Re: [Clamav-users] Updating OS X Server version of clamav

Rob Lewis wrote: > Is there an explanation anywhere of how to update the version that's > included with OS X Server (Tiger)? In my case I downloaded the source, ran configure, make, and make install. Naturally it's necessary to uninstall any existing versions. The above instructions install c

Re: [Clamav-users] Virus not detected on Linux/MacOSX

Alexandre Biancalana wrote: > On 9/19/08, Dennis Peterson <[EMAIL PROTECTED]> wrote: >> fchan wrote: >> > I read your links and I understand possible DoS and other issues but >> > to repeat Alexandre's idea, why is there no error message for file >>

Re: [Clamav-users] Virus not detected on Linux/MacOSX

fchan wrote: > I read your links and I understand possible DoS and other issues but > to repeat Alexandre's idea, why is there no error message for file > that are too large to notify the admin so they can adjust clamd.conf > or other action. Right now this infected file passes through like if

Re: [Clamav-users] Weird Freshclam behaviour

Brandon Perry wrote: > What do you make of this? > With --enable-experimental: > > [EMAIL PROTECTED]:~/tmp/clamav-0.94/freshclam$ ./freshclam -V > ClamAV 0.94-exp/8190/Mon Sep 8 08:45:44 2008 > [EMAIL PROTECTED]:~/tmp/clamav-0.94/freshclam$ > > Without: > > [EMAIL PROTECTED]:~/tmp/clamav-0.94/f

Re: [Clamav-users] Webinar Recording

Bill Maidment wrote: > On Mon, 08 Sep 2008 17:39:16 -0700, Dennis Peterson wrote >> Bill Maidment wrote: >>> On Mon, 08 Sep 2008 12:53:48 +0100, Nigel Horne wrote >>>> Folks, >>>> >>>> Edwin's Webinar given last week on the topic of 0.94

Re: [Clamav-users] Webinar Recording

Bill Maidment wrote: > On Mon, 08 Sep 2008 12:53:48 +0100, Nigel Horne wrote >> Folks, >> >> Edwin's Webinar given last week on the topic of 0.94 is now available >> for download >> from >> > https://sourcefire.webex.com/sourcefire/lsr.php?AT=pb&SP=EC&rID=12075182&rKey=51C99713B66EECED > > So ho

Re: [Clamav-users] Can't search wiki

Ian Eiloart wrote: > Hi, > > Why is it necessary to log in to the wiki in order to use the "search" > function? > > > This works very well for me: Google.com pattern site:wiki.clamav.net/ dp ___ He

Re: [Clamav-users] Abnormal end

Dennis Peterson wrote: > What might have happened here: Should have added: Solaris 9, gcc 3.3.2. Also seeing the duplicate uniq_get in libclamav.map on one but not both sol 9 systems. dp ___ Help us build a comprehensive ClamAV guide: visit h

[Clamav-users] Abnormal end

What might have happened here: > clamdscan test /test/.split/split.clam.arjaa: Input/Output error ERROR ... $ clamscan test/.split ]$ clamscan test/.split test/.split/split.clam-upack.exeaa: OK test/.split/split.clam-upack.exeab: OK test/.split/split.clam.ole.docaa: OK test/.split/split.clam.ol

[Clamav-users] strcat(newname, ".UNOFFICIAL");

This little tidbit has really screwed up a lot of reporting code for me. Thanks but no thanks, I'll be taking it out. You might want to make this a configure switch for your users who know the difference between official and not official signatures. dp __

Re: [Clamav-users] No viruses detected since 1711GMT August 29, 2008?

fchan wrote: > Hello, > Maybe it is just my mail server, but I noticed that I haven't > detected any virus infected email message since 1711 GMT August 29, > 2008 Send yourself a test file. There are several in the ClamAV distribution. dp ___ Help u

Re: [Clamav-users] announcing ClamAV 0.94rc1

reiner otto wrote: > It will be a bad day for all when poor people set the standards of > quality and functionality for the rest of the world. It will happen only > at the point of a gun. Get over it. Meanwhile, I believe you can pick > and choose what you need from the cvs server, no? > > dp >

Re: [Clamav-users] announcing ClamAV 0.94rc1

Charles Gregory wrote: > On Wed, 20 Aug 2008, Spiro Harvey, Knossos Networks Ltd wrote: >>> Bandwidth costs money. How big will the database have to grow before >>> the ClamAV team starts to take notice? Fifty megabytes? A hundred? >> Americans don't understand this dilemma. To them traffic is f

Re: [Clamav-users] announcing ClamAV 0.94rc1

G.W. Haywood wrote: > Hi there, > > On Tue, 19 Aug 2008 Brian Morrison wrote: > >> On Mon, 18 Aug 2008 10:59:29 +0100 G.W. Haywood wrote: >> >>> On Mon, 18 Aug 2008, Luca Gibelli wrote: >>> ... release candidate for 0.94. >>> I started to download it, but when I saw that it was going to be j

Re: [Clamav-users] Sanesecurity: new database

Tomasz Kojm wrote: > On Mon, 18 Aug 2008 08:09:18 -0700 > Dennis Peterson <[EMAIL PROTECTED]> wrote: > >> Tomasz Kojm wrote: >> >>> libclamav is right, the entry at the line 53 in rogue.hdb is incorrect >>> (double colon before the virus name) >>

Re: [Clamav-users] Sanesecurity: new database

Tomasz Kojm wrote: > > libclamav is right, the entry at the line 53 in rogue.hdb is incorrect > (double colon > before the virus name) > Interesting that clamscan -d rogue.hdb didn't catch that, but the error also didn't cause clamd to die nor even fail to find viruses. dp __

Re: [Clamav-users] simplest replacement for ancient amavis-perl

Charles Gregory wrote: > On Mon, 11 Aug 2008, rick pim wrote: >> > > prime advantages of greylisting -- the fact that it will never >> > > block 'real' mail -- turns out, um, not to be true. there are so many >> > > standards-noncompliant MTAs out there >> .. some of the offenders are hi

Re: [Clamav-users] Using ClamAV with Dspam - how do I verify it's working?

Jeff Weinberger wrote: > > Thanks Dennis - much appreciated!! > > I've looked at the log files and all they are recording is the virus- > updated-induced reloads. So I'm not sure what's happening. > > I assume ClamAV would only report anything at all (even to log files) > if it was handed a

Re: [Clamav-users] simplest replacement for ancient amavis-perl

G.W. Haywood wrote: > On the point about accepting and then rejecting, no, you misunderstand > the SMTP conversation. It is perfectly possible to read an entire mail > message and yet still reject it. Presuming you mean the message is read up to the final cr.cr, this is true. It is the last de

Re: [Clamav-users] simplest replacement for ancient amavis-perl

[EMAIL PROTECTED] wrote: > > I meant to imply that when the ISP does not virus filter and the > recipient silently drops the message the problem never gets resolved > because nobody is made aware of it. The ISP customer will continue > to be infected and continue to send out garbage. I suppose

Re: [Clamav-users] simplest replacement for ancient amavis-perl

rick pim wrote: > > On Fri, 8 Aug 2008, Charles Gregory wrote: >> Well, first of all, yes it IS. It's *everyone's* problem. That forged >> address could be on *your* server, and *you* get the backscatter from some >> other victim system that also "doesn't care what the ISP does with it"... > > wh

Re: [Clamav-users] Clamav phishing sigs

Noel Jones wrote: > Darren G Pifer wrote: >> Chambers, Phil wrote: >>> Take a look at >>> >>> http://iserv.rs-hilter.de/doc/clamav-0.91.2/signatures.pdf >>> >> I have seen this document but it does not show how to add signatures >> to a database OR for clamd to detect the phishing e-mail. I w

Re: [Clamav-users] simplest replacement for ancient amavis-perl

David F. Skoll wrote: > [EMAIL PROTECTED] wrote: > >> No need to be condescending about it. I have no problem taking it off >> list and explaining how you are mistaken. > > OK, look. I guess I need to spell it out for you. > > End-user PC has virus. Virus does this: > > telnet isps-smtp-serv

Re: [Clamav-users] simplest replacement for ancient amavis-perl

David F. Skoll wrote: > [EMAIL PROTECTED] wrote: > > [...] > >> What backscatter? If done at SMTP the only person that should be >> notified is the sender. > > I see. And it's impossible for a virus to forge MAIL FROM:, is it? > That is the concern of the connecting system - they will suffer

Re: [Clamav-users] Using ClamAV with Dspam - how do I verify it's working?

Jeff Weinberger wrote: > Hi: > > Pardon me if this is obvious - I'm new to both Dspam and ClamAV. > > I built Dspam with --enable-clamav, ensured that: dspam.conf has: > > ClamAVPort3310 > ClamAVHost127.0.0.1 > > and clamd.conf has: > > TCPSocket 3310 > TCPAddr 127.0.0.1 > > I see (fr

Re: [Clamav-users] simplest replacement for ancient amavis-perl

jef moskot wrote: > > Any advice would be welcome, including "STFU and RTFM", as long as you can > point me to a decent manual. Thanks! I've been using J-Chkmail for years and I love it because there is no Perl (I really like Perl but I hate CPAN - two or more trips to CPAN to get something w

Re: [Clamav-users] simplest replacement for ancient amavis-perl

Gerard wrote: > On Thu, 7 Aug 2008 11:36:32 -0400 (EDT) > jef moskot <[EMAIL PROTECTED]> wrote: > >>> You did not mention your MTA. >> Oops, sorry. We're married to sendmail at this point. > > Would you entertain a divorce? > > IMHO, switching to Postfix might very well make your life easier.

Re: [Clamav-users] on-error-execute=COMMAND

Albert E. Whale wrote: > I am trying to get freshclam to execute a COMMAND whenever it encounters > an error. > > I have tested the /dir/ReportClamAv.sh script, and it works as > expected. However the command is not getting launched from the command > line. Any Suggestions? Sounds like it mig

Re: [Clamav-users] Database correctly reloaded (0 signatures)

Oscar Usifer wrote: > It did *not* recover on it's own. I had to intervene. Unfortunately > not discovering that this occurred two weeks later, causing me to > have to go through 7K plus files to verify they are not virus files. > We could become legally liable as a result, but I doubt this is a >

Re: [Clamav-users] UNDETECTED EXECUTABLE

jean-paul wrote: > Not sure if it is a virus, but it sailed right through clam/symantec/and avg > > naturally not from where it claims > > From: United Parcel Service [mailto:[EMAIL PROTECTED] > > file name is ups_invoice.exe Jean-Paul Natola Did you submit it to the clamav virus

Re: [Clamav-users] Database correctly reloaded (0 signatures)

Oscar Usifer wrote: > Folks, > > On Monday, 12:49 Pacific Time, June 23, 2008 freshclam on my > production system updated the virus signatures and notified clamd. > During that time, clam did not properly reload the previously cited > 231780 plus signatures and as a result began marking all checke

Re: [Clamav-users] 0.93.3 memory doubling problem

Stephen Gran wrote: > On Fri, Jul 11, 2008 at 09:52:43AM -0700, Dennis Peterson said: >> Tomasz Kojm wrote: >>> On Fri, 11 Jul 2008 09:48:01 -0500 >>> Russell Jones <[EMAIL PROTECTED]> wrote: >>> >>>> .. the memory usage jumps to 131 megs and

Re: [Clamav-users] 0.93.3 memory doubling problem

Tomasz Kojm wrote: > On Fri, 11 Jul 2008 09:48:01 -0500 > Russell Jones <[EMAIL PROTECTED]> wrote: > >> >> .. the memory usage jumps to 131 megs and stays there. What is causing >> this, and how can I fix it? > > Please have a look at > https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1028 >

[Clamav-users] cld vs cvd - (forked thread)

Noel Jones wrote: >> Where is "daily.cvd" ? > > > When incremental updates (the *.cdiff files) are applied, the > *.cvd file is replaced with a *.cld file. This replaces some > previous methods used for managing updates. I'm finding I end up with both a main.cld and a main.cvd file, and clam

Re: [Clamav-users] Clamav know virus count reduced.

Tomasz Kojm wrote: > On Wed, 02 Jul 2008 08:46:28 -0700 > Dennis Peterson <[EMAIL PROTECTED]> wrote: > >> Perhaps the solution is to report only true failures and not intermediate >> failures >> while on the path to success. > > the latest version of fr

Re: [Clamav-users] Clamav know virus count reduced.

G.W. Haywood wrote: > > But it seems to me that there's hardly a week goes by without someone > posting to the list a new and interesting way in which his freshclam- > driven update has failed. > > Take today, for example. I haven't have a freshclam failure yet but I've had errors reported. Fr

Re: [Clamav-users] freshclam (0.93.1) error

Török Edwin wrote: > Dennis Peterson wrote: >> Dennis Peterson wrote: >> >>> Frank Elsner wrote: >>> >>>> Hello ALL, >>>> >>>> today my freshclam (0.93.1) showed the error >>>> >>>> ERROR: cd

Re: [Clamav-users] freshclam (0.93.1) error

Dennis Peterson wrote: > Frank Elsner wrote: >> Hello ALL, >> >> today my freshclam (0.93.1) showed the error >> >> ERROR: cdiff_cmd_close: Can't apply XCHG at line 1 of daily.ign >> ERROR: cdiff_apply: Can't execute command CLOSE >> ERROR:

Re: [Clamav-users] freshclam (0.93.1) error

Frank Elsner wrote: > Hello ALL, > > today my freshclam (0.93.1) showed the error > > ERROR: cdiff_cmd_close: Can't apply XCHG at line 1 of daily.ign > ERROR: cdiff_apply: Can't execute command CLOSE > ERROR: cdiff_apply: Error executing command at line 4 > ERROR: getpatch: Can't apply patch > >

Re: [Clamav-users] unsubscribe

Todd Deering wrote: > In the mail headers of each message from this list there are instructions for properly unsubscribing. dp ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] Frequency of virus attacks

fchan wrote: > Well, it appears that your lucky that you haven't been "discovered" > by spammers and botnets so they don't spam you with viruses and spam. > How about how many plain spam messages you get? The more "popular" > you are the more spam and viruses you will get. > I get an average

Re: [Clamav-users] freshclam

Ejaz wrote: > I have this entry as uncomment "DatabaseMirror database.clamav.net" in my > freshclam.conf it works ok with me since so many days, > > I've isolated part of your problem: http://tinyurl.com/txoql dp ___ Help us build a comprehensive

Re: [Clamav-users] clamav-milter problem reject=553 5.3.0Rejected - see http://ordb.org/

Luis Hernán Otegui wrote: > Andreas: > > 2008/6/8 Andreas Schwantner, MAS, MSC, MPOS, Med <[EMAIL PROTECTED]>: >> >> Hi >> It was maybe a bad example >> I have the problem with all my mails i want to receive >> So all mails get a reject=553 5.3.0 Rejected - see http://ordb.org/ >> In the log, no m

Re: [Clamav-users] Description Trojan.VB-2953

Robert Schetterer wrote: > Ian Eiloart schrieb: >> --On 6 June 2008 11:03:22 +0200 Robert Schetterer <[EMAIL PROTECTED]> >> wrote: >> >>> Robert Schetterer schrieb: Hi @ll, where kann i find a description about Trojan.VB-2953 >>> sorry i slipped into German >>> should be >>>

Re: [Clamav-users] commad between unix and linux

alex liveti wrote: > hi there? iam haven a problem with one of 2 operating system UNIX and Linux. > the question is are this two the same or not is it possable to use the same > commad or are the difrent between them in commad? > Rgds I use ClamAV on both Linux and Solaris. There's no differe

Re: [Clamav-users] 0.93.1RC1 (libbz issues)

Török Edwin wrote: >> > > Linking with pcre is no longer needed (and it has no effect), because > clamav uses an embedded regex engine. (since 0.92 IIRC) > ssl is also not needed. > Thanks for the reminder, Török. That was my script from my Sol8 lab system - last clam version built on it wa

Re: [Clamav-users] 0.93.1RC1 (libbz issues)

Ejaz wrote: > Hi, > Actually We are an ISP (CYBERIA) of Saudi Arabia, I have same issue as > described below although I have dowloaded latest bzip2 package from the > sunfreeware but no use, Please help us to solve this issue, > > Here is my solaris 8 box info, > I use a simple script

Re: [Clamav-users] 0.93.1RC1 (libbz issues)

Bowie Bailey wrote: > Mark Fortescue wrote: >> Hi Stephen, >> >> The issue here is that clamav configure does not detect that the >> installed libbz is not compatible with clamav (the libbz API has >> changed changed in the latest bzip2 package). >> >> My solution was to download and compile the la

Re: [Clamav-users] 0.93.1RC1

Jim Carhart wrote: > So I don't doubt I could successfully compile a new libbz2 and get it to > work with clamav on these systems, given enough time. Your suggestion is > valid, just not for my change managed deployment environment. Make sense? Sure - I have a similar problem with a server and

Re: [Clamav-users] 0.93.1RC1

Jim Carhart wrote: > Opening Bugzilla account and posting full details, but this is a no-go > for Solaris 8 w/gcc 3.4.6. Similar to previous 0.93 issue, i.e. > undefined symbols associated with libbz2; > > [clamav-0.93.1rc1]# ./configure --enable-milter --enable-experimental > > [clamav-0.93.1r

Re: [Clamav-users] 0.93.1RC1

Nigel Horne wrote: > Dear All, > > As you may have seen, the first release candidate of 0.93.1 was > published earlier this week. > Compiled and is running fine in Solaris 9 on Sparc. Only oddity was temporary and identified in "Double downloads" thread. dp ___

Re: [Clamav-users] Double downloads

[EMAIL PROTECTED] wrote: > Dennis Peterson wrote: >> Why do you suppose this is happening? >> > > Some long shot ideas... > > Two freshclam processes updating different definition databases? > > An errant crontab entry running freshclam to different defini

Re: [Clamav-users] Double downloads

Brandon Perry wrote: > Why are the times so distorted? Possibly a clock-sync problem? Do try to not top post. I sorted it on the file name column to make it obvious there were double files. dp ___ Help us build a comprehensive ClamAV guide: visit ht

[Clamav-users] Double downloads

Why do you suppose this is happening? May 26 11:31:47 Downloading daily-7250.cdiff [100%] May 26 17:34:15 Downloading daily-7251.cdiff [100%] May 27 10:12:59 Downloading daily-7251.cdiff [100%] May 27 03:39:31 Downloading daily-7252.cdiff [100%] May 27 10:13:13 Downloading daily-7252.cdiff [

Re: [Clamav-users] clamdscan [file] shows access denied

Chris wrote: > When running clamdscan against a file in my home directory I get: > > [EMAIL PROTECTED] ~]$ clamdscan testmsg.txt > /home/chris/testmsg.txt: Access denied. ERROR > > The clamd daemon does no have permission to read the file. You can get around this by redirecting the file via clam

Re: [Clamav-users] 0.93.1 RC1

Ian Eiloart wrote: > > --On 23 May 2008 07:15:37 -0700 Dennis Peterson <[EMAIL PROTECTED]> wrote: > >> G.W. Haywood wrote: >>> Hi there, >>> >>> On Thu, 22 May 2008 Nigel Horne wrote: >>> >>>> 0.93.1 RC1 >>>

Re: [Clamav-users] 0.93.1 RC1

G.W. Haywood wrote: > Hi there, > > On Thu, 22 May 2008 Nigel Horne wrote: > >> 0.93.1 RC1 > > Cut-n-pasted from http://www.clamav.net/download/sources five minutes ago: > > "Development releases > The ChangeLog lists all the recents fixes and improvements. > Latest release candidate: n/a" > >

Re: [Clamav-users] 0.93.1 RC1

Nigel Horne wrote: >>> Dear All, >>> >>> We are about to release the first release candidate of 0.93.1 of ClamAV. > > > -- > From: "Ian Eiloart" <[EMAIL PROTECTED]> > > >> If you want our help with this, then please say (a) where the release can >

Re: [Clamav-users] local socket & pid is missing....

Berényi Attila wrote: > Hi there, > > I have this annoying problem, and I don't know what to do. I've tried to > set up a mailfiltering system with postfix, amavis, spamassassin and > clamav, and the first three is working great, but if I enable the virus > scanning in amavis, postfix throws th

Re: [Clamav-users] Number of signatures not changing in stats report

Jim Preston wrote: > Chris wrote: >> On Friday 16 May 2008 10:36 pm, Dennis Peterson wrote: >> >>> It looks at first glance like your script is not looking for main.cld or >>> daily.cld files. >>> >>> dp >>> >> That

Re: [Clamav-users] Number of signatures not changing in stats report

Chris wrote: > ClamAV Statistics > cpollock > > > clamd last started Wed May 14 20:37:57 2008 > > Statistics since19 April 2008 > Last Database Update

Re: [Clamav-users] feature request?

Chuck Swiger wrote: > On May 8, 2008, at 5:43 PM, Dennis Peterson wrote: >>> Can't you do this via something like: >>> >>> % ls -1 > /tmp/filelist_to_scan >>> % xargs clamdscan < /tmp/filelist_to_scan >> The clamd user would need to be root

Re: [Clamav-users] feature request?

Chuck Swiger wrote: > On May 8, 2008, at 4:08 PM, Rekrutacja wrote: >> is it possible that developers will add option to clamscan, to load >> file >> list to be scanned, from other file? > > Can't you do this via something like: > > % ls -1 > /tmp/filelist_to_scan > % xargs clamdscan < /tmp/fil

Re: [Clamav-users] Help need with 0.93 compile error

nightduke wrote: > How can i add my libraries at ld.so.conf? > > cat ld.so.conf > include ld.so.conf.d/*.conf > > Thanks > > Nightduke Here's some links to follow: http://tinyurl.com/n9cd http://tinyurl.com/2e6ud For Linux: http://linux.die.net/man/8/ldconfig For Solaris: http://solaris.r

Re: [Clamav-users] FreeBSD ./configure --enable-milter = Cannot find libmilter

Jim Preston wrote: > I had a similar problem and found an answer on google. I would post the > link butI can not find it again. So paraphrasing what I found: > Download and untar latest Sendmail. > Go to the libmilter directory > run make and make install > rerun configure for Clamav > > I h

Re: [Clamav-users] clamav-milter??

David F. Skoll wrote: > Dennis Peterson wrote: > >>> What is the advantage of using clamav-milter or is it necessary? > >> I've not found any particular advantage. I use J-Chkmail as a Sendmail >> milter for spam and it invokes clamd for attachments.

Re: [Clamav-users] clamav-milter??

Terry Hickey wrote: > A question for someone > > What is the advantage of using clamav-milter or is it necessary? I have been > using clamav to do virus control for my mailserver for... well a long time. > I use sendmail and clamav is called with Mailscanner. It scans the files at > the sam

Re: [Clamav-users] US-CERT alert regarding ClamAV

Dennis Peterson wrote: > Dennis Peterson wrote: >> James Brown wrote: >> >>>>> John Rudd wrote: >>>>>> Oh, and, while we're on the subject, what about 0.88.6? is that >>>>>> version >>>>>> vulnerable? (don&#

Re: [Clamav-users] US-CERT alert regarding ClamAV

Dennis Peterson wrote: > James Brown wrote: > >>>> John Rudd wrote: >>>>> Oh, and, while we're on the subject, what about 0.88.6? is that >>>>> version >>>>> vulnerable? (don't tell me to upgrade -- I haven't been a

Re: [Clamav-users] US-CERT alert regarding ClamAV

James Brown wrote: > >> >>> John Rudd wrote: Oh, and, while we're on the subject, what about 0.88.6? is that version vulnerable? (don't tell me to upgrade -- I haven't been able to get newer versions to compile on Mac OS X 10.4.x) > > Frank & John, I've used ./configure --e

Re: [Clamav-users] compiling on AIX 5.2 and location of libgmp.

Naomi Hospodarsky wrote: > Okay, that makes sense. I tried copying the lib files over to > /usr/local/lib as you suggested, and am now getting this error in > config.log > > configure:15256: checking for libgmp > configure:15286: cc -qlanglvl=extc89 -o conftest -g > -I/usr/local/include conftest.

Re: [Clamav-users] compiling on AIX 5.2 and location of libgmp.

Naomi Hospodarsky wrote: > In the output of the config.log I posted, you'll see that clamav is > looking for the libs in /usr/local/include (where GMP installed its > files), but for some reason doesn't see them. So it's not that clamav > is looking in the wrong location, exactly, but that it is, f

Re: [Clamav-users] Upgrade ClamAV

> > > Dennis Peterson wrote: > > > This was discussed on the list the last couple of day - check the > > archives to see what is suggested. Google this: > > > > libclamunrar_iface.so.3 site:clamav.net > > > > I searched Google and could no

Re: [Clamav-users] Upgrade ClamAV

Carlos Williams wrote: > Dennis Peterson wrote: >> It looks like earlier versions were installed as RPM packages from >> rpmforge using yum, not the RH repository. Have you tried using yum to >> see if the current version is availble? > I am getting the following error

Re: [Clamav-users] Upgrade ClamAV

Carlos Williams wrote: > Dennis Peterson wrote: > > It looks like earlier versions were installed as RPM packages from >> rpmforge using yum, not the RH repository. Have you tried using yum to >> see if the current version is availble? >> > I had no idea YUM was ev

Re: [Clamav-users] Upgrade ClamAV

Carlos Williams wrote: > So it appears my installed version is too old to update the database and > I need to upgrade from 0.90.3 to the latest version. I don't know who or > how this version of clamav was installed on this rhel4.6 es server but I > downloaded the tarball since clamav is not a s

Re: [Clamav-users] No supported Database

Brian Morrison wrote: > Dennis Peterson wrote: > >>> Yes, I realise that. I run clamd under user clamav, hence it's probably >>> easier to access /var/lib/clamav/* than it would be if owned by root. >> Why would that be? It is no more work to crack the root

Re: [Clamav-users] No supported Database

Brian Morrison wrote: > Tomasz Kojm wrote: >> On Wed, 16 Apr 2008 16:38:05 +0100 >> Brian Morrison <[EMAIL PROTECTED]> wrote: >> >>> Does the unsigned .cld file mean that an attack vector could be to edit >>> the .cld file and thus corrupt it? I can see that the cdiff signing >>> protects the pat

Re: [Clamav-users] No supported Database

Brian Morrison wrote: > Dennis Peterson wrote: > >> So I currently have a main.cvd and a daily.cld, both files. Is this what >> 0.93 uses or will main.cvd be swapped out with a cld container at some >> point? > > And might someone explain what this ch

Re: [Clamav-users] No supported Database

Tomasz Kojm wrote: > On Wed, 16 Apr 2008 08:30:11 +0200 (CEST) > [EMAIL PROTECTED] (Lanfranco Fabriani) wrote: > >> Is this necessary? In the years I never run freshclam before >> restarting clamd and the software always ran very well. The server >> of mine is a little mail server, so usually I tr

Re: [Clamav-users] (no subject)

Gerard wrote: > On Tue, 15 Apr 2008 11:47:57 -0700 > Dennis Peterson <[EMAIL PROTECTED]> wrote: >>> At least they did not top post. Then again, they did not really >>> have an opportunity to do so. >> It is a command normally sent to the list server (requesti

Re: [Clamav-users] (no subject)

Gerard wrote: > On Tue, 15 Apr 2008 13:02:15 + > Bob Cobb <[EMAIL PROTECTED]> wrote: > >> help > > Over the years, I have witnessed some incredibly stupid posts; however, > this one may qualify as the best. > > 1) No subject > 2) No logs > 3) No version numbers > 4) No explanation of what it

Re: [Clamav-users] Freshclam Update Failures

Carlos Williams wrote: >> > So does this freshclam run every night to update or how does this > exactly work? I want to kind have this automated and keep from flooding > my logs? I am guessing that there is a cron.daily script that runs but I > don't know why its not running correctly if I was

Re: [Clamav-users] 0.93 info error

Dennis Peterson wrote: > Brian Morrison wrote: >> Dennis Peterson wrote: >>> Brian Morrison wrote: >>>> Dennis Peterson wrote: >>>>> Is the http://clamav.com/download/sources page reporting the wrong >>>>> version or is my cache hosed? &

Re: [Clamav-users] 0.93 info error

Brian Morrison wrote: > Dennis Peterson wrote: >> Brian Morrison wrote: >>> Dennis Peterson wrote: >>>> Is the http://clamav.com/download/sources page reporting the wrong >>>> version or is my cache hosed? >>> If you're expecting 0.93 then

Re: [Clamav-users] 0.93 info error

Brian Morrison wrote: > Dennis Peterson wrote: >> Is the http://clamav.com/download/sources page reporting the wrong >> version or is my cache hosed? > > If you're expecting 0.93 then it hasn't got there yet, I see 0.92.1 on > that page. > The front p

[Clamav-users] 0.93 info error

Is the http://clamav.com/download/sources page reporting the wrong version or is my cache hosed? dp ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Known viruses count suddenly droped

Noor Ahmed Afridi wrote: > Hi, > > Current Known Viruses Count is. > > Known viruses: 254858 > Engine version: 0.92.1 > > Which Dropped on 2008-04-07 from "Known viruses:413852" is this normal? > > > Looks like you might have been loading one of the tables twice. dp

Re: [Clamav-users] Many Javascript false - positives

Tilman Schmidt wrote: > Dennis Peterson schrieb: >> James E. Pratt wrote: >> >>> >>>>>>>>> I can confirm too that Trojan.Downloader.JS.Agent-2 (and 1) hit >>> a >>>> load of legitimate sites. >>> >>> Hel

Re: [Clamav-users] Many Javascript false - positives

James E. Pratt wrote: > >>> I can confirm too that Trojan.Downloader.JS.Agent-2 (and 1) hit > a >> load of legitimate sites. > > Hello . I ran into this " Trojan.Downloader.JS.Agent-2" issue yesterday > on our web server. When notified, the webmaster replied with "these are > coming from com

Re: [Clamav-users] all my ClamAV daemons died last night

Christopher X. Candreva wrote: > The same problem seems to have just happened again. For the past few hours > my jobs has been returning errors . Before I post the details I'll put the > question here -- is anyone else seeing mirror issues or should I be looking > for a local problem ? > > > T

Re: [Clamav-users] I hate people who do this but...

Christopher Burkhart wrote: > How do I get off this list? > > I have searched the archives and I have not found a way to delete my > self, may have just missed. > > Sorry to be one of those people... > ___ > Help us build a comprehensive ClamAV guide:

Re: [Clamav-users] Non-Windoze Viruses (was Re: Memory usage for clamd is huge)

Jan-Pieter Cornet wrote: > On Wed, Apr 02, 2008 at 10:50:59AM -0700, Dennis Peterson wrote: >> Arthur Sherman wrote: >>>> I use scripts now to monitor user space for new php code. >>> Could you share these scripts? >> On a Solaris system you can use the buil

Re: [Clamav-users] ClamAV Memory Leak?

Dennis Peterson wrote: > Jon R. Kibler wrote: >> Hi, >> >> Running clamd 0.93rc1 on Solaris 9 Sparc. >> Build it with gcc 3.4.6. > > Running on Sol 9 Sparc, single cpu, clamd built with gcc 3.3.2: > > Here's output from top from clamd after several

Re: [Clamav-users] Non-Windoze Viruses (was Re: Memory usage for clamd is huge)

Arthur Sherman wrote: >> I've had to repair or replace a number of "Contact Us" and >> feedback type php scripts that were incredibly easy to >> exploit and in fact actually were exploited. More than once >> one of my own systems was spewing spam from badly crafted web >> pages. Many of these w

Re: [Clamav-users] ClamAV Memory Leak?

Jon R. Kibler wrote: > Hi, > > Running clamd 0.93rc1 on Solaris 9 Sparc. > Build it with gcc 3.4.6. Running on Sol 9 Sparc, single cpu, clamd built with gcc 3.3.2: Here's output from top from clamd after several days running: PID USERNAME LWP PRI NICE SIZE RES STATETIMECPU COMMAN

Re: [Clamav-users] Non-Windoze Viruses (was Re: Memory usage for clamd is huge)

John Rudd wrote: > What Unix-like systems have going for them IS NOT privilege separation, > it is that the *nix culture is much more aggressive/responsive when it > comes to generating patches for vulnerabilities ... getting them out > more frequently than Windows service packs. But that depe

Re: [Clamav-users] Memory usage for clamd is huge

Joe Sloan wrote: > Dennis Peterson wrote: >> Joe Sloan wrote: > >>> Perhaps our sample size is too small, but it certainly seems that this >>> whole overhyped idea of viruses apart from ms windows is a non-issue in >>> practice. > >> How ar

Re: [Clamav-users] Memory usage for clamd is huge

Joe Sloan wrote: > John Rudd wrote: > >> Just because they're in a non-windows environment doesn't mean they >> can't possibly be sending out viruses. The person who expressed that >> is, as I said, being naive. And, irresponsible. > > > While it's fine to talk theory, the facts of the matte

Re: [Clamav-users] Memory usage for clamd is huge

John Rudd wrote: > Dennis Peterson wrote: >> And to follow up on the earlier >> point about Windows systems not being the sole source of spam/virus >> distribution, > > > The idea that any platform (windows, unix/linux, etc.) attached to the > net cannot be

<    3   4   5   6   7   8   9   10   11   12   >