Re: [Clamav-users] Major upgrade db compatibility

date) freshclam and sigtool, you should be able to create old-style signatures for a local mirror. I don't know what's planned for 0.96, but I'm sure there will be some grace period of time if the signature format changes again or other large-scale changes occur. It's always good pract

Re: [Clamav-users] nonblock_connect: connect timing out (30 secs)

freshclam.conf. If you don't have clamd running (which I recommend), comment out the NotifyClamd or make sure the argument to NotifyClamd correctly points to clamd's config file. Good Luck Thomas -- Thomas Lamy Ingolstadt Online GmbH thomas.l...@in-online.net Fon: +49 841 885 212-0

Re: [Clamav-users] Problems Detecting Known Viruses

installing clamav-daemon, please read README.Debian in /usr/share/doc/clamav-daemon carefully. By default clamd runs as user "clamav", which has no access rights to /var/lib/amavis/... . Sorry for not having a howto url at hand ;-) Thomas -- Thomas Lamy Ingolstadt Online Gm

Re: [Clamav-users] Using ClamAV from PHP

riend. The protocol was pretty easy to implement. Kind regards Thomas Lamy -- Thomas Lamy Ingolstadt Online GmbH thomas.l...@in-online.net Fon: +49 841 885 212-0 Fax: +49 841 885 212-29 Web: www.in-online.net Pflichtangaben lt. §35a GmbHG: Ingolstadt Online GmbH Münchener Strasse 7

RE: [Clamav-users] Freshclam fail: Need to Edit config file

Kurt Jensen wrote on Tuesday, August 15, 2006 7:51 AM: > > Hi, > > I am an Ubuntu newbie compiling for the first time. I have > sucessfully > compiled clamav and run the program from the shell. However, my virus > definitions are out-of-date and when I execute freshclam I > receive this > er

RE: [Clamav-users] Development Question

> > Thanks for your assistance. I've gotten streaming working for > uninfected > files. I can now successfully stream bytes to the clamav > server and then > close the stream. At that point it seems I have to wait a > little while, > about 500ms at max, to read the result. This makes sense to m

RE: [Clamav-users] oversized.zip problem

saravanan ganapathy wrote: > > Hi, > > I am using clamav-0.84 ( Debian Version) with > Dansguardian. My config looks like as follows > > ArchiveMaxRecursion 0 > ArchiveMaxFiles 0 > ArchiveMaxFileSize 0 > ArchiveMaxCompressionRatio 0 > > I disabled all the above , restarted clamav & > Dansguardi

Re: [Clamav-users] What does this message mean?

Ken Goods wrote: René Bellora wrote: Ken Goods wrote: Jun 16 10:17:46 gw-mail MailScanner[16315]: Virus and Content Scanning: Starting Jun 16 10:18:19 gw-mail MailScanner[16151]: Commercial scanner clamav timed out! Jun 16 10:18:19 gw-mail MailScanner[16151]: Virus Scanning: Denial Of Servic

Re: [Clamav-users] What does this message mean?

Ken Goods wrote: I can't find anything via Google and the MailScanner list suggested I upgrade ClamAV which I did and I'm still seeing these. From my maillog: Jun 16 10:17:46 gw-mail MailScanner[16315]: Virus and Content Scanning: Starting Jun 16 10:18:19 gw-mail MailScanner[16151]: Commercia

Re: [Clamav-users] freshclam watchdog?

Bowie Bailey schrieb: > From: Odhiambo Washington [mailto:[EMAIL PROTECTED] > >>* Bowie Bailey <[EMAIL PROTECTED]> [20050503 18:38]: wrote: >> >>>From: henry j. mason [mailto:[EMAIL PROTECTED] >>> i need to know when freshclam fails silently. i know freshclam includes options to al

Re: [Clamav-users] 'Too many open files' on a buzy clamd

Arnaud Huret schrieb: > Dear all, > > We are running a webmail service using ClamAV and get roughtly 30.000 valid > mails/day. > We run home-build SMTP servers calling clamd, emulating the client. > > The problem : > > After running +- 10 minutes, clamd.log reports a first message saying : > '

Re: [Clamav-users] 0.83 on aix 5.2

Tayfun Asker wrote: hi, I'm trying to upgrade from 0.80 to 0.83. I'm using 0.83 on linux without any problem. but on aix 5.2, i can not get it working. clamav-milter does not scan emails on aix 5.2. all the messages simply pass through unscanned. in the error log, i'm seeing lines like clamav-m

Re: [Clamav-users] ClamAV is not 100% open still ?!

Guillaume Arcas wrote: Damian Menscher a écrit : http://www.clamav.net/doc/0.75/signatures.pdf They removed the functionality in 0.80 and above, but that's because it's simplest for users to create md5 signatures of unknown binaries (and the automatic signature generation depended on having anothe

Re: [Clamav-users] clamav update

Thoralf Will schrieb: Hello, On a mailserver I'm running a fairly old v0.65 via amavisd-new and now it's about time to upgrade to a more recent version. Is there anything I have to pay attention to or is it sufficient to simply upgrade clamav/clamd and restart the service? (amavisd-new is also r

Re: [Clamav-users] ERROR

Amin Thakkar wrote: so, what is right way to update automatic ? Amin 1. Don't top-post. () 2. Read the fine manual 3. Think 4. It simply works Thomas ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] ERROR

Amin Thakkar wrote: so, what is right way to update automatic ? Amin - Original Message - From: "Tomasz Kojm" <[EMAIL PROTECTED]> To: "ClamAV users ML" Sent: Monday, March 28, 2005 6:47 PM Subject: Re: [Clamav-users] ERROR 1. Don't top-post. () 2. Read the fine ma

Re: [Clamav-users] Building his own CVD

Guillaume Arcas schrieb: Thomas Lamy a écrit : No it's not faster. But it's more secure, because it's signed, and it's contents is compressed. OK, that does explain why clamscan runs a little faster with text signatures database than with CVD files. Shoud not be a pr

Re: [Clamav-users] Building his own CVD

Guillaume Arcas schrieb: Tomasz Papszun a écrit : in case you wanted to disable some signature because of a false positive, the proper way of solving this is submitting the sample at http://www.clamav.net/sendvirus.html (selecting the button "A false positive") so that the signature could be corr

Re: [Clamav-users] interception logs

Damian Menscher schrieb: I'm seeing logs like: Intercepted virus from <[EMAIL PROTECTED]> to <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> Seems strange to me that the invalid users would have made it past sendmail's RCPT TO and into the AV engine. I'm guessing it's a bug. Sometimes the invalid user

Re: [Clamav-users] clamd on Solaris ceases functioning after a while

hments?), and a threadmanager after a database update, waiting for the mail scan to finish. Tomasz? Trog? Thomas Lamy PS: Sorry for the small confusion about attachments vs attachment levels, but I'm not too deep into Nigel's mail code for 0.82+. ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] How long will a version remain usable?

Jason Haar schrieb: Ed Stover wrote: I am just wondering about how long will a stable release be supported before it get tossed? The sevenX version is no longer really functional The good commercial AV typically have daily pattern updates, and monthly engine updates. That corresponds just about

Re: [Clamav-users] Re: clamav-users Digest, Vol 4, Issue 57

dlpreston wrote: This is not the case anymore. The Howto has been changed and now uses the real clamdscan. -Jim This is still the case on freebsd, it fixed my problem after reading this message, rename clamdscan to clamdscan.org ln -s /usr/local/bin/clamscan /usr/local/bin/clamdscan All of a

Re: [Clamav-users] Re: clamav-users Digest, Vol 4, Issue 57

dlpreston schrieb: At 09:00 AM 12/20/2004, you wrote: Todd Lyons wrote: > [EMAIL PROTECTED] wanted us to know: > > I am running Qmail+Qmail-Scanner+ClamAV on a FreeBSD 5.3 machine and followed the qmailrocks.org directions to the tee. When running > > > Unless it's been fixed recently, tha

Re: AW: [Clamav-users] ScanMail

Steffen Heil schrieb: Hi Maybe I am wrong, but I always assumes, the option to be DIABLED, if the directive is commented out (or missing at all) and only ENABLED, if the directive is there (and uncommented). However, if I am wrong on this, this would explain my problems. But then, what to do folks?

Re: [Clamav-users] ScanMail

Steffen Heil schrieb: Hi I came across a .eml file once again, that causes a segfault in clamd. However, since I had that issue a few days ago and the clamav team corrected that bug aleady, I did not post a bug report. However, since about a week, my mail servers are configured NOT to use ScanMail.

Re: [Clamav-users] What to do with files in /var/amavis?

Eric Wagar schrieb: What am I supposed to do with the files that are created and kept in the /var/amavis directory? Since my virus is kinda working right now, I get files there. Am I supposed to keep them for some reason, or can I cron their removal? thanks eric I'd suggest to clean /var/amav

Re: [Clamav-users] Virus scanning not working right now

Eric Wagar schrieb: Currently my email is not being scanned for viruses. (I have received a few viruses this morning.) When I ps, I see clamd, postfix, and amavis (master, and 2 x child) running. But, when I look in my messages file, I see this: Dec 12 12:28:41 sm amavis[18955]: (18955-03) WAR

Re: [Clamav-users] testing clamav not detecting viruses in mail

Simon Crowther schrieb: I have just installed clamav on Debian, updated and tested it at virustest.org. It didn't detect any of the test viruses, even those in the message body. I ran clamscan and clamdscan from the command line. Clamscan found nothing, clamdscan found them all and also the myd

Re: [Clamav-users] Freshclam + My Problem

Luca Gibelli schrieb: Hello xterm1, Is there any way to tell freshclam what ip to use to get it's updates. We have a problem with our main ip being locked out due to an attack. Now there is no way to do that, afaik. As a temp. fix, add a static route for some mirrors and specify them in freshc

Re: [Clamav-users] Problem installing clamav-0.80rc4 on TRU64 V5.1 Alpha

Domingo Fonteboa Gascón schrieb: Hello, I have a problem in configure, clamav say that I need install zlib and zlib-devel. I have installed the package zlib-1.2.1.tar.Z, that come in the CD "sources for open source components" of TRU64 distribuition. Error: root> ./configure checking build system t

Re: [Clamav-users] Virus report

Erick Lopez Carreon schrieb: On Tue, 2004-11-23 at 17:44 +0100, Thomas Lamy wrote: Erick Lopez Carreon schrieb: Hello: Just for warn clamAv team about a new mail virus reported by "Hispasec - una-al-dÃa" : worm Anzae, Inzae, Pawur o Tasin wited in visual basic subject and body in spanis

Re: [Clamav-users] Virus report

Erick Lopez Carreon schrieb: Hello: Just for warn clamAv team about a new mail virus reported by "Hispasec - una-al-dÃa" : worm Anzae, Inzae, Pawur o Tasin wited in visual basic subject and body in spanish. Did you submit it at ? __

Re: [Clamav-users] Clam SSL issues

[EMAIL PROTECTED] wrote: Greetings all. I'm still having the same problem we talked about back in September. The Clam make isn't find -lssl for some reason. Every release up to and including 0.75.1 worked perfectly with the exact same configure options. Anything after that gives the same error

Re: [Clamav-users] Re: OpenBSD and Clam

john schrieb: Hi Folks. How many signatures does clam have in its data base for viruses and Trojans that attack OpenBSD and the KDE/Gnome desktops?. This topic comes up from time to time on various nix forms. Usually the consensus is that linux/unix AV products only scan for Windows mallware. Is t

[Clamav-users] OT: Spamcop.net/RBLs (Was: ClamAV should not try to detect phishing and other social engineering attacks)

Trog schrieb: On Sun, 2004-11-14 at 14:57, Julian Mehnle wrote: 3. I am using the SpamCop reporting tool[1] to file complaints to ISPs about spam (which specifically includes phishing attacks) that I receive. SpamCop requires spam samples to be manually checked for spamminess before bein

Re: [Clamav-users] clamav on woody: clamav-milter hangs when stopped

Robert S schrieb: I have just upgraded to clamav-milter_0.80-5 on my Debian Woody system. When I run "/etc/init.d/clamav-milter stop" it hangs. When I do a "ps ax" it says "sleep 0.1". Looks as if the offending line something like this: if [ -n "$PID" ]; then start-stop-daemon -q -K -

Re: [Clamav-users] Infection: W32/Kriz.4029.kernel reported by f-prot

Rishi schrieb: Better submit it through . it's vital for Clamav's detection to get virus samples from it's users. I did that last week. Any idea how much time it takes for it to get done? I'm not a sigmaker, but just in case it's some polymorphic one it may t

Re: [Clamav-users] Infection: W32/Kriz.4029.kernel reported by f-prot

Rishi schrieb: Hi I've been receiving a new virus which f-prot reports as "W32/Kriz.4029.kernel" Can anyone tell me how to use sigtool program to get clamav to use f-prot to figure out how to detect this virus and update the clamav database too? Regards Rishi If you don't know how to use sigtool

Re: [Clamav-users] new Wiki site

Luca Gibelli wrote: Hello Graham Toal, What's needed is an installation script which installs a completely independent copy in one of two locations, so you can double-buffer the installs. "./configure --prefix=path" can already do that. along with --program-prefix=test_ so clamd becomes test_cl

Re: [Clamav-users] Clamav and the CR Vulnerability

Jim Maul schrieb: Ken Jones wrote: Hi all, I decided to run all of the tests located at testvirus.org against my mail server. As expected, tests 24 and 25 got through, no surprise there. However, test 17 also made it through. This test is described as follows : I sent it to my server as w

Re: [Clamav-users] Clamd.conf setting

Awie wrote: All, I found clamd write the LOG into /var/log/message. I want clamdscan not write LOG anymore. What parameter shoudl I remove or add in clamd.conf? Your answer is very appreciated. Thx & Rgds, Awie It is recommended to have a look at the manual page(s) before asking questions to the l

Re: [Clamav-users] Problem compiling clamav-0.80

Ajaya Sharma wrote: Hi, I'm running clamav .7.5.1 and want to update to latest verion. I was able to compile clamav-0.80rc3 without any problem but somehow I remained unsuccessful after clamav-0.80rc3. Below was the error received when attempted to compile clamav-0.80rc4 and clamav-080: # make ...

Re: [Clamav-users] Which version am I using?

John Fleming schrieb: I originally used apt-get with Debian Sarge (testing) to install ClamAV (the version immediately before 0.80). With the move to 0.80, not yet in the Sarge distro, I used Webmin to update ClamAV. This worked fine, and my headers indicate 0.80 is being used. Then yesterday in

Re: [Clamav-users] ClamAV 0.80 Compilation

Robin, Rob wrote: All, Tried to upgrade to ClamAV 0.80 from 0.75.1. Failed to compile it. ~~~ ./configure --prefix=/usr/local/clamav/0.80 's warnings - configure: WARNING: resolv.h: present but cannot be compiled configure: WARNING: resolv.h: check for missing prerequisite headers?

Re: [Clamav-users] RE: freshclam.pid: Permission denied

Jona Tallieu (T & T n.v.) schrieb: ERROR: Clamd was NOT notified: Can't connect to clamd through /var/clamav/clamd.sock So it seems freshclam can not access anything in /var/clamav/. The permissions for /var/clamav/ are: drw-r--r-- 4 lplp 136 18 Oct 10:49 clamav And inside are: -rw-rw--

Re: [Clamav-users] (no subject)

Max Chernogor schrieb: Hello Nigel, Friday, October 15, 2004, 4:02:58 PM, you wrote: NH> On Friday 15 Oct 2004 13:59, Max Chernogor wrote: Hello Nigel, Friday, October 15, 2004, 2:56:00 PM, you wrote: clamav-milter version 0.75l man says "All the servers must be up when clamav-milter starts"

Re: [Clamav-users] downloading without advertising

david thompson wrote: I would like to download clamav. however using adblock in mozilla stops the ability to download. Are there any other places to download from - other than sourceforge. cheers I (and many more) have no problems whatsoever with sf.net's downloads. This is the official download

Re: [Clamav-users] SPAM[RBL] version 0.54

darius wrote: I have version 0.54 and from september 2004 i can't update clamav. The message is: Connected to clamav.elektrapro.com. Reading md5 sum (viruses.md5): ERROR: Malformed md5 checksum detected. ERROR: Can't get viruses.md5 sum from clamav.elektrapro.com What can i do?Is possible to change

Re: [Clamav-users] Cobalt RaQ2 Compile Errors

Jeff Ball wrote: The Cobalt RaQ2 has the following... gcc-c++-2.7.2-c3r2 gcc-objc-2.7.2-c3r2 gcc-2.7.2-c3r2 glibc-2.0.7-29.4C2 and 0.80rc3 will not build. again. I'm wondering if I should work on making a new patch, wait longer, or just give up because I will never have a newer compiler, etc...

Re: [Clamav-users] 0.75.1->80rc3 rpm failure??

Tim Rupp wrote: Thomas Lamy wrote: Tim Rupp wrote: (From the qmailrocks website) Now I'm going to throw in a small customization to Clam AV... *mv /usr/bin/clamdscan /usr/bin/clamdscan.orig* *ln -s /usr/bin/clamscan /usr/bin/clamdscan* This sucks. With this setup, you're loading the vi

Re: [Clamav-users] 0.75.1->80rc3 rpm failure??

Tim Rupp wrote: Cory Megitt [ClamAV] wrote: Hi All; I attempted to upgrade from 0.75.1 to 80rc3 via rpms, and when running a test script to test the mail server / clamav processes, I get the following error. [EMAIL PROTECTED] contrib]# ./test_installation.sh -doit setting QMAILQUEUE to /var/qmail/b

Re: [Clamav-users] Virus not detected

Kareem Mahgoub wrote: Hello list, I am using clamav version 0.72 qmail 1.3 Qmail-scanner-queue1.21st I have a problem and I think it is related to clamav. The is a virus with name W32.Netsky.p.dam ( according to Norton antivirus) not caught by clamav. Is there is something wrong in my setup or

Re: [Clamav-users] New jpeg "virus" and 0.75?

Damian Menscher wrote: On Tue, 28 Sep 2004, Tomasz Kojm wrote: On Mon, 27 Sep 2004 23:06:40 -0400 Matthew Daubenspeck <[EMAIL PROTECTED]> wrote: Will there be an updated signature for the new jpeg "virus" for the 0.75 series of ClamAV? No, there will not - only 0.8x can detect JPEG exploits. Uhh,

Re: [Clamav-users] [Help] Hi - How conf clamav with postfix mailserver

Sushil Gholap wrote: Hi This is my first mail to this list. I want to know how to configure clamav with postfix(linux plateform ) mail server for scanning the mails for viruses. Thanks in advance. sUsHiL gHolAp. Have a look at amavisd-new (http://www.ijs.si/software/amavisd/) and/or mailscanner (h

Re: [Clamav-users] clamav on debian stable

agenteo wrote: this is the log I get: /home/teottie/.viminfo: Unable to open file or directory ERROR /home/teottie/mbox: Unable to open file or directory ERROR /home/teottie/.bash_history: Unable to open file or directory ERROR /home/teottie/clamav-testfiles/test-failure.rar: RAR module failure ERR

Re: [Clamav-users] clamav on debian stable

agenteo wrote: Hi, I've installed the clamav (clamav clamav-base clamav-deamon clamav-freshclean alibclamav1) debian packages taken from www.clamav.net/binary.html At the end of the installation/configuration I've tried as root #clamd PING in the document I've read the clamav deamon should answer

Re: [Clamav-users] Re: [Clamav-users] Windows port ?

[EMAIL PROTECTED] wrote: By the way - I checked some Backdoor (about 173 I have till now) and results are : Panda Antivirus : 164/173 identified ClamAV CVS version: 58/173 identified Sadly to say there is a long way ahead :-( (or maybe ClamAV is not against Backdoors ?) Boguslaw Brandys Then please

Re: [Clamav-users] freshclam - clamd notity

Jürgen Walch wrote: Hi there, we are running clamd in combination with clamdscan to scan incoming mails for viruses on smtp level with courier-mta here. Works fine. The signature files are updated using freshclam started via crontab. The crontab entry used is --8<-- # # clamav # 23 1,9,17 * * * roo

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

Fajar A. Nugraha wrote: D Walsh wrote: I sat down in front of a Solaris 9 system, installed clamav as instructed and yes indeed there appears to be a problem with the implementation of free(), in 30 mins of sending e-mail from the EICAR test site memory did climb to 2.87gb and did not clear i

Re: [Clamav-users] kernel: Out of Memory:Killed process xxxxx (clamd).

Jason Haar wrote: On Tue, Sep 14, 2004 at 08:38:57AM +0100, Trog wrote: A few people (out of the thousands who run ClamAV) have reported "memory leaks" in stable versions of clamd. However, none of those people have submitted a report from a memory debugging tool to show where the leak occurs on

Re: [Clamav-users] Upgrade clamav on Debian and now service creates error when starting

Jim wrote: After I upgraded clamav via apt-get I now get an error during restart of /etc/init.d/clamav-daemon. This is on a debian system and the error created is: /etc/init.d/clamav-daemon restart Restarting clamav daemon: clamdERROR: Parse error at line 10: Unknown option ThreadTimeout. ERROR: Ca

Re: [Clamav-users] freshclam: crontab vs. daemon

Daniel S. Cohen wrote: Hello, I am wondering if there is any advantage of running freshclam as a daemon as oppposed to running it from the crontab a few times day? Thanks. Dan It's a matter of taste. I prefer running it in daemon mode, as freshclam is rock solid (eg. it hasn't crashed here for mon

Re: [Clamav-users] Downloading clam virus definition files automatically

Julio Canto wrote: Fajar A. Nugraha wrote: Yes. There's nothing that prevent you running freshclam (or whatever your updater will be) every minute or so. However, with the default check time of one hour (default for RPM packages, that is), mirrors already uses lots of bandwitdh (over 100 GB a mon

Re: [Clamav-users] Clamav Engine upgrades?

Tomasz Kojm wrote: On Fri, 06 Aug 2004 00:08:55 +0200 Thomas Lamy <[EMAIL PROTECTED]> wrote: IIRC freshclam doesn't even update the local database if your local installation has a too small "functionality level". I guess it was Even if the f-level is smaller than require

Re: [Clamav-users] Another upgrade question.

Ken Goods wrote: I'm running Sendmail, Mailscanner, Spamassasin, and Clamav (0.70rc-1). I would like to upgrade Clamav. Tried yum but it continues to tell me there are no updates available. So on to plan two. I'm going to install from the RPMs but wasn't exactly sure of the process. This is my plan

Re: [Clamav-users] Clamav Engine upgrades?

Mitch (WebCob) wrote: Jeremy Kitchen wrote: On Thursday 05 August 2004 12:46 pm, Ryan Moore wrote: Such that if freshclam downloads a signature and if the signature has a 'engine version requirement' or some attribute that can be compared against the installed engine, if the installed engine isn't

Re: [Clamav-users] clamd devel-20040728 memory usage growing

Igor Brezac wrote: On Thu, 29 Jul 2004, Mike Lambert wrote: OS: FreeBSD 4.9-RELEASE-p2 ClamAV: devel-20040728 Build options: --enable-milter --disable-clamuko --enable-bigstack --disable-dependency-tracking In 24 hours of running, memory usage for clamd (devel-20040728) has steadily increased from

Re: [Clamav-users] Some Mydoom.M found, not all

Jona Tallieu wrote: Hi all, we use CLAMAV 0.75 on a OSX 10.3 server together with a McAfee scanner. First in line is the clamav, next is the mcafee virex scanner. In the clamdscan logs I can see that clam catches Mydoom.M viruses: Wed Jul 28 10:25:33 2004 -> /tmp/cgpavIOQyTk: Worm.Mydoom.M FOUND We

Re: [Clamav-users] Re: Clamav-users digest, Vol 1 #839 - 4 msgs

[EMAIL PROTECTED] wrote: From: Gavin Aiken [mailto:[EMAIL PROTECTED] The only case I'm worried about is what happens if our primary MX (which is my box and had clamav installed) is offline for whatever reason (eg SDSL down), and the mail gets routed via our secondary MX machines, which are at Easyn

Re: [Clamav-users] clamscan --mbox question

Graham Toal wrote: I want to use clamscan to check mail files (just one mail per file). These are not in Unix mbox format. Although they start with mail headers, the first line is not "From " ... Viruses are not recognised whether I use plain "clamscan" or "clamscan --mbox". They can only be reco

Re: [Clamav-users] Version 0.71 - clamdscan error

Kevin Spicer wrote: On Thu, 2004-05-27 at 09:21, Mr Mailing List wrote: Just noticed that scanning files with clamdscan does not scan filesthat are not world readable. Perhaps it would be better if clamd could implement some kind of privilege separation, so that a minimal process running as root r

Re: [Clamav-users] compiling clamav 0.68

Pad Hosmane schrieb: Hi, I am compiling clamav 0.68 on HP-UX 11.00. I am getting following error during make. I am using GCC 3.0.1. ++ gcc -g -O2 -o clamscan clamscan.o options.o getopt.o others.o manager.o t

Re: [Clamav-users] clamd hanging on SunOS 5.8

turgut kalfaoglu schrieb: Well, even after I disable urandom, which my system does not have anyway, I still have clamd hanging; eating up over 90% of the CPU, and doing nothing basically. I am trying daily builds, but it does not help. This sometimes happen after five minutes of runtime, but som

Re: [Clamav-users] testvirus.org eicar tests failing w/ ClamAV version devel-20040316 on OSX+CGPro (clamav-users: addressed to exclusive sender for this address)

OpenMacNews schrieb: -- On Wednesday, March 17, 2004 1:42 PM -0800 OpenMacNews <[EMAIL PROTECTED]> wrote: -- On Wednesday, March 17, 2004 9:42 PM +0100 Thomas Lamy <[EMAIL PROTECTED]> wrote: I agree here. It just comes down to: - Have you enabled the ScanMail and ScanArchiv

Re: [Clamav-users] SFX-RAR files

daniele schrieb: From: "Michael L Torrie" <[EMAIL PROTECTED]> On Wed, 2004-03-17 at 06:51, Tomasz Kojm wrote: On Wed, 17 Mar 2004 12:53:43 +0100 "daniele" <[EMAIL PROTECTED]> wrote: I've installed clamav-0.60 and also 0.65 , but when sendmail must send a message with file .exe creates with winra

Re: [Clamav-users] testvirus.org eicar tests failing w/ ClamAV version devel-20040316 on OSX+CGPro

Jim Maul schrieb: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of OpenMacNews Sent: Wednesday, March 17, 2004 11:27 AM To: ClamAV Users List Subject: [Clamav-users] testvirus.org eicar tests failing w/ ClamAV version devel-20040316 on OSX+CGPro hi, ClamAV ve

Re: [Clamav-users] New varient of password compressed virus

Lucas Albers schrieb: Fajar A. Nugraha said: An interesting fact on ChangeLog: Thu Mar 11 21:50:32 CET 2004 (tk) - * libclamav: rar: added support for encrypted archive (Encrypted.RAR) detection To make an obvious statement. Clamav should add encr

Re: [Clamav-users] MIME problem?

r to Nigel Horne ([EMAIL PROTECTED]) for examination. Thank you! Thomas Lamy --- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything fr

Re: [Clamav-users] FreshClam fail to connect database.clamav.net

Tim Wilde schrieb: On Tue, 9 Mar 2004, Ron Snyder wrote: Just want to pipe in with another opinion/question-- have there been more A records added for database.clamav.net recently? Freshclam had been working just fine for me for several weeks just started reporting the same problems that Seve re

Re: [Clamav-users] limiting child processes

Adam Webb wrote: Is there a way to tell clamd how many children it can spawn? I don't want a server to allow more than 10 instances of clamd to run at any given time. MaxThreads in clamav.conf Clamav is thread based, and it depends on the OSses threads implementation if threads are show as separa

Re: [Clamav-users] clamav-0.67 hangs periodically (postfix+amavisd-new+clamav)

Adam Kruszewski schrieb: On Mon, Mar 08, 2004 at 03:38:48PM -0800, Christopher Malek wrote: [...] Thereafter, amavisd gets stuck waiting as soon as it tries to talk to clamd: Almost immediately, all the amavisd processes are stuck waiting for clamd to respond, and mail starts piling up in the que

Re: [Clamav-users] FreshClam fail to connect database.clamav.net

Seve Ho schrieb: I have been unable to use freshclam to update for 2 days, My machine is a Freebsd 5.1 with ClamAV version devel-20040306 ( This is a CVS version ) following are when on the screen when i run freshclam # freshclam ClamAV update process started at Tue Mar 9 12:20:42 2004 SEC

Re: [Clamav-users] clamd and Amavis-new conflict?

Michael Shekman schrieb: I have an Amavis-new - SA - Postfix installation, and for some reason have never been able to make clamd work with amavisd; it looks like they just don't see each other. At every mail checked amavisd.log has a message: amavisd[950]: (00950-05) No anti-virus code loaded, s

Re: [Clamav-users] clamd is crashing

Asif Iqbal schrieb: I had to downgrade it to v 0.65 to fix the problem Asif Iqbal wrote: Hi All This is the first time I am using clamd. I just installed it with gmp-4.1.2 I am getting this error message when trying to start clamd LibClamAV debug: Loading databases from /usr/local/share/clamav

Re: [Clamav-users] clamscan detects clamdscan does not

Lucas Albers schrieb: There are two virus's that clamscan detects, and clamdscan does not. using clamav .67-6 via the debian package. clamscan -r --stdout --disable-summary --mbox --infected ./ ENTIRE_MESSAGE: Worm.Mydoom.F FOUND LibClamAV Warning: Multipart MIME message contains no boundary lines

[Clamav-users] Re: ClamAV 0.67 memory leak

Matthew Trent wrote: On Thursday 04 March 2004 10:25 am, you wrote: Looks good, but I've seen clamd temporarily allocate ~2x-3x a mail's size, so be sure to not set the memory limit too low. Yeah, I figure it's reasonable to spike some times. I'm just real squeamish because clamd managed to har

Re: [Clamav-users] Re: Some more evidence for my last mail ... - SOLVED

Fajar A. Nugraha schrieb: Thomas Lamy wrote: May I suggest a change then please? Either name it clamd.conf to describe for what its used It's already called clamd.conf, and the documentation and manpages are up-to-date. Eh? Really? Which version is that? The latest CVS snapshot still cal

Re: [Clamav-users] Amavisd-new and Clamav TCP

Hanford, Seth schrieb: I'm using ClamAV 0.67-1, currently using Unix sockets. I'm not too familiar with UNIX sockets, but I'm comfortable with TCP sockets and communication. Is clamd any more/less reliable when running over TCP? I started clamd briefly using TCP and was able to connect and PING

Re: [Clamav-users] ClamAV 0.67 memory leak

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Matthew Trent schrieb: | On Tuesday 02 March 2004 09:29 pm, Jim Gifford wrote: | |>Here is what I see on my system, maybe it's something in the kernel your |>using. I'm using 2.6.3 |> |>Name: clamd |>State: S (sleeping) |>SleepAVG: 0% |>Tgid:

Re: [Clamav-users] Problem with *.zip atachments!

Grzegorz Staleńczyk schrieb: Hey There! I've got a problem with viri on *.zip attachments in e-mails! when I scan file.zip by hand clamscan find virus, but e-mail with this infected files in atachment can go (IT IS NOT STOPED!) Why? What have I wrog configured? [EMAIL PROTECTED] ~]$/usr/local/

Re: [Clamav-users] Re: Some more evidence for my last mail ... - SOLVED

Thomas Seifert schrieb: Tomasz Kojm wrote: I believe clamscan don't read clamav.conf at all; It uses hard-coded compiled settings. I might be wrong :) You're right - it doesn't depend on clamav.conf at all. May I suggest a change then please? Either name it clamd.conf to describe for what its

Re: [Clamav-users] Worm.Bagle.F-zippwd-3 problems

Rick Macdougall schrieb: Hi All, We are getting hammered by Worm.Bagle.F-zippwd-3 and clamav isn't picking it up. I understand that qmail-scanner breaks apart the message so that clamav can not pick up the signature (and I'll look into fixing that) but the zip file itself is NOT password prot

Re: [Clamav-users] db signatures

[EMAIL PROTECTED] schrieb: my virus signatures dropped from 20831 to 20346, is there only one server I should be pointing to for updates? Are the db servers always going to be this much out of date? thanks, - Nick They're not out of date (as one can see from the db versions or the output

Re: [Clamav-users] Clamd will NOT start

Andrew Keuhs schrieb: - Original Message - From: "Thomas Lamy" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, March 03, 2004 3:18 AM Subject: Re: [Clamav-users] Clamd will NOT start Andrew Keuhs schrieb: Clamd will not start now.. i am using versi

Re: [Clamav-users] Clamd will NOT start

Andrew Keuhs schrieb: Clamd will not start now.. i am using version .67 It was working fine last week... we had a power outage... now when I run /usr/sbin/clamd as root... it goes to next line but nothing is started... Where would I look for errors? I see it has no verbose setting... So i have no

Re: [Clamav-users] ClamAV 0.67 memory leak

(please don't top-post!) Nigel Kukard schrieb: On Wed, Mar 03, 2004 at 12:42:48AM +0100, Thomas Lamy wrote: Nigel Kukard schrieb: Anyone seen this... 3843 ?S 0:00 clamd 3846 ?S 0:01 \_ clamd 3847 ?S 0:03 \_ clamd when i cat the /proc/3843/s

Re: [Clamav-users] ClamAV 0.67 memory leak

Nigel Kukard schrieb: Anyone seen this... 3843 ?S 0:00 clamd 3846 ?S 0:01 \_ clamd 3847 ?S 0:03 \_ clamd when i cat the /proc/3843/status file... Name: clamd State: S (sleeping) Tgid: 3843 Pid:3843 PPid: 1 TracerPid: 0 Uid:0

Re: [Clamav-users] Re: debian-sid package broken

Derrick 'dman' Hudson schrieb: On Tue, Mar 02, 2004 at 12:00:28PM +0800, Me Its wrote: | I am using debian - sid, but I got error when I apt-get upgrade, when | it tries to install the new ClamAV | What should I do next ? Look for a related bug report on http://bugs.debian.org. If there is non

Re: [Clamav-users] Clamscan not detecting virus

Matthew Daubenspeck wrote: I am using the backported.org package of ClamAV: $ clamscan --version clamscan / ClamAV version 0.67+CVS20040221 So far clam has been catching 90% of the viruses that are sent to the server, but it has missed a few others. I downloaded the specific virus itself and tried

Re: [Clamav-users] libclamav question

Jose Marcio Martins da Cruz schrieb: Hello, libclamav has three functions to scan an object : cl_scanbuff, cl_scandesc and cl_scanfile. Only cl_scanbuff doesn't have the parameter "options". What kind of objects are scanned by cl_scanbuff ? Memory buffers. This needs no "options", as it is s

  1   2   3   >