Re: [Clamav-users] Web Site Authentication Prior to VirusDB download

2006-02-03 Thread Tomasz Papszun
On Thu, 02 Feb 2006 at 21:31:45 -0800, Jeremy Kitchen wrote: [EMAIL PROTECTED] wrote: The company I work for has implemented a firewall that only allows certain activity through it. I have requested that the user agent string clamav/* be allowed to communicate with the internet.

[Clamav-users] Zafi worm misidentified as Trojan.Downloader.Small-1004

2006-02-03 Thread Randal, Phil
Christmas! MessageID: k139qE5t016812 Quarantine: /var/spool/MailScanner/quarantine/20060203/k139qE5t016812 Report: ClamAV Module: postcard.index.jpg4031.zip was infected: Trojan.Downloader.Small-1004 Bitdefender: Found virus [EMAIL PROTECTED] in file postcard.index.jpg4031.zip

Re: [Clamav-users] Unofficial Phishing Signatures

2006-02-03 Thread Dennis Davis
On Thu, 2 Feb 2006, George R. Kasica wrote: From: George R. Kasica [EMAIL PROTECTED] To: ClamAV users ML clamav-users@lists.clamav.net Date: Thu, 02 Feb 2006 15:40:41 -0600 Subject: Re: [Clamav-users] Unofficial Phishing Signatures Reply-To: ClamAV users ML clamav-users@lists.clamav.net

Re: [Clamav-users] Zafi worm misidentified as Trojan.Downloader.Small-1004

2006-02-03 Thread Diego d'Ambra
Randal, Phil wrote: Don't know when this started happening, but ClamAV is misidentifying the Zafi worm as Trojan.Downloader.Small-1004. I'm investigating this. I believe that signature small-1004 is matching some sort of PE packer/obfuscater and must be updated to avoid detecting unrelated

[Clamav-users] Clamav stats - [ was Unofficial Phishing Signatures ]

2006-02-03 Thread Nigel Horne
Where did you get the tool to get clamav stats? We just installed it here and could really use something like that. Try the link at http://www.bandsman.co.uk/cgi-bin/virus/display.pl ___ http://lurker.clamav.net/list/clamav-users.html

[Clamav-users] Two problems running clamav

2006-02-03 Thread Penguin
Hallo @ll, 1. I try to upgrade ClamAV from vers. 0.87.1 to 0.88 for hours. System: Fedora Core 3. I downloaded the rpm's from this source (Petr Kristof) http://crash.fce.vutbr.cz/crash-hat/3/clamav/ First of all, I tried to upgrade the installation, but I got the problem, that clamav-milter

[Clamav-users] Two problems running clamav

2006-02-03 Thread Penguin
Hallo @ll, 1. I try to upgrade ClamAV from vers. 0.87.1 to 0.88 for hours. System: Fedora Core 3. I downloaded the rpm's from this source (Petr Kristof) http://crash.fce.vutbr.cz/crash-hat/3/clamav/ First of all, I tried to upgrade the installation, but I got the problem, that clamav-milter

[Clamav-users] Two problems running clamav

2006-02-03 Thread Kuepper, Ralf
Hallo @ll, 1. I try to upgrade ClamAV from vers. 0.87.1 to 0.88 for hours. System: Fedora Core 3. I downloaded the rpm's from this source (Petr Kristof) http://crash.fce.vutbr.cz/crash-hat/3/clamav/ First of all, I tried to upgrade the installation, but I got the problem, that clamav-milter

RE: [Clamav-users] Two problems running clamav

2006-02-03 Thread Nigel Horne
I would remove clamav completely (check you have no files at all that are related to it anywhere), then do a clean install from source. You claim to have spent hours over the upgrade, yet downloading and building from source will take you no more than a few minutes!

Re: [Clamav-users] Zafi worm misidentified as Trojan.Downloader.Small-1004

2006-02-03 Thread Christopher X. Candreva
On Fri, 3 Feb 2006, Diego d'Ambra wrote: I'm investigating this. I believe that signature small-1004 is matching some sort of PE packer/obfuscater and must be updated to avoid detecting unrelated malware. Personally, I'm not as interested in naming the viruses as much as blocking them. If

Re: [Clamav-users] Zafi worm misidentified as Trojan.Downloader.Small-1004

2006-02-03 Thread Diego d'Ambra
Christopher X. Candreva wrote: On Fri, 3 Feb 2006, Diego d'Ambra wrote: I'm investigating this. I believe that signature small-1004 is matching some sort of PE packer/obfuscater and must be updated to avoid detecting unrelated malware. Personally, I'm not as interested in naming the viruses

RE: [Clamav-users] Re: Problem Upgrading to version 0.88 on HP-UX10.20

2006-02-03 Thread Kaplan, Andrew H.
When compiling version 0.88 of ClamAV, will version 2.95.2 work, or do I need to upgrade to a newer version of gcc? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kaplan, Andrew H. Sent: Thursday, February 02, 2006 9:03 PM To: ClamAV users ML Subject:

[Clamav-users] Re: Problem Upgrading to version 0.88 on HP-UX10.20

2006-02-03 Thread René Berber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kaplan, Andrew H. wrote: When compiling version 0.88 of ClamAV, will version 2.95.2 work, or do I need to upgrade to a newer version of gcc? It should work, the manual says you can use versions 2.9.x and 3.x; but if I where having your problem,

Re: Re: Re :Re: [Clamav-users] 100% CPU clamav samba-vscan thunderbird

2006-02-03 Thread Paulo Ricardo Bruck
Hi guys, Hi James -- Snip -- Ok, Lets start again. (1) Is the mail being stored on a samba share? Eg: Thunderbird getting mail and putting it in mail-boxes that are on the server share. yes, exactly Internet- desktop + Norton Anti-virus --- samba share ( Linux + Clamav +

Re: [Clamav-users] Re: Problem Upgrading to version 0.88 on HP-UX10.20

2006-02-03 Thread Richard Feldmann
René Berber spake thusly on Fri, Feb 03, 2006 at 11:49:32AM -0600: It should work, the manual says you can use versions 2.9.x and 3.x; but if I where having your problem, I'll give it a try (the easy way: download a precompiled version of just the c/c++ part of gcc, what's that site in Canada

Re: [Clamav-users] Re: Problem Upgrading to version 0.88 on HP-UX10.20

2006-02-03 Thread Jeff Donsbach
Andrew, Let's step back a minute have you ever been able to compile ANY version of ClamAV on your 10.20 machine? Or, is this your first attempt? It does not look like ClamAV is one of the packages that hpux.connect.org.uk has ported. Jeff D ___

RE: [Clamav-users] Re: Problem Upgrading to version 0.88 on HP-UX10.20

2006-02-03 Thread Kaplan, Andrew H.
Hi there -- My predecessor was able to install version 0.75 onto the system in question. He compiled and installed from source. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeff Donsbach Sent: Friday, February 03, 2006 6:39 PM To: ClamAV users ML