Re: [Clamav-users] Unable to open file or directory ERROR

2004-10-20 Thread Bogusaw Brandys
Hello, Grant Supp wrote: I'm using Clam AV 0.80 with Qmail-Scanner 1.23 and receive the following lines in my clamd.log: Tue Oct 19 15:22:34 2004 - /var/spool/qmailscan/tmp/newmail01.readyhosting.com109821735148216078/1098217354.16090-1.newmail01.readyhosting.com: Trojan.Dropper.JS.Zerolin-6

RE: [Clamav-users] Upgrade from 75.1 to 80

2004-10-20 Thread Graham Dodd
[EMAIL PROTECTED] wrote: I have downloaded ver80 and now I'm not sure how to proceed. I've read the manual but I can't info on how to upgrade, is it best to remove the previous version or install over it.? This came from someone on the list, I've just made a few minor changes With ver 0.80

Re: [Clamav-users] OT - embedded message/rfc822 mimeparts in messages on this list

2004-10-20 Thread Tomasz Papszun
On Tue, 19 Oct 2004 at 17:20:38 -0500, Daniel J McDonald wrote: Am I the only one who sees several of the posters with embedded: Content-Type: message/rfc822 that includes embedded text/plain attachments. Evolution opens them up with only one extra step, but if I'm stuck with Outlook (or

Re: [Clamav-users] OT - embedded message/rfc822 mimeparts in messages on this list

2004-10-20 Thread Tomasz Papszun
On Tue, 19 Oct 2004 at 19:51:48 -0500, Damian Menscher wrote: On Tue, 19 Oct 2004, Daniel J McDonald wrote: Am I the only one who sees several of the posters with embedded: Content-Type: message/rfc822 [...] Yes, I'm seeing them, and they're annoying as hell. Most of them seem to be

Re: [Clamav-users] New version Clamd with Daemontools

2004-10-20 Thread Tomasz Papszun
On Wed, 20 Oct 2004 at 12:02:57 +0800, Awie wrote: Finally I can supervise new version of clamd. There are some parameter of clamav.conf that no need anymore in clamd.conf. After editing some lines, it works well. However, Qmail-scanner still has unrecognize command that I sure it should be

Re: [Clamav-users] OT - embedded message/rfc822 mimeparts in messageson this list

2004-10-20 Thread Maurice Lucas
From: Tomasz Papszun [EMAIL PROTECTED] Sent: Wednesday, October 20, 2004 9:39 AM On Tue, 19 Oct 2004 at 19:51:48 -0500, Damian Menscher wrote: On Tue, 19 Oct 2004, Daniel J McDonald wrote: Am I the only one who sees several of the posters with embedded: Content-Type: message/rfc822 [...] Yes,

Re: [Clamav-users] New version Clamd with Daemontools

2004-10-20 Thread Awie
However, Qmail-scanner still has unrecognize command that I sure it should be OK. Wed, 20 Oct 2004 11:50:22 EDT:4600: run /usr/local/bin/clamdscan -r --disable-summary --max-recursion=10 --max-space =10 /var/spool/qmailscan/tmp/Cybergate10982874224824600 21 WARNING: Ignoring

[Clamav-users] clamav on aix 5.2

2004-10-20 Thread Tayfun ASKER
Hi, I'm trying to upgrade from 0.75 to 0.80 on aix 5.2, using gcc 3.3.4 and gnu ld 2.15. configure script cannot find libmilter. # ./configure --enable-milter checking resolv.h usability... yes checking resolv.h presence... yes checking for resolv.h... yes checking whether setpgrp

Re: [Clamav-users] qmail-scanner-1.23 and clamav 0.80

2004-10-20 Thread Alex Pleiner
* Jim Maul [EMAIL PROTECTED] [2004-10-19 16:14]: Its actually --no-summary although --disable-summary may still work. Oh yes, thank you. I just removed all args that appeared in my log as obsolete. Alex -- Alex Pleinerzeitform Internet Dienste mailto:[EMAIL

Re: [Clamav-users] OT - embedded message/rfc822 mimeparts in messages on this list

2004-10-20 Thread Jim Maul
Stephen Gran wrote: On Tue, Oct 19, 2004 at 06:26:30PM -0700, Todd Lyons said: Christopher X. Candreva wanted us to know: Yes, I'm seeing them, and they're annoying as hell. Most of them seem to be from Trog, thought the other poster that said they were forwarded messages broke his own claim,

Re: [Clamav-users] New version Clamd with Daemontools

2004-10-20 Thread Jim Maul
Awie wrote: However, Qmail-scanner still has unrecognize command that I sure it should be OK. Wed, 20 Oct 2004 11:50:22 EDT:4600: run /usr/local/bin/clamdscan -r --disable-summary --max-recursion=10 --max-space =10 /var/spool/qmailscan/tmp/Cybergate10982874224824600 21 WARNING: Ignoring option

RE: [Clamav-users] Upgrade from 75.1 to 80

2004-10-20 Thread Ken Jones
[EMAIL PROTECTED] wrote: I havrecommendaded ver80 and now I'm not sure how to proceed. I've read the manual but I can't info on how to upgrade, is it best to remove the previous version or install over it.? This came from someone on the list, I've just made a few minor changes With ver

Re: [Clamav-users] clamav on aix 5.2

2004-10-20 Thread Ken Jones
Hi, I'm trying to upgrade from 0.75 to 0.80 on aix 5.2, using gcc 3.3.4 and gnu ld 2.15. configure script cannot find libmilter. # ./configure --enable-milter checking resolv.h usability... yes checking resolv.h presence... yes checking for resolv.h... yes checking

Re: [Clamav-users] 0.80 Build Errors

2004-10-20 Thread Rob MacGregor
On Wed, 20 Oct 2004 08:29:37 -0400, Scott Rothgaber [EMAIL PROTECTED] wrote: On FreeBSD 4.10 I get the following. Is this covered somewhere? 0.75.1 built without a hitch. Have you tried installing it from the ports? -- Please keep list traffic on the list. Rob MacGregor

Re: [Clamav-users] 0.80 Build Errors

2004-10-20 Thread Robert Blayzor
Scott Rothgaber wrote: On FreeBSD 4.10 I get the following. Is this covered somewhere? 0.75.1 built without a hitch. cd /usr/ports/security/clamav make install clean Worked fine for me. -- Robert Blayzor, BOFH INOC, LLC rblayzor@(inoc.net|gmail.com) PGP: http://www.inoc.net/~dev/ Key fingerprint

[Clamav-users] malformed database

2004-10-20 Thread Dmitry Alexeyev
Hi, I've got a strange problem I cannot track down. After clean databases update, clamd refuses to start: Starting Clam AntiVirus Daemon: clamdLibClamAV debug: Setting /var/tmp as global temporary directory LibClamAV debug: Loading databases from /var/lib/clamav LibClamAV debug: Loading

Re: [Clamav-users] malformed database

2004-10-20 Thread Fajar A. Nugraha
Dmitry Alexeyev wrote: If I remove all cvd files and do database update, clamd starts without problems. If freshclam gets called from cron, I get the following error. Always the same line (2249), on both 0.75.1 and 0.80 Now HOW did you update your database without freshclam? manually copy

Re: [Clamav-users] 0.80 Build Errors

2004-10-20 Thread Scott Rothgaber
Rob MacGregor wrote: Have you tried installing it from the ports? Duh! I didn't think that it would be up so quickly. It's building, sans complaints, right now. Thanks for the tip! ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

[Clamav-users] cl_loaddbdir(): Can't open directory

2004-10-20 Thread Frank Elsner
Just installed version 0.80. clamdscan . runs fine saying --- /usr/local/clamav/etc/./TestFile: ClamAV-Test-Signature FOUND --- SCAN SUMMARY --- Infected files: 1 Time: 0.044 sec (0 m 0 s) BUT clamscan -r . gives error message - LibClamAV Error:

Re: [Clamav-users] malformed database

2004-10-20 Thread Dmitry Alexeyev
On Wednesday 20 October 2004 17:53, Fajar A. Nugraha wrote: Dmitry Alexeyev wrote: If I remove all cvd files and do database update, clamd starts without problems. If freshclam gets called from cron, I get the following error. Always the same line (2249), on both 0.75.1 and 0.80 Now HOW

[Clamav-users] Mirror in Argentina

2004-10-20 Thread Mariano Absatz
Hi, I just installed ClamAV on a Debian Sarge machine and I got the option to select the mirror for freshclam. I choose the local mirror offered db.ar.clamav.net (ar is for Argentina), but freshclam failed: ClamAV update process started at Wed Oct 20 10:13:02 2004 Reading CVD header

[Clamav-users] Re: Mirror in Argentina

2004-10-20 Thread Luca Gibelli
Hello Mariano Absatz, Would someone on both lists (or Luca) contact the people from clamav.xmundo.net and ask them to add a single line ServerAlias db.ar.clamav.net within the virtual server with ServerName clamav.xmundo.net Thanks for notifying me of the problem. When I accept a new

Re: [Clamav-users] cl_loaddbdir(): Can't open directory

2004-10-20 Thread Mikel Bauer
Not to sound too obvious, but, does the directory /usr/ClamAV/data/ exist? (case sensitive) -Mikel- On Wed, 20 Oct 2004 16:14:58 +0200, Frank Elsner [EMAIL PROTECTED] wrote: Just installed version 0.80. clamdscan . runs fine saying --- /usr/local/clamav/etc/./TestFile:

Re: [Clamav-users] malformed database

2004-10-20 Thread Fajar A. Nugraha
Dmitry Alexeyev wrote: On Wednesday 20 October 2004 17:53, Fajar A. Nugraha wrote: Dmitry Alexeyev wrote: If I remove all cvd files and do database update, clamd starts without problems. If freshclam gets called from cron, I get the following error. Always the same line (2249), on both

Re: [Clamav-users] cl_loaddbdir(): Can't open directory

2004-10-20 Thread Fajar A. Nugraha
On Wed, 20 Oct 2004 16:14:58 +0200, Frank Elsner [EMAIL PROTECTED] wrote: Just installed version 0.80. clamdscan . runs fine saying --- [snip] BUT clamscan -r . gives error message - LibClamAV Error: cl_loaddbdir(): Can't open directory /usr/ClamAV/data0 ERROR:

Re: [Clamav-users] ClamAV 0.80 Compilation

2004-10-20 Thread Fajar A. Nugraha
On Tue, 19 Oct 2004 14:11:53 -0400, Robin, Rob [EMAIL PROTECTED] wrote: gcc version 2.95.2. BSDi 4.2 (i hate to be on a dead OS, moving to linux soon). LOL. You got that right. I see anything that still use gcc 2.x as obsolete :) ___

Re: [Clamav-users] Unable to open file or directory ERROR

2004-10-20 Thread Grant Supp
Boguslaw Brandys wrote: Is it always when scanning the same files ? Could You try another ? Could You try the same file with OLE2 support disabled ? I'm curious if this is OLE2 related It seems to happen when scanning the same files. Untitled Attachment seems to cause the problem evey

Re: [Clamav-users] malformed database

2004-10-20 Thread Dmitry Alexeyev
What I meant was if you run similar system, you could probably use my build script, binaries, or config files if you get stuck with the default source or RPM. Since you use Linux 2.2 (on x86, I assume?) my Linux static binary should work. Thank you. Looks like I am kinda lost with all these

Re: [Clamav-users] malformed database

2004-10-20 Thread Tomasz Kojm
On Wed, 20 Oct 2004 19:40:52 +0400 Dmitry Alexeyev [EMAIL PROTECTED] wrote: What I meant was if you run similar system, you could probably use my build script, binaries, or config files if you get stuck with the default source or RPM. Since you use Linux 2.2 (on x86, I assume?) my Linux

Re: [Clamav-users] malformed database

2004-10-20 Thread Dmitry Alexeyev
On Wednesday 20 October 2004 19:50, Tomasz Kojm wrote: On Wed, 20 Oct 2004 19:40:52 +0400 Dmitry Alexeyev [EMAIL PROTECTED] wrote: What I meant was if you run similar system, you could probably use my build script, binaries, or config files if you get stuck with the default source or

AW: [Clamav-users] ClamAV 0.80 and leave-temps

2004-10-20 Thread Steffen Heil
Hi http://assp.sourceforge.net/: 8. Basic anti-virus filtering using the ClamAV virus databases. They should use libclamav. Currently that software will miss most of the new malware. If you are with contact with them please ask them to remove the above point from their main site as this is a

Re: [Clamav-users] cl_loaddbdir(): Can't open directory

2004-10-20 Thread Frank Elsner
On Wed, 20 Oct 2004 08:59:22 MDT Mikel Bauer wrote: Not to sound too obvious, but, does the directory /usr/ClamAV/data/ exist? (case sensitive) YES. ls -la /usr/ClamAV/data/ total 1378 drwxrwxr-x2 clamav exim 2048 Oct 20 17:08 . drwxrwxr-x 10 clamav root 2048 Oct

Re: [Clamav-users] malformed database

2004-10-20 Thread Tomasz Kojm
On Wed, 20 Oct 2004 20:07:24 +0400 Dmitry Alexeyev [EMAIL PROTECTED] wrote: Maybe it is interrupted cron job, network issues or anything else. I I don't think so. am pretty sure nothing changes database files after update. Perhaps it is even filesystem issue, I don't know. Fingers crossed it

[Clamav-users] buglet in how clamdscan reports perm issues

2004-10-20 Thread Jason Haar
This is with clamav 0.80 I went to scan a Phishing scam email by using clamdscan. I'd forgotten to change the perms on the file to be world-readable, but clamdscan reported: [jhaar]$ clamdscan citifraud.eml ./citifraud.eml: Access denied. ERROR ./citifraud.eml: OK So it saw the access denied

Re: [Clamav-users] buglet in how clamdscan reports perm issues

2004-10-20 Thread Tomasz Kojm
On Thu, 21 Oct 2004 06:26:46 +1300 Jason Haar [EMAIL PROTECTED] wrote: [jhaar]$ clamdscan citifraud.eml ./citifraud.eml: Access denied. ERROR ./citifraud.eml: OK So it saw the access denied - but then it reports OK? Fixed in CVS. Keep up the good work guys - ClamAV is superb!!! Thanks

[Clamav-users] clamd/clamscan core on some files under IRIX

2004-10-20 Thread Rob Dueckman
I'm running mimedefang/spamassassin/clamav on an IRIX 6.5 machine and have found that some files cause both clamd and clamscan to core. Since I'm still running this combo, I can't forward the message to the list, but it can be found at: ftp://ftp.heloc.com/pub/message.txt.gz Here is the last bit

Re: [Clamav-users] clamd/clamscan core on some files under IRIX

2004-10-20 Thread Ken Jones
I'm running mimedefang/spamassassin/clamav on an IRIX 6.5 machine and have found that some files cause both clamd and clamscan to core. Since I'm still running this combo, I can't forward the message to the list, but it can be found at: ftp://ftp.heloc.com/pub/message.txt.gz Here is the

Re: [Clamav-users] clamd/clamscan core on some files under IRIX

2004-10-20 Thread Nigel Horne
On Wednesday 20 Oct 2004 8:25 pm, Rob Dueckman wrote: Since I'm still running this combo, I can't forward the message to the list, but it can be found at: ftp://ftp.heloc.com/pub/message.txt.gz I've built clam on Linux and have had no probems with the same file. Could this somehow be a

Re: [Clamav-users] clamd/clamscan core on some files under IRIX

2004-10-20 Thread Nigel Horne
On Wednesday 20 Oct 2004 8:31 pm, Ken Jones wrote: I would guess you have an extra / at the end of the following line in clamd.conf: clamd.conf: TemporaryDirectory /var/tmp I can't see how that is the problem since images 1-26 were saved OK and the filename seems to be missing in part 27

Re: [Clamav-users] OT - embedded message/rfc822 mimeparts in messages on this list

2004-10-20 Thread Todd Lyons
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Stephen Gran wanted us to know: Yes, inline signing would probably fix that issue. In my last message, I see: Content-Type: multipart/signed; micalg=pgp-sha1; Mime multipart is not inline signing. It is an inline, gpg signed message. I had no

Re: [Clamav-users] clamd/clamscan core on some files under IRIX

2004-10-20 Thread Jeremy Kitchen
On Wednesday 20 October 2004 02:52 pm, Nigel Horne wrote: 2) What is IRIX? IRIX is SGI's UNIX. -Jeremy -- Jeremy Kitchen ++ Systems Administrator ++ Inter7 Internet Technologies, Inc. [EMAIL PROTECTED] ++ www.inter7.com ++ 866.528.3530 ++ 815.776.9465 int'l kitchen @ #qmail #gentoo

Re: [Clamav-users] clamd/clamscan core on some files under IRIX

2004-10-20 Thread Rob Dueckman
On Wed, 2004-10-20 at 15:52, Nigel Horne wrote: On Wednesday 20 Oct 2004 8:31 pm, Ken Jones wrote: I would guess you have an extra / at the end of the following line in clamd.conf: clamd.conf: TemporaryDirectory /var/tmp we have no problem here. I have the line commented out thus

[Clamav-users] default --checks for freshclam 0.80

2004-10-20 Thread Matthew.van.Eerde
The man freshclam page says that -d requires --checks. If I call freshclam -d and don't specify --checks, what happens? Does it revert to the value specified in /etc/freshclam.conf's Checks setting? Or does it just check once when it starts and never check again? I'm confused as to what the

[Clamav-users] Independent Testing

2004-10-20 Thread Dave P
I am trying to convince my company to switch to open source where possible. It is much easier if the software has been evaluated by an independent group. Unfortunately, reviews that I could find, including GMX Systematic and Heise magazines, were negative. The opinion seemed to be summed up by

Re: [Clamav-users] Independent Testing

2004-10-20 Thread Bill Randle
Dave P wrote: I am trying to convince my company to switch to open source where possible. It is much easier if the software has been evaluated by an independent group. Unfortunately, reviews that I could find, including GMX Systematic and Heise magazines, were negative. The opinion seemed to be

[Clamav-users] Where is signature db file

2004-10-20 Thread sam wun
Dear Clamav experts, I just have a fresh clamav installed in FreeBSD 5.3 system. I have a hard time to allocate the signature database in the system. The following commandline have been using for update the signature: clamav 15245 0.0 0.1 2060 1508 ?? Is7:13PM 0:00.03

Re: [Clamav-users] Independent Testing

2004-10-20 Thread Julio Canto
Bill Randle wrote: Dave P wrote: Are there any independent tests out there that do not paint such a bleak picture? Are there any plans to submit ClamAV or ClamWin to Virus Bulletin? [...] I think a better test is side-by-side comparisons with standard, commercial, products. If you search the