Re: [clamav-users] GPG key where? (was: Re: GPG signature problem with clamav-0.99.2.tar.gz)

ds, Scott > Oh, indeed. At first, JS didn't work. Thanks, Scott. To Joel: why make getting the key harder than necessary? :-( > -Original Message- > From: clamav-users [mailto:clamav-users-boun...@lists.clamav.net] On Behalf > Of Tomasz Papszun > Sent: Monday

[clamav-users] GPG key where? (was: Re: GPG signature problem with clamav-0.99.2.tar.gz)

.tar.gz > > gpg: Signature made Fri 22 Apr 2016 12:25:32 PM EDT using DSA key ID > > 260429A0 > > gpg: Good signature from "Talos (Talos GPG Key) <resea...@sourcefire.com>" > > gpg: Note: This key has expired! > > Primary key fingerprint: F79F B2D0 8751 57

Re: [Clamav-users] Option NOT to log empty files

to do a quick one-time malware scan. If I understand your needs correctly, '-i' option (Only print infected files) is the solution for you. Present in clamscan for years. P.S. Please don't top-post. -- Tomasz Papszun | And it's only tomek at lodz.tpsa.pl http

Re: [Clamav-users] please remove

, and unable to reveal full headers, shouldn't mess with any mail server anyway. -- Tomasz Papszun | And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner

Re: [Clamav-users] please remove

. It is not allowed to break the rules of the mailing list (not mentioning the general netiquette). If the company doesn't like the ML rules, then it should not subscribe. Simple solution: use some other email account which permits decent behaviour. -- Tomasz Papszun

Re: [Clamav-users] please remove - 27 emails and counting

asshole happened to be. - Anonymous. Won't happen again, but just FYI. I hope. [ top-posted parts removed ] How many levels of quoted mailing list footers is enough? -- Tomasz Papszun | And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso

Re: [Clamav-users] Re: How to run clamscan for a list of files from a file?

, symlinks to files to scan, there should be no need to split the list of symlinks into smaller parts. Plain launching clamdscan on that directory should be sufficient. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones

Re: [Clamav-users] Re: Digital signatures for virus database files

: both checksums are identical. $ sigtool -i /var/lib/clamav/main.cvd | grep MD5 | cut -d -f 2 bbd0a1fe83da562a1d6b43e22f4c0626 $ tail -c +513 /var/lib/clamav/main.cvd main.cvd.tmp $ md5sum main.cvd.tmp bbd0a1fe83da562a1d6b43e22f4c0626 main.cvd.tmp -- Tomasz PapszunSysAdm @ TP S.A. Lodz

Re: [Clamav-users] Clamav-milter Not Processing Messages

missed some detail but why not just send a test message containing EICAR test virus and see whether the system stops it or not? -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http

Re: [Clamav-users] clamav 0.92rc2 not updated with new virus db?

db for 0.90rc and for 0.8x. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner ___ http

Re: [Clamav-users] Apache with Clamav and VirusEvent

. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner ___ http://lurker.clamav.net/list/clamav

Re: [Clamav-users] Download 0.90.xx

/20061030.211043.4d2310a4.en.html P.S. Please shorten the lines length in your posts. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner

Re: [Clamav-users] Cherishing my ignorance - An appeal to package rs

and to updates/fixes of the code. And he possesses a sense of humour :-) . We highly appreciate Stephen's work. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL

Re: [Clamav-users] daily.wdb and daily.pdb

to the official daily.pdb would not work, unfortunately - only one .pdb can be loaded by clamscan. When clamscan tries to load another .pdb, it exits with an error. regards, rob. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl

[Clamav-users] Calling Dennis Peterson

. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] clamscan resource hog

of the /etc/group entry like amavis:x:105:clamav) and use AllowSupplementaryGroups in clamd.conf. This way clamd will be able to read amavisd's files without giving to amavisd too much power over clamd. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl

Re: [Clamav-users] main.cvd and daily.cvd

is up to date (version: 1590, sigs: 3108, f-level: 8, builder: sven) http://www.clamav.net/doc/0.88.3/html/node45.html -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http

Re: [Clamav-users] Easiest way to set up a whitelist?

in amavisd.conf - these with virus_lovers in their names. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner

Re: [Clamav-users] Web Site Authentication Prior to VirusDB download

) - * freshclam: new option HTTPUserAgent to force different User-Agent header Patch by Andy Fiddaman clam*fiddaman.net -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek

Re: [Clamav-users] Clam Lib Error

then. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner ___ http://lurker.clamav.net/list/clamav

Re: [Clamav-users] Out of memory, cannot allocate memory

Blars and five-ten-sg: http://openrbl.org/client/#216.35.188.120 Some time ago I've made some evaluation of RBLs for my purposes and I've seen blackholes.five-ten-sg.com has too high false positive rate to being usable. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek

Re: [Clamav-users] ClamAv Tar File Error

- for the crontab entry as a whole - you must experiment. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner

Re: [Clamav-users] Problems with clamdscan, clamd, and procmail

you'll have to run clamd as root. Note that generally it's not the best idea (due to security reasons). Especially (but not only) if untrusted users have shell accounts on the server). -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl

Re: [Clamav-users] Spoofing IP Address?

of them) to let our members know that they might have a virus. I contacted a couple and they said that their networks are clean. Quite likely. The principle is sad nowadays: you can't trust any mail headers beyond your own mailserver's ones. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland

Re: [Clamav-users] new sig please test

to detect. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner ___ http://lurker.clamav.net/list/clamav

Re: [Clamav-users] Truncated or damaged zip files.

the same _with_ and _without_ your .hdb file? -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner

Re: [Clamav-users] clamav use 100% CPU

m 11 s) BTW, Fcart.zip included in the message is 3,2 MB in size, while your clamd.conf contains ArchiveMaxFileSize 1M, so clamd won't scan it. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek

Re: [Clamav-users] clamav use 100% CPU

On Thu, 08 Dec 2005 at 18:44:25 +0100, Tomasz Papszun wrote: [...] Nothing bad with this file for me: $ clamdscan 1EKLBH-0002g4-Ek.eml /tmp/1EKLBH-0002g4-Ek.eml: OK --- SCAN SUMMARY --- Infected files: 0 Time: 11.527 sec (0 m 11 s) [...] Sorry, I forgot to mention: my

Re: [Clamav-users] Re: Worm.Sober.U not being recognized

in the sense that clamdscan will use clamd which uses the options specified in the config file. I.e. the way of clamdcan's work depends indirectly on the specified clamd.conf - because the selected clamd instance depends on that clamd.conf. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland

Re: [Clamav-users] Information about Virus Sober.Y

lines. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner ___ http://lurker.clamav.net/list

Re: [Clamav-users] error!!

/amavis/amavis-20051123T113353-16974/parts/part-3 Este es el mensaje del virus Nov 23 11:34:38 pumas.iingen.unam.mx amavisd[16974]: (16974-08) INFECTED (Worm.Sober.U), [EMAIL PROTECTED] - [EMAIL PROTECTED], This is a message from amavisd, *not* from ClamAV. -- Tomasz PapszunSysAdm

Re: [Clamav-users] oversized.zip problem

On Thu, 17 Nov 2005 at 7:07:44 -0800, saravanan ganapathy wrote: Set the ArchiveMaxCompressionRatio 300 or higher ... that stopped it for me. Even I tried to change to 2000, but it doesn't work. Are you absolutely sure that your setup uses clamd, not clamscan? -- Tomasz Papszun

Re: [Clamav-users] LibClamav warning errors on FC3 with 0.87 version

unneeded fragments of previous messages - especially commercial footers, mailing list footers, long signatures. Shorten your signature, please. http://www.xs4all.nl/~hanb/documents/quotingguide.html http://www.netmeister.org/news/learn2quote.html -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland

Re: [Clamav-users] New RPM package(clamav, postfix, spamass, mailscanner) icome across

: 0.86.2. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner ___ http://lurker.clamav.net/list

Re: [Clamav-users] Disabling the

processing of the messages. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner ___ http

Re: [Clamav-users] ClamAntivirus NOT detecting viruses

to enable scanning of e-amail files before sending to user mailboxes. Will appreciate any assistance. http://www.clamav.net/sendvirus.html -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net

Re: [Clamav-users] clamd log analyzer recommendation?

it suits your needs, but you may want to know about that package. If you can't find that message, I can forward it to you. P.S. Lines produced by your MUA are as long as 7 standard lines. Please configure it so that lines are no longer than about 74 chars. -- Tomasz PapszunSysAdm @ TP S.A

Re: [Clamav-users] clamdscan doens't recognize virus

want to verify that there are no some forgotten clamd.conf files in the system and, generally, files from old clamav installation. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http

Re: [Clamav-users] clamdscan doens't recognize virus

On Thu, 22 Sep 2005 at 11:53:55 +0200, Marco Berizzi wrote: Tomasz Papszun wrote: On Thu, 22 Sep 2005 at 11:09:07 +0200, Marco Berizzi wrote: Marco Berizzi wrote: I'm using clam 0.87 with mimedefang. This moring a virus has been slipped through. This is the output from

Re: [Clamav-users] clamdscan doens't recognize virus

On Thu, 22 Sep 2005 at 16:48:36 +0200, Tomasz Papszun wrote: On Thu, 22 Sep 2005 at 11:53:55 +0200, Marco Berizzi wrote: [...] As you can see clamd is *working* and it is cacthing viruses. Only that stupid zip is slipping throught. Running clamdscan with eicar test file is fine as you can

Re: [Clamav-users] clamdscan doens't recognize virus

://www.clamav.net/bugs.html#pagestart . -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner

Re: [Clamav-users] clamdscan doens't recognize virus

. Fortunately, ArchiveMaxFileSize has a default limit (10M), so even without explicit setting, the system is protected. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net

Re: [Clamav-users] Problem (?) with update clamav too 0.87

WARNING: NO SUPPORT FOR DIGITAL SIGNATURES, you haven't had digital signature support already (in 0.86.1). FAQ entry 20. http://www.clamav.net/faq.html -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek

Re: [Clamav-users] Submitting malware (long)...

On Tue, 13 Sep 2005 at 9:03:05 -0400, Tripp Sims wrote: Tomasz Papszun wrote: [...] Anyway, we appreciate submitting currently spreading malware caught in the wild. If you select some distinct name for submitting, we'll be able to easier monitor your submissions. Yesterday I submitted

Re: [Clamav-users] Submitting malware (long)...

monitor your submissions. Thanks -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner ___ http

Re: [Clamav-users] Re: Clamav-milter passes some zipped virus files

need. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner ___ http://lurker.clamav.net/list

Re: [Clamav-users] clamd virusevent xmessage

. it scans the /root dir and finds eicar virus. the documentation you refer to is very basic, are you a debian user? Kevin, Stephen Gran is not only a Debian user, but also the respectable Debian maintainer of ClamAV packages! :-) -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland

Re: [Clamav-users] clamd virusevent xmessage

no problems with accessing the files for scanning. Here you are an example which worked for me: VirusEvent /usr/bin/logger Test. Name: %v has been found. which gave in the user.log: Jul 29 16:37:41 hostname logger: Test. Name: Eicar-Test-Signature has been found. -- Tomasz PapszunSysAdm @ TP S.A

Re: [Clamav-users] clamAV merch

.18387537 It has the inscription which explains why its price is higher than of any ordinary magnet button: I pay ClamAV so you don't have to :-) . -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek

Re: [Clamav-users] Clamav + Exim on FreeBSD UPDATE 2

! http://www.clamav.net/bugs.html#pagestart -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner

Re: [Clamav-users] clamdscan vs clamscan - detection

the Debug setting since it doesn't get restarted. clamscan doesn't use the clamd daemon, so you accomplish all that is asked without having to potentially damage the flow of mail across your machine. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl

Re: [Clamav-users] /dev/console and LogSyslog

to the console messages from ClamAV. I.e., exclude the ClamAV's facility (LOG_LOCAL6 by default, but may be changed with LogFacility in clamd.conf). or 2) You can configure your syslog daemon to write to the console only messages which exceed some priority (e.g. crit). -- Tomasz PapszunSysAdm @ TP S.A

Re: [Clamav-users] ERROR: Can't download daily.cvd from db.uk.clamav.net

for your help so far Dave. [...] --- -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net

Re: [Clamav-users] Virtual Sites

.). -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner ___ http://lurker.clamav.net/list/clamav

Re: [Clamav-users] 'Too many open files' on a buzy clamd

. [...] Not the reason, just a circumstance, but... check what 'cat /proc/sys/fs/file-max ; cat /proc/sys/fs/file-nr' says. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL

Re: [Clamav-users] Clean just infected emails in existent mailbox files

the entire mailbox file, i need it to remove: Just The Infected Email From The Mailbox. I've not found a way to tell clamscan to do this ? I supossed this to be a very common problem, but i didn't found info about it. http://www.clamav.net/faq.html ; entry 32. -- Tomasz PapszunSysAdm @ TP

Re: [Clamav-users] Is this a bug with virus database or updatescripts ???

* -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner ___ http://lurker.clamav.net/list/clamav

Re: [Clamav-users] Building his own CVD

On Wed, 23 Mar 2005 at 19:49:30 +0100, Guillaume Arcas wrote: Tomasz Papszun a écrit : Unpack the CVD containers so some other directory, remove the unwanted signature from the plain text databases, instruct the clamscan (or clamd) to use databases from that other directory. Means

Re: [Clamav-users] freshclam fails upon FreeBSD server restart

no reply anyway. That's why you can replace 'database.clamav.net' with some hostname which you know is pingable. Use a hostname, not an IP address, so that you can notice a DNS-related problem during startup in case it's the reason. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only

Re: [Clamav-users] Building his own CVD

On Wed, 23 Mar 2005 at 19:15:03 +0100, Guillaume Arcas wrote: What is the process to build one's own CVD files from *.db files ? I mean : how does the --server option runs exactly ? You can't use it. It's for database developers only. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland

Re: [Clamav-users] Building his own CVD

On Wed, 23 Mar 2005 at 19:30:11 +0100, Guillaume Arcas wrote: Tomasz Papszun a écrit : You can't use it. It's for database developers only. OK. So, if for any - good or bad - reason I want to disable a signature, how can I do that ? Unpack the CVD containers so some other directory

Re: [Clamav-users] Report Phishing attacks?

. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner JS.Spam.Scramble.A (Clam)=3c736372697074206c616e67756167653d224a617661536372697074223e

Re: [Clamav-users] Report Phishing attacks?

On Tue, 22 Mar 2005 at 8:33:09 -0600, Sam wrote: On Tue, 22 Mar 2005, Tomasz Papszun wrote: If you mean JS.Spam.Scramble.A, please find it attached. Disclaimer: use it at your own risk. Thanks Tomas! (I'm a little worried now though with your disclaimer... :) Was it just

Re: [Clamav-users] www.mozilla.org/editor infected?

=index.htmlbranch=root=/cvsrootsubdir=mozilla-org/html/editorcommand=DIFF_FRAMESETrev1=1.57rev2=1.58 -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus

Re: [Clamav-users] Tried to submit virus

/724/Fri Feb 25 00:55:18 2005 as Broken.Executable . Be careful when submitting samples and remember to run freshclam! I believe your clamscan will detect it when you use option --detect-broken. -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http

Re: [Clamav-users] No announcement of 0.83 on clamav-announce ML

running is a mysterious: [...] Why do you think that freshclam stops running when there is an updated version of the code?? -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http

Re: AW: [Clamav-users] Re: not updating clam

/faq.html#pagestart Surprise, surprise ;-) . -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner

Re: [Clamav-users] Downloading virus base manually?

-archive.com/clamav-users@lists.clamav.net/msg12349.html -- Tomasz PapszunSysAdm @ TP S.A. Lodz, Poland| And it's only tomek at lodz.tpsa.pl http://www.lodz.tpsa.pl/iso/ | ones and zeros. tomek at clamav.net http://www.ClamAV.net/ A GPL virus scanner

Re: [Clamav-users] configuring clamav

advise on what I am supposed to be commenting out Both example lines. and how to save changes? In 'nano': Ctrl-X -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net

Re: [Clamav-users] Re: What is -ve process group?

the downtime seems to be longer than it was announced. -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner

Re: [Clamav-users] Using Clam AV - Perhaps I am not understanding product intent

the scanner _once_, not every time for every single file (like it happens when scanning incoming mail). So you may try to stop clamd and run just clamscan with nice(1). -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros

Re: [Clamav-users] Are we safe - WORM_BAGLE.AZ

it at http://www.clamav.net/sendvirus.html ? -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner ___ http

Re: [Clamav-users] Directory recursion limit exceeded error in clamd.log file (clamav version 0.80)

On Tue, 25 Jan 2005 at 6:42:33 -0700, Hal Goldfarb wrote: On Monday 24 January 2005 05:21, Tomasz Papszun wrote: On Mon, 24 Jan 2005 at 3:04:22 -0700, Hal Goldfarb wrote: [...] Problem: When I run clamdscan (which uses the daemon), it generates zillions of errors in the clamd.log

Re: [Clamav-users] Directory recursion limit exceeded error in clamd.log file (clamav version 0.80)

:-) . -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner ___ http://lists.clamav.net/cgi-bin/mailman

Re: [Clamav-users] clamAV 0.80 clamd issue...

there are no clamav related files left elsewhere (older installation?) and start from scratch, doing _as little changes in relation to the INSTALL file, as possible_. -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros

Re: [Clamav-users] Virus detection notification

On Thu, 20 Jan 2005 at 8:02:43 -0800, Dennis Peterson wrote: Tomasz Papszun wrote: On Thu, 20 Jan 2005 at 16:36:14 +0100, Cali Federico wrote: [...] -- is it possible, after a virus detection, to forwarding the e-mail to the original destination without the attachment ? Please don't

Re: [Clamav-users] Greetings - I'm having a puzzling issue with clamscan

is caused by something at the pre-compiling stage, most likely options given to ./configure. -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner

Re: [Clamav-users] Unknown type flag L error with tar.gz file

works fine. Any ideas? Does the error occur also with the CVS version? -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner

Re: [Clamav-users] freshclam 0.80 on FreeBSD hanging

some problem with frequency of checks. Try adding Checks number where number is the number of database checks per day. Also, add LogVerbose to see more details in the log. -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones

Re: [Clamav-users] virus signature version

(: is the field separator). -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner ___ http://lists.clamav.net/cgi

Re: [Clamav-users] Scanning of mailboxes

CVS version for this (or wait for releasing 0.81). Though I'm not sure about something you call mbx format mailbox files as you contrast them with standard unix mailbox files. -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones

Re: [Clamav-users] W32.Netsky.D@mm virus

that virus ? http://www.clamav.net/sendvirus.html -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner

Re: [Clamav-users] performace problems, need a hand

. -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav

Re: [Clamav-users] clarm fail to detect this virus (W32.Netsky.Z@mm)

in the attachment itself? (not in the mail message but in the naked Textfile.zip). If yes, there is some problem in your setup (Clamfilter?). If not, submit the file at http://www.clamav.net/sendvirus.html . -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http

Re: [Clamav-users] how to change clamav's warning message?

instead of its configuration file is a last resort. -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner

Re: [Clamav-users] 3rd attempt to send this!

properly decode it. BTW, 'uudeview' segfaults on that sample. 'mimencode' decodes it successfully. -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner

Re: [Clamav-users] clam reports MS Office 2000 Pro CD 1 as infected

: '/pub/CDImages/Office 2000 CD1.iso' infected with virus 'Exploit.IFrame.Gen' I assume that the iso file contains the same signature as the virus. An updated signature will be released shortly. Then the false signature will be removed from the main.cvd. -- Tomasz Papszun SysAdm @ TP S.A

Re: [Clamav-users] This is how I use ClamAV

description of its core business, description of servers running ClamAV, number of domain hosted, number of scans performed each day. -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http

Re: [Clamav-users] Freshclam + My Problem

-1 -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner ___ http://lists.clamav.net/cgi-bin/mailman/listinfo

Re: [Clamav-users] Freshclam + My Problem

on behalf of that blocked IP address. Or do some redirecting of packets by means of the firewall or the firewall code in the host itself. -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http

Re: [Clamav-users] Freshclam Question

-- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner ___ http://lists.clamav.net/cgi-bin/mailman/listinfo

Re: [Clamav-users] clamav-0.80

putting together? Seems it's an OpenBSD issue. You may want to ask OpenBSD folks. -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner

Re: [Clamav-users] Zip file with a long filename inside

ClamAV scan message_text.txt what it isn't an executable and let it go through :? Does ClamAV detect a malware if you change the filename to some normal, short name?... No? Then nothing shows that there is any problem with long filenames. -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland

Re: [Clamav-users] Zip file with a long filename inside

On Wed, 24 Nov 2004 at 11:03:56 +0100, Alvaro Uria wrote: On Wed, 24 Nov 2004 10:17:24 +0100 Tomasz Papszun [EMAIL PROTECTED] wrote: Does ClamAV detect a malware if you change the filename to some normal, short name?... No? Then nothing shows that there is any problem with long

Re: [Clamav-users] request for info

probably use for your goal. Maybe ask at some Snort forums also. -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner

Re: [Clamav-users] Too many clamav processes

1.300Mhz 128MB. Clamav is called from P3scan pop3 proxy for 1300 emails per day. Version 0.80 was released more than 1 month ago. Please upgrade. -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL

Re: [Clamav-users] borked database

On Fri, 19 Nov 2004 at 22:26:24 -0600, Damian Menscher wrote: On Sat, 20 Nov 2004, Tomasz Papszun wrote: On Fri, 19 Nov 2004 at 20:09:06 -0600, Damian Menscher wrote: Clamd didn't find the EICAR pattern. Your virus database(s) could be borked! Eicar-Test-Signature was moved to daily.cvd

Re: [Clamav-users] freshclam problem

and access rights of them. -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. [EMAIL PROTECTED] http://www.ClamAV.net/ A GPL virus scanner ___ http://lists.clamav.net

Re: [Clamav-users] borked database

? -- Tomasz Papszun SysAdm @ TP S.A. Lodz, Poland | And it's only [EMAIL PROTECTED] http://www.lodz.tpsa.pl/iso/ | ones and zeros. ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Re: [Clamav-users] borked database

On Fri, 19 Nov 2004 at 20:09:06 -0600, Damian Menscher wrote: On Sat, 20 Nov 2004, Tomasz Papszun wrote: [...] What, exactly, was wrong? All my servers did this two times (15 minutes apart): Subject: Cron [EMAIL PROTECTED] /usr/local/sbin/clamdwatch.pl -q /etc/init.d/clamd condrestart

  1   2   3   4   >