Re: [Clamav-users] Outdated Engine warning suppress

2008-10-16 Thread veselin
Thanks for the input. Veselin On Wed, Oct 15, 2008 at 09:58:19AM -0400, Charles Gregory wrote: Veselin@ wrote: I'm running Debian in a production environment, I cannot afford using the volatile repository, On Wed, 15 Oct 2008, Bowie Bailey wrote: Either install it from volatile, build

Re: [Clamav-users] Announcing ClamAV 0.94.1 RC1

2008-10-16 Thread Steve Basford
For details of the new features please refer to the Changelog. For an overview please refer to http://www.clamav.net/press/0.94.1-WhatsNew.pdf. Nigel, does the stats sent... only send information regarding ClamAV default signatures (when detected)... or does this also include detections by

Re: [Clamav-users] Announcing ClamAV 0.94.1 RC1

2008-10-16 Thread Randal, Phil
Steve Basford wrote: For details of the new features please refer to the Changelog. For an overview please refer to http://www.clamav.net/press/0.94.1-WhatsNew.pdf. Nigel, does the stats sent... only send information regarding ClamAV default signatures (when detected)... or does this

Re: [Clamav-users] Announcing ClamAV 0.94.1 RC1

2008-10-16 Thread Tomasz Kojm
On Thu, 16 Oct 2008 13:43:12 +0100 Randal, Phil [EMAIL PROTECTED] wrote: I haven't had the time to check the source code. How does it send it? What protocol and port, to which servers? Anything that firewall admins will need to be aware of? It sends information about a file name, malware

Re: [Clamav-users] Announcing ClamAV 0.94.1 RC1

2008-10-16 Thread Randal, Phil
Tomasz Kojm wrote: On Thu, 16 Oct 2008 13:43:12 +0100 Randal, Phil [EMAIL PROTECTED] wrote: I haven't had the time to check the source code. How does it send it? What protocol and port, to which servers? Anything that firewall admins will need to be aware of? It sends information

[Clamav-users] Errors building ClamAV 0.94.1 RC1

2008-10-16 Thread Jason Bertoch
In configure, I see bzlib warnings that aren't present in 0.94. (./configure --prefix=/usr --sysconfdir=/etc --enable-milter) 0.94: checking bzlib.h usability... yes checking bzlib.h presence... yes checking for bzlib.h... yes checking for CVE-2008-1372... ok 0.94.1 RC1: checking bzlib.h

Re: [Clamav-users] Errors building ClamAV 0.94.1 RC1

2008-10-16 Thread Nigel Horne
In configure, I see bzlib warnings that aren't present in 0.94. (./configure --prefix=/usr --sysconfdir=/etc --enable-milter) Jason, Please file a bug report at bugs.clamav.net. Thanks, -Nigel ___ Help us build a comprehensive ClamAV

Re: [Clamav-users] Virus in main.ndb?

2008-10-16 Thread Uwe Kiewel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Markus Egg schrieb: I am using clamav 0.94. I copied /usr/local/share/clamav to /usr/local/share/clamav15102008 because there were problems in getting the newest database today. Then I checked /usr/local/share/clamav15102008 with Avira

Re: [Clamav-users] Announcing ClamAV 0.94.1 RC1

2008-10-16 Thread Nigel Horne
Folks, 0.94.1 RC1 was published on schedule yesterday. For details of the new features please refer to the Changelog. For an overview please refer to http://www.clamav.net/press/0.94.1-WhatsNew.pdf. We encourage as many people as possible to test this release candidate by downloading it from

Re: [Clamav-users] Announcing ClamAV 0.94.1 RC1

2008-10-16 Thread Tomasz Kojm
On Thu, 16 Oct 2008 13:20:27 +0100 (BST) Steve Basford [EMAIL PROTECTED] wrote: For details of the new features please refer to the Changelog. For an overview please refer to http://www.clamav.net/press/0.94.1-WhatsNew.pdf. Nigel, does the stats sent... only send information regarding

[Clamav-users] solaris10 crashes in cli_ole2_extract with 0.94

2008-10-16 Thread Hans Morten Kind
When vba-detection in libclamav/ole2_extract.c was implemented in 0.93.1, our solaris servers started dumping cores. We are experiencing the same behavour with simple .doc-files also on 0.94 and the latest devel-release. hdr.m_area is memcpy'd to hdr with hdr_size in the entry of

Re: [Clamav-users] Announcing ClamAV 0.94.1 RC1

2008-10-16 Thread Dennis Peterson
Tomasz Kojm wrote: On Thu, 16 Oct 2008 13:43:12 +0100 Randal, Phil [EMAIL PROTECTED] wrote: I haven't had the time to check the source code. How does it send it? What protocol and port, to which servers? Anything that firewall admins will need to be aware of? It sends information

Re: [Clamav-users] solaris10 crashes in cli_ole2_extract with 0.94

2008-10-16 Thread Hans Morten Kind
On Thu, Oct 16, 2008 at 11:21:25AM -0600, [EMAIL PROTECTED] wrote: Hans Morten Kind wrote: When vba-detection in libclamav/ole2_extract.c was implemented in 0.93.1, our solaris servers started dumping cores. We are experiencing the same behavour with simple .doc-files also on 0.94 and the

Re: [Clamav-users] solaris10 crashes in cli_ole2_extract with 0.94

2008-10-16 Thread kwijibo
Hans Morten Kind wrote: On Thu, Oct 16, 2008 at 11:21:25AM -0600, [EMAIL PROTECTED] wrote: Hans Morten Kind wrote: When vba-detection in libclamav/ole2_extract.c was implemented in 0.93.1, our solaris servers started dumping cores. We are experiencing the same behavour with simple .doc-files

Re: [Clamav-users] solaris10 crashes in cli_ole2_extract with 0.94

2008-10-16 Thread Török Edwin
On 2008-10-16 19:57, Hans Morten Kind wrote: When vba-detection in libclamav/ole2_extract.c was implemented in 0.93.1, our solaris servers started dumping cores. We are experiencing the same behavour with simple .doc-files also on 0.94 and the latest devel-release. hdr.m_area is memcpy'd to

Re: [Clamav-users] solaris10 crashes in cli_ole2_extract with 0.94

2008-10-16 Thread Hans Morten Kind
On Thu, Oct 16, 2008 at 10:29:02PM +0300, Török Edwin wrote: Please open a bug on bugs.clamav.net, and attach your gdb backtrace. Also please attach one sample that reproduce the bug to the bugzilla. Thanks for your prompt and friendly reply. I will open an issue when I have cleaned out our

Re: [Clamav-users] Announcing ClamAV 0.94.1 RC1

2008-10-16 Thread Matthias Häker
up and running in 5m on FreeBSD 4.8 :-) +++ Started at Thu Oct 16 21:48:29 2008 Thu Oct 16 21:48:29 2008 - clamd daemon 0.94.1rc1 (OS: freebsd4.8, ARCH: i386, CPU: i386) Thu Oct 16 21:48:29 2008 - Running as user clamav (UID 1028, GID 1001) freshclam.conf + # When enabled freshclam will

Re: [Clamav-users] solaris10 crashes in cli_ole2_extract with 0.94

2008-10-16 Thread kwijibo
Hans Morten Kind wrote: setenv CC /opt/SUNWspro/bin/cc -m64 setenv LDFLAGS -L/opt/lib/64 -R/opt/lib/64 -lz -lgmp -L/lib/64 -R/lib/64 -L/usr/lib/64 -R/usr/lib/64 setenv CFLAGS -xO2 -g Hrmm. I just let the configure script find the libs and I used gcc to compile. So pretty much I just

Re: [Clamav-users] announcing ClamAV 0.94.1rc1

2008-10-16 Thread sydz
Luca Gibelli writes: Dear ClamAV users, ClamAV 0.94.1rc1 has been released. gcc 4.0.1 caused configuration failure with PR bug 28045 Bypassed with CFLAGS='O0' and installed successfully on Macintosh PowerPC G4 (10.4.11). make check returned the following: make check-TESTS *** Unit

Re: [Clamav-users] False positive? PUA.Script.Packed-1

2008-10-16 Thread Kelson
Tony Finch wrote: I've advised the user to email links instead of whole pages, but I'm wondering why jQuery is classed as a PUA - is this deliberate or is it a false positive? I think PUA indicates Potentially Unwanted (something) -- basically code or tools that have legitimate uses, but

Re: [Clamav-users] Announcing ClamAV 0.94.1 RC1

2008-10-16 Thread Dennis Peterson
Nigel Horne wrote: Folks, 0.94.1 RC1 was published on schedule yesterday. Built fine but installed with errors on Solaris 9. Solaris has obsoleted ranlib but has a stub file, /usr/ccs/bin/ranlib. Configure found it and of course it failed. I renamed it and clamav built and installed fine.

Re: [Clamav-users] Announcing ClamAV 0.94.1 RC1

2008-10-16 Thread Stephen Gran
On Thu, Oct 16, 2008 at 03:51:32PM -0700, Dennis Peterson said: Running diff on the new config files and old config files did not reveal any new options. Freshclam has one new option, disabled by default - fairly harmless for upgrades, but useful for redistributors to note if they handle that

Re: [Clamav-users] Announcing ClamAV 0.94.1 RC1

2008-10-16 Thread Dennis Peterson
Stephen Gran wrote: On Thu, Oct 16, 2008 at 03:51:32PM -0700, Dennis Peterson said: Running diff on the new config files and old config files did not reveal any new options. Freshclam has one new option, disabled by default - fairly harmless for upgrades, but useful for redistributors to

Re: [Clamav-users] Announcing ClamAV 0.94.1 RC1

2008-10-16 Thread John Rudd
Tomasz Kojm wrote: Freshclam also submits information about detections with 3rd party signatures. We only have one host in our environment that does freshclam (or any of the other virus signature update mechanisms). It verifies the validity of the data (makes sure nothing will die as a

Re: [Clamav-users] Announcing ClamAV 0.94.1 RC1

2008-10-16 Thread René Berber
Nigel Horne wrote: 0.94.1 RC1 was published on schedule yesterday. [snip] Has anyone seen a problem testing with the contents of test/.split? In particular 'clamscan test/.split/split.clam.exe.htmlaa' just holds the CPU at 100% for a long time... I've killed it on two runs. -- René Berber

Re: [Clamav-users] Announcing ClamAV 0.94.1 RC1

2008-10-16 Thread Bill Maidment
On Thu, 16 Oct 2008 17:41:50 -0700, John Rudd wrote Tomasz Kojm wrote: Freshclam also submits information about detections with 3rd party signatures. We only have one host in our environment that does freshclam (or any of the other virus signature update mechanisms). Same here.