, Lionel Bouton wrote: Once an hour is fine, but if you use crontab please add a once randomly chosen sleep between 0 and 3599 second before launching freshclam. As lots of people using crontab put something like 0

Re: [Clamav-users] freshclam update rate

2004-02-16 Thread Lucas Albers
Luke Scharf said: This does seem more polite than hitting it hard, right on the hour. -Luke -- Luke Scharf, Systems Administrator Virginia Tech Aerospace and Ocean Engineering If you use freshclam as a daemon, you don't have to worry about this as it randomizes it? -- Luke Computer

Re: [Clamav-users] feature request in virusdb ml

2004-02-16 Thread Antony Stone
On Monday 16 February 2004 8:54 pm, Cedric Foll wrote: Hi, I would like to have information obout the severity/frequence of viruses add in the mailing list. It should be nice to know when a virus added is very dangerous and that an update is required urgently. At least add the information

[Clamav-users] New user--- Frashclam error

2004-02-16 Thread isp-lists [at] beachcomp.com
Anyone have any ideas what I'm doing wrong? C:\clamav-devel\binfreshclamClamAV update process started at Mon Feb 16 20:00:41 2004Reading CVD header (main.cvd): OKmain.cvd is up to date (version: 19, sigs: 19987, f-level: 1, builder: ddm)Reading CVD header (daily.cvd): OKDownloading

Re: [Clamav-users] W32.Welchia.Worm

2004-02-16 Thread russ
On Mon, 2004-02-16 at 14:49, Patricia Viana wrote: Could this be considered a well-intended virus?!?! I work for a school system with about 2000 computers on our network. Welchia Shut down our network for 4 days until we perfected a way to squash it. (Norton was no help at all BTW)

[Clamav-users] Re: Re: making clamav on solaris {Scanned}

2004-02-16 Thread Tommy McNeely
On Sun, 08 Feb 2004 15:34:01 +, Andy Fiddaman wrote: Probably worth mentioning at this point that the 'whoami' utility isn't standard in core solaris either, that needs the SUNWscpu (SunOS 4.x compatibility utilities) - who am i | awk '{print$1}' does the same though. Andy [EMAIL

Re: [Clamav-users] Re: Re: making clamav on solaris {Scanned}

2004-02-16 Thread Carl Holtje ;021;vcsg6;
As a caveat, sometimes the 'who am i' will return something more along the lines of: username!host pts. such that the awk solution may or may not work... Might think to awk or cut the line, and then a sed to be sure to get just the username... Carl On Mon, 16 Feb 2004, Tommy

[Clamav-users] Clamav false positive?

2004-02-16 Thread Sam Miller
Firstly, I'd like to say thank you for such a useful utility. My question concerns scanning a Windows partition from a Linux partition on the same drive. Running Clamav 0.65-3 on Debian based Libranet, scanned a WinME partition and came up with the report that FunLove.4099 had been found in

Re: [Clamav-users] Upgrading to ClamAV 0.67 from 0.65

2004-02-16 Thread Odhiambo Washington
* Craig Daters [EMAIL PROTECTED] [20040216 21:11]: wrote: $ ./configure --sysconfdir=/etc I do the same, but I am particular about the options I pass to configure. What kind of options are you particular about? Should I be particular about them too? ./configure --disable-clamav

[Clamav-users] Re: TNEF?

2004-02-16 Thread Starbane
Tommy McNeely wrote: Just curious... I have all these Outlook users who claim they need TNEF files to not be blocked anymore, does clamav directly un-encode them for scanning, or do I need to get a perl module or external executable? Ask your Outlook users what they think the TNEF attachments do,

Re: [Clamav-users] Implementation Questions

2004-02-16 Thread Fajar A. Nugraha
Brian Bruns wrote: I use exim 4.30 with the exiscan/local_scan patches Hey, another thing we share in common! which integrate clamav directly into exim. Works like a charm Very true! It can reject virus right at SMTP time, AND with less CPU load than those perl-scanners too :) and stops a

Re: [Clamav-users] New user--- Frashclam error

2004-02-16 Thread Fajar A. Nugraha
isp-lists [at] beachcomp.com wrote: Anyone have any ideas what I'm doing wrong? You're not doing anything wrong. It's a known problem with older ClamAV on Win32 machines without Cygwin. C:\*clamav-devel*\binfreshclam I assume you're using Brian Burns' build from www.sosdg.org ? Newer CVS

Re: [Clamav-users] freshclam update rate

2004-02-16 Thread Lionel Bouton
Lucas Albers wrote the following on 02/17/2004 01:17 AM : Luke Scharf said: This does seem more polite than hitting it hard, right on the hour. -Luke -- Luke Scharf, Systems Administrator Virginia Tech Aerospace and Ocean Engineering If you use freshclam as a daemon, you don't have to