Re: [clamav-users] (no subject)

2017-12-06 Thread Rob Sterenborg
> ERROR: Can't open /var/log/clamav/freshclam.log in append mode (check > permissions!). > ERROR: Problem with internal logger (UpdateLogFile = > /var/log/clamav/freshclam.log). I expect you solved this already? > WARNING: getpatch: Can't download daily-24011.cdiff from db.local.clamav.net

Re: [clamav-users] checking for OpenSSL installation... /usr

2016-05-20 Thread Rob Sterenborg
You also installed the accompanying development OpenSSL package? -- Rob -Original Message- From: clamav-users [mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of bondo vine Sent: Friday, 20 May 2016 13:18 To: clamav-users@lists.clamav.net Subject: [clamav-users] checking for

Re: [clamav-users] No supported database files found

2016-03-09 Thread Rob Sterenborg
So there *is* a clamav user in /etc/passwd, which has /var/lib/clamav as home directory. It is probably configured by apt-get. I don't know where clamd.conf5 comes from: the file is usually called clamd.conf. Install from source or from apt-get, not both, so remove either one. If you remove

Re: [clamav-users] No supported database files found

2016-03-09 Thread Rob Sterenborg
clamav directory with mkdir command, but its owner is "roort" ,Do I must change its owner to "clamav " ? as I have not any user by this name in my system On Wednesday, March 9, 2016 7:59 PM, Rob Sterenborg <r.sterenb...@netmatch.nl> wrote: You skipped my first step:

Re: [clamav-users] No supported database files found

2016-03-09 Thread Rob Sterenborg
You skipped my first step: "make sure the directory exists". This means: if it doesn't exist, create it and set the owner/group to the user clamav runs as and permissions accordingly. When you've done that, run freshclam again. -- Rob -Original Message- From: clamav-users

Re: [clamav-users] No supported database files found

2016-03-09 Thread Rob Sterenborg
- Make sure directory /usr/local/share/clamav exists. - Start freshclam to update your virus definition databases. -- Rob -Original Message- From: clamav-users [mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of farbod emami Sent: Wednesday, 9 March 2016 15:55 To:

Re: [clamav-users] Compiler error: 7z/Types.h:58: redefinition of `Byte'

2013-09-25 Thread Rob Sterenborg (lists)
On 09/25/2013 07:47 PM, Shawn Webb wrote: Hey Francis, Can you add the --disable-silent-rules option to your configure script and re-run make? It'd be helpful to see what's being passed to the compiler. I didn't do this, but.. Here's a small patch that might help. Can you give this a try

Re: [clamav-users] Compiler error: 7z/Types.h:58: redefinition of `Byte'

2013-09-24 Thread Rob Sterenborg (lists)
On 09/24/2013 03:51 PM, Shawn Webb wrote: On Mon, Sep 23, 2013 at 5:04 PM, Dennis Peterson denni...@inetnw.comwrote: On 9/23/13 1:59:42PM, Shawn Webb wrote: Maybe this time I'll actually attach the patch. ;) I believe the list server discourages attachments. dp Did the patch not go

Re: [clamav-users] Compiler error: 7z/Types.h:58: redefinition of `Byte'

2013-09-23 Thread Rob Sterenborg (lists)
On 09/23/2013 05:45 PM, Shawn Webb wrote: This is due to a change I had made in November 2012 to how the zlib linking checks are done in the configure script. If you have a few extra moments, can you apply the below-pasted patchfile and re-run configure? If your compile works with just this

Re: [clamav-users] vscan-clamav

2013-05-16 Thread Rob Sterenborg (lists)
On 16-05-13 14:06, jens s wrote: Dear If I do understand you I'll have to make a cronjob with clamscan command in it wich will scann my whole system specifying the folders I want it to scan. That would be clamdscan (notice the d in between) instead. - Clamscan is the standalone command line

Re: [clamav-users] Detection of Win32 Trojan / Dorifel

2012-08-22 Thread Rob Sterenborg (lists)
On 08/22/2012 08:51 PM, Alain Zidouemba wrote: Look for the signature: WIN.Worm.Dorifel Great, thanks a bunch! -- Rob ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [clamav-users] Detection of Win32 Trojan / Dorifel

2012-08-21 Thread Rob Sterenborg (lists)
On 08/20/2012 02:43 PM, Joel Esler wrote: On Aug 20, 2012, at 7:46 AM, Birgelen, Jeroen van jeroen.van.birge...@ordina.nl wrote: LS, I would kindly like to request some information on whether ClamAV is detecting the Dorifel Trojan/virus which is currently spreading (at least in The

Re: [clamav-users] Clamav update problem

2012-08-13 Thread Rob Sterenborg (lists)
On Mon, 2012-08-13 at 13:53 +0400, Ильяс Досхожаев wrote: i updated clamav to last 0.97.5 on debian , nevertheless it show error #freshclam ClamAV update process started at Mon Aug 13 15:49:41 2012 WARNING: Your ClamAV installation is OUTDATED! WARNING: Local version: 0.97.3 Recommended

Re: [clamav-users] Can't download v0.97.5 source code

2012-07-26 Thread Rob Sterenborg (Lists)
On Thu, 2012-07-26 at 15:35 -0400, Ruiyuan Jiang wrote: Hi, I could not download the ClamAV v0.97.5 source code since yesterday. Does anyone know what happened? When I try to download I'm redirected to SourceForge and I can download 0.97.5 just fine.

Re: [clamav-users] 10 years of ClamAV

2012-06-20 Thread Rob Sterenborg
Dear ClamAV Users, This year, ClamAV celebrates its 10th anniversary. The first release was on May 8, 2002, and included the basic command line scanner clamscan and database update tool freshclam. With your help, the project that started as a hobby has become a complete antivirus solution

Re: [clamav-users] clamd network mode

2012-04-18 Thread Rob Sterenborg (Lists)
On Wed, 2012-04-18 at 12:13 -0500, Tom Goerger wrote: Hi, We're running clamav on our mta servers right now, each in local mode. We're experiencing some high loads causing mail delays on these servers, I can imagine if you're using clamscan. and are trying to offload some of their

Re: [clamav-users] Untit Testing

2012-02-06 Thread Rob Sterenborg (Lists)
On Mon, 2012-02-06 at 11:39 -0800, Reynolds, David C. wrote: I've recently installed .97.3 on an SGI Origin 3000 running TRIX v6.5.28 using gcc 3.2.1. (I did need to make some source file modifications). I was able to run clamscan against a directory seemingly without error. However, I

Re: [clamav-users] How can I have clamd reject items that can't be scanned?

2011-11-09 Thread Rob Sterenborg (lists)
On Wed, 2011-11-09 at 10:31 +0100, Per Jessen wrote: Peter Bradeen wrote: I see that there are ways to limit the level of archive that will be scanned as well as the size of the entities to be scanned. Is there a way for CLAMAV to then flag them as not allowed? Seem that if you can't

Re: [Clamav-users] No debian woody support anymore?

2010-04-23 Thread Rob Sterenborg
OK, how's this then. 9.5.3 (IIRC) came out about the time the notice OK, how's this then. If you used freshclam, everytime you updated the signatures you got a message about ClamAV being outdated. The gap between 0.94 and now it quite big. The people who *chose* to ignore it are to blame. If

Re: [Clamav-users] No debian woody support anymore?

2010-04-23 Thread Rob Sterenborg
Erwan David wrote: Message of freshclam did not specify that older versions would stop. It was the same message as for minor upgrades. This did not give the information that something different than usual was planned. It still means you should upgrade and the message was ignored long enough

Re: [Clamav-users] (no subject)

2010-04-21 Thread Rob Sterenborg
In the interest of eliminating any further waste of my time or computer resources, I am now instigating a kill filter on this thread. +1 +1 ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net

Re: [Clamav-users] No debian woody support anymore?

2010-04-21 Thread Rob Sterenborg
After the last signature update, clam av stopped working on our woody installation. Your ClamAV is probably EOL. Please upgrade. http://www.clamav.net/lang/en/2009/10/05/eol-clamav-094/ If your distro does not have a recent ClamAV package, you should be able to build it from source. (I saw a

Re: [Clamav-users] How to find infected file

2007-12-24 Thread Rob Sterenborg
I usually don't post but I just can't resist this insulting troll.. wasn't provided with your question. I suspect that you ran 'clamscan' and you were rewarded with a _very_ large list of file names, to each of which was appended the four characters : OK, and at the end of [...snip things

Re: [Clamav-users] Everything gets marked as a virus

2007-07-04 Thread Rob Sterenborg
[EMAIL PROTECTED] wrote: I'm using MailScanner / SpamAssassin / Sendmail /ClamAV .09.3 This weekend my MailScanner started acting up. I?ve gone through everything that I could think of and I ran into a lot of brick walls along the way. In the end I?ve got the problem narrowed down to

Re: [Clamav-users] limiting access by IP to clamd running on tcpsocket?

2007-06-12 Thread Rob Sterenborg
i've clamd running on a standalone box on my private LAN, listening on a TCP socket; in clamd.conf i have, TCPAddr 10.0.0.105 TCPSocket 3310 i'm submitting messages TO it via exim's exiscan/content-scanning. works great. i'd like to LIMIT which IPs can *access* clamd on that

Re: [Clamav-users] Please help me

2007-06-06 Thread Rob Sterenborg
So I decided to upgrade to 0.90.2, from the old source directory I did a make uninstall. I then did a find / -name clamav and deleted all the files located in all the clamav directories. I went into the 09.90.2 directory and did the following: /configure make make

Re: [Clamav-users] Please help me

2007-06-06 Thread Rob Sterenborg
libraries. Grts, Rob - Original Message - From: Rob Sterenborg [EMAIL PROTECTED] To: ClamAV users ML clamav-users@lists.clamav.net Sent: Wednesday, June 06, 2007 9:54 AM Subject: Re: [Clamav-users] Please help me So I decided to upgrade to 0.90.2, from the old source directory

Re: [Clamav-users] Error after upgrade

2007-06-05 Thread Rob Sterenborg
[EMAIL PROTECTED] wrote: I Upgraded from 0.88.6 to 0.90.3. I did a make uninstall of 0.88.6 and then built 0.90.3 from source. No errors during compile. When I run clamscan or freshclam, I'm receiving: clamscan: error while loading shared libraries: libclamav.so.2: cannot open

Re: [Clamav-users] ClamAV timing out

2007-06-04 Thread Rob Sterenborg
So, I'm not so sure if this is ClamAV related. Maybe this doesn't belong here... I'll continue searching. Are you using clamscan instead of clamdscan? That could be the reason for your trouble. Both programs take a long time to start up, easily long enough to overrun a timeout. Long

Re: [Clamav-users] ClamAV timing out

2007-06-04 Thread Rob Sterenborg
Yes I'm aware of that. But.. clamdscan was as slow as clamscan as clamavmodule. I would suggest that you either use clamdscan or clamavmodule. The time required for clamscan to load virus signatures (100 thousand or so) is enough (20-something seconds on my system) to justify the choice.

Re: [Clamav-users] ClamAV timing out

2007-06-01 Thread Rob Sterenborg
Start with your mail log, which messages are causing the problem? are they big, do they have certain type of attachments, etc. (all these attributes can be controlled with MailScanner) If you can isolate one sample, better, that way you'll have something to test directly. From what I see in

[Clamav-users] ClamAV timing out

2007-05-31 Thread Rob Sterenborg
Hi all, I'm having an issue with ClamAV-0.90.1 (Debian package, company policy prohibits me from using the ClamAV-latest source) being used by MailScanner and I'm not sure where to look. ClamAV is timing out regularly in which case MailScanner reports a Denial of Service attack. I've tried using