[Clamav-users] Yet another TESTVIRUS.org result !!

2004-03-24 Thread Dilip M
Hi, I'm running clamav-0.67-1, with Exim 4.30/exiscan-acl patch revision 14. I got these viruses skipped while testing tro testvirus.org Test # 12,19,21,23,25 Is this normal or i need to upgrade ? Thanks -Dilip --- This SF.Net email is

[Clamav-users] Adding a FakesSender tag?

2004-03-24 Thread Thomas -Balu- Walter
Hi all, did anyone come up with the idea for a general tag added to the clamav virus names for viruses that fake the sender? That way you won't have to update your amavisd-new all the time a new sender faking virus joins the arena... Balu

RE: [Clamav-users] Adding a FakesSender tag?

2004-03-24 Thread Diego d'Ambra
-Original Message- From: [EMAIL PROTECTED] [mailto:clamav-users- [EMAIL PROTECTED] On Behalf Of Thomas -Balu- Walter Sent: 24. marts 2004 09:36 To: [EMAIL PROTECTED] Subject: [Clamav-users] Adding a FakesSender tag? did anyone come up with the idea for a general tag added to the

Re: [Clamav-users] Clamav on Linux Gateway to Exchange - Clamav locking up sendmail

2004-03-24 Thread Peter McCreath
I had a similar problem, upgrading to sendmail 8.12.11 seemed so cure it. I think there was a bug in the sendmail libmilter, Regards Peter --- Stevens, John [EMAIL PROTECTED] wrote: Hi All, I have had a problem occur twice on a Linux (Cobalt RaQ3) gateway for a MS Exchange Server (Our

RE: [Clamav-users] Clamav 0.68-1 port for openbsd has been released

2004-03-24 Thread Trog
On Wed, 2004-03-24 at 10:26, LOYET Jerome wrote: (running clamdscan / and killing it by Ctrl+C does not stops clamd scan ..) I added code to CVS yesterday to do that. I'd appreciate your testing it on BSD, with both TCP and Local sockets. Cheers, -trog signature.asc Description: This is a

RE: [Clamav-users] Iframe messages

2004-03-24 Thread Colin A. Bartlett
Stuart Mycock Sent: Wednesday, March 24, 2004 5:03 AM WhatÂ’s the consensus about messages with embedded iframe links? They look like a great potential for viral activity because they can be used to auto-download viruses, etc.. The reason I ask is my secondary AV caught a couple of messages

[Clamav-users] Milter reject something with no reason

2004-03-24 Thread Clamav
Hi! I run clamav 0.70rc with sendmail-8.12.9 and sometimes I get the message: Milter: data, reject=451 4.7.1 Please try again later Clamd is running - nothing crashed!!! After that messsage I receive normally my mails and they are scanned by clamav!!! I have seen that there was a discussion

RE: [Clamav-users] Iframe messages

2004-03-24 Thread Randal, Phil
Don't call us, we'll call you. Marketing emails are spam unless explicitly requested. Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of

[Clamav-users] (no subject)

2004-03-24 Thread Santiago Hoyos Restrepo
command --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system

[Clamav-users] Netsky Q version

2004-03-24 Thread cc
Hi, I've been geeting some NetSky.Q (NOD32) viruses getting through clamav. The next one I get I'll save it. But can someone tell me what the procedure is to submit a sample? Should I just zip up the attachment and encrypt the file? Thanks Edmund PS: Sorry

Re: [Clamav-users] Virus ID

2004-03-24 Thread Lars Kristiansen
Second: is there a database for clamav with descriptions of the viruses? I wondered if some kind of user-supplemented database could be used online, and *there* have the aliases, rather than bulk up the antivirus database with aliases and pseudonyms. If you see a virus hit, you could refer

Re: [Clamav-users] Virus ID

2004-03-24 Thread Bart Silverstrim
On Mar 24, 2004, at 12:01 PM, Lars Kristiansen wrote: Could it be an idea to request possibility to list an alias in the output. For example if one is running both f-prot and clamav, and want one statistic. Then you might want to tell clamav to list the f-prot alias in log. If it were a vote,

[Clamav-users] freshclam debugging help

2004-03-24 Thread Colin A. Bartlett
Greetings, I've been using ClamAV for months without any problems. I use it in conjunction with MailScanner to scan our client's email. However today I noticed a plethora of messages being marked as clean but that really did have viruses attached. I posted them to the web-based checker and sure

Re: [Clamav-users] ClamAV missing 100% of Worm.SomeFool.Gen-1 on OSX

2004-03-24 Thread Carl Holtje ;021;vcsg6;
This sounds less like a ClamAV problem than a definition freshness problem... Run freshclam, and try again... Carl On Wed, 24 Mar 2004, OpenMacNews wrote: hi, all three of (1) latest head build, (2) 0.70rc and (3) 0.67 of clamav on OSX 10.3.3 are missing 100% of the Worm.SomeFool.Gen-1

Re: [Clamav-users] freshclam debugging help

2004-03-24 Thread Tomasz Papszun
On Wed, 24 Mar 2004 at 13:09:27 -0500, Colin A. Bartlett wrote: [...] Checking for a new database - started at Wed Mar 24 13:01:07 2004 Connected to clamav.elektrapro.com. Reading md5 sum (viruses.md5): OK viruses.db is up to date. Reading md5 sum (viruses2.md5): OK ERROR: Can't open new

Re: [Clamav-users] Netsky Q version

2004-03-24 Thread Tomasz Papszun
On Thu, 25 Mar 2004 at 0:48:03 +0800, cc wrote: [...] can someone tell me what the procedure is to submit a sample? http://clamav.sourceforge.net/cgi-bin/sendvirus.cgi Should I just zip up the attachment and encrypt the file? No. Submit it as it is. -- Tomasz Papszun

Re: [Clamav-users] Milter reject something with no reason

2004-03-24 Thread Todd Lyons
On Wed, 2004-03-24 at 05:39, Clamav wrote: I run clamav 0.70rc with sendmail-8.12.9 and sometimes I get the message: Milter: data, reject=451 4.7.1 Please try again later Clamd is running - nothing crashed!!! After that messsage I receive normally my mails and they are scanned by clamav!!!

Re: [Clamav-users] ClamAV missing 100% of Worm.SomeFool.Gen-1 on (clamav-users: addressed to exclusive sender for this address) OSX

2004-03-24 Thread OpenMacNews
hi, i've had no problems logged re: freshclam updates ... just in case I did a manual update: ClamAV update process started at Wed Mar 24 12:32:55 2004 Reading CVD header (main.cvd): OK main.cvd is up to date (version: 21, sigs: 20094, f-level: 1, builder: tkojm)

RE: [Clamav-users] ClamAV missing 100% of Worm.SomeFool.Gen-1 on (clamav-users: addressed to exclusive sender for this address) OSX

2004-03-24 Thread Jim Maul
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of OpenMacNews Sent: Wednesday, March 24, 2004 3:35 PM To: [EMAIL PROTECTED] Subject: Re: [Clamav-users] ClamAV missing 100% of Worm.SomeFool.Gen-1 on (clamav-users: addressed to exclusive sender for this

RE: [Clamav-users] ClamAV missing 100% of Worm.SomeFool.Gen-1 on (clamav-users: addressed to exclusive sender for this address) OSX (clamav-users: addressed to exclusive sender for this address)

2004-03-24 Thread OpenMacNews
clamav is being called via the CGPAV script from CommuniGatePro ... cgpav was built, per instructions, with the --with-antivirus=clamav option -- On Wednesday, March 24, 2004 4:34 PM -0500 Jim Maul [EMAIL PROTECTED] wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

Re: [Clamav-users] ClamAV missing 100% of Worm.SomeFool.Gen-1 on (clamav-users: addressed to exclusive sender for this address) OSX

2004-03-24 Thread Tomasz Kojm
On Wed, 24 Mar 2004 12:34:41 -0800 OpenMacNews [EMAIL PROTECTED] wrote: hi, i've had no problems logged re: freshclam updates ... just in case I did a manual update: ClamAV update process started at Wed Mar 24 12:32:55 2004 Reading CVD header (main.cvd): OK

Re: [Clamav-users] freshclam debugging help

2004-03-24 Thread Tomasz Kojm
On Wed, 24 Mar 2004 13:09:27 -0500 Colin A. Bartlett [EMAIL PROTECTED] wrote: Can someone tell me how to find out what database version I cam using? I searched the docs and manpages but couldn't find anything. sigtool -i /usr/local/share/clamav/main.cvd sigtool -i

Re: [Clamav-users] ClamAV missing 100% of Worm.SomeFool.Gen-1 on (clamav-users: addressed to exclusive sender for this address) (clamav-users: addressed to exclusive sender for this address) OSX

2004-03-24 Thread OpenMacNews
-- On Wednesday, March 24, 2004 11:58 PM +0100 Tomasz Kojm [EMAIL PROTECTED] wrote: i've had no problems logged re: freshclam updates ... just in case I did a manual update: ClamAV update process started at Wed Mar 24 12:32:55 2004 Reading CVD header (main.cvd): OK

Re: [Clamav-users] ClamAV missing 100% of Worm.SomeFool.Gen-1 on (clamav-users: addressed to exclusive sender for this address) (clamav-users: addressed to exclusive sender for this address) OSX

2004-03-24 Thread Tom Gwilt
well that's a very interesting point ... so, i checked my clamd.log, only to find: - /tmp/cgpavqIWML2: Worm.SomeFool.Gen-1 FOUND snip which means to me cgpav *is* processing the messages, and per your comment abt the name, it IS ClamAV that's catching them ... the

Re: [Clamav-users] RE: memory leak?

2004-03-24 Thread Kelsey Cummings
On Tue, Mar 23, 2004 at 03:17:11PM -0500, Jesse Guardiani wrote: Lucas Albers wrote: I'm a bit hesitant of upgrading to .68 or .70-rc if it appears to have a memory leak. At what point can the developers say: this x release does not have a memory leak. :) Never, or about 2 years after

Re: [Clamav-users] freshclam debugging help

2004-03-24 Thread Odhiambo Washington
* Tomasz Papszun [EMAIL PROTECTED] [20040324 23:19]: wrote: On Wed, 24 Mar 2004 at 13:09:27 -0500, Colin A. Bartlett wrote: [...] Checking for a new database - started at Wed Mar 24 13:01:07 2004 Connected to clamav.elektrapro.com. Reading md5 sum (viruses.md5): OK viruses.db is up

AW: [Clamav-users] Milter reject something with no reason

2004-03-24 Thread Clamav
On Wed, 2004-03-24 at 05:39, Clamav wrote: I run clamav 0.70rc with sendmail-8.12.9 and sometimes I get the message: Milter: data, reject=451 4.7.1 Please try again later Clamd is running - nothing crashed!!! After that messsage I receive normally my mails and they are scanned by

[Clamav-users] W97M.THUS.G

2004-03-24 Thread Michael V. Sokolov
Sirs, i have noticed that clamd 0.70 passes %subj (it was blocked by TM MailScan), i have no original files, so i just warn pplz PS: OLE2 support enabled. -- [EMAIL PROTECTED], call: 6965 --- This SF.Net email is sponsored by: IBM Linux

[Clamav-users] Application to generate CLAMAV report

2004-03-24 Thread [EMAIL PROTECTED]
Dear all, I have created a small application that allows the creation of a report based on the email virus report that Clamav sends out. It can generate report based on the virus name, virus sender and virus recipient. It also has a user interface that allows for a user to

Re: [Clamav-users] ClamAV missing 100% of Worm.SomeFool.Gen-1 on (clamav-users: addressed to exclusive sender for this address) OSX

2004-03-24 Thread Antony Stone
On Wednesday 24 March 2004 10:58 pm, Tomasz Kojm wrote: On Wed, 24 Mar 2004 12:34:41 -0800 OpenMacNews [EMAIL PROTECTED] wrote: hi, i've had no problems logged re: freshclam updates ... just in case I did a manual update: ClamAV update process started at Wed Mar 24 12:32:55

Re: [Clamav-users] Application to generate CLAMAV report

2004-03-24 Thread Bo-Lina teknisk support
Neither of these link's work. - Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, March 25, 2004 7:35 AM Subject: [Clamav-users] Application to generate CLAMAV report Dear all, I have created a small application that allows the creation of a