[clamav-users] Win.Trojan.URLspoof-2 signtuare and WARC files

2016-12-19 Thread Jay Gattuso
Win.Trojan.URLspoof-2 We’re encountering some issues with this particular “virus”, and having worked through what we’re seeing, I wanted to ask a couple of questions.. The signature is pretty weak. [main.ndb] Win.Trojan.URLspoof-2:0:*:20687265663d22*0125303040*223e*3c2f We’ve seen hits against

Re: [clamav-users] Win.Trojan.URLspoof-2 signtuare and WARC files

2016-12-19 Thread Al Varnell
One correction to the Group 2 signature, it's just '%00@'. The only available method for having a signature removed or modified is by submitting one or more False Positives at and include the details you have covered below. If you would like to be notified

Re: [clamav-users] No notice of OLE2.ContainsMacros

2016-12-19 Thread Mark Foley
Ah ha! Some progress: # First, I'll extract the attachment: $ ripmime -v -i /var/spool/mqueue/dfuBJBh64e020058 Decoding filename=textfile0 Decoding filename=textfile1 Decoding filename=Payslip_Dec_2016_84286914.doc # try vanilla clamscan (nothing found): $ clamscan Payslip_Dec_2016_84286914.doc

Re: [clamav-users] No notice of OLE2.ContainsMacros [OT]

2016-12-19 Thread Matteo Dessalvi
Mark, I believe it was not a suggestion. It often happens here that a user which want to unsubscribe {him,her}self from the ClamAV mailing list just reply to whatever message is crossing the list, asking to be 'unsubscribed'. Best regards, Matteo On 12/19/2016 04:05 PM, Mark Foley wrote:

Re: [clamav-users] No notice of OLE2.ContainsMacros [OT]

2016-12-19 Thread Mark Foley
Well, *that's* confusing! I suppose if I hadn't changed the subject line back to my original subject my reply might have unsubscribed be as well. Thanks for the clarification. --Mark -Original Message- To: From: Matteo Dessalvi Date:

[clamav-users] No notice of OLE2.ContainsMacros

2016-12-19 Thread Mark Foley
Please elaborate a bit on your suggestion "unsubscrib". I don't understand. --Mark -Original Message- Date: Mon, 19 Dec 2016 08:57:44 -0500 (EST) From: "ca...@toursupply.com" To: "ClamAV users ML" Subject: [clamav-users] unsubscribe

Re: [clamav-users] No notice of OLE2.ContainsMacros [OT]

2016-12-19 Thread Matteo Dessalvi
Sorry, I forgot to add: you cannot unsubscribe from the list just by sending an email and adding in the body the word 'unsubscribe'. The process involves sending an email to "clamav-users-requ...@lists.clamav.net" with the subject: unsubscribe Well, you can also use the web interface:

Re: [clamav-users] Porting LibClamAV for Android

2016-12-19 Thread Al Varnell
Perhaps you would find more interest on the clamav-devel list than here where most of us are users. -Al- On Dec 19, 2016, at 4:42 AM, crazy thinker wrote: > Hi > > > I have heard that a lot of open

Re: [clamav-users] Porting LibClamAV for Android

2016-12-19 Thread G.W. Haywood
Hi there, On Mon, 19 Dec 2016, crazy thinker wrote: ... could anyone of you please help ... https://en.wikipedia.org/wiki/Android_%28operating_system%29#Technical_security_features On Mon, 19 Dec 2016, Al Varnell wrote: Perhaps you would find more interest on the clamav-devel list He's

[clamav-users] Porting LibClamAV for Android

2016-12-19 Thread crazy thinker
Hi all, I am new to android and ndk build .i am planning to use libclamav in my ndk project could anyone of you please help me to build libclamav for android Thanks Crazy Thiner Inc. ___ clamav-users mailing list clamav-users@lists.clamav.net

Re: [clamav-users] Porting LibClamAV for Android

2016-12-19 Thread Al Varnell
You asked a similar question on November 22nd with one response from Noel Jones: > I doubt running clam on an android device would be useful due to the > resources required. Maybe a fun time-waster though, just to see > what happens. There's several free and apparently competent > antivirus

Re: [clamav-users] No notice of OLE2.ContainsMacros

2016-12-19 Thread David Shrimpton
> $ clamscan -a -v -z --block-macros=yes /var/spool/mqueue/dfuBJBh64e020058 > Scanning /var/spool/mqueue/dfuBJBh64e020058 > /var/spool/mqueue/dfuBJBh64e020058: OK The dfuBJBh64e020058 file looks like a sendmail queue datafile, in which case it would have no email headers and contain only mime

[clamav-users] No notice of OLE2.ContainsMacros

2016-12-19 Thread Mark Foley
Before I submit a bug report on this, I thought I'd see if any list members have ideas. I'm running clamav 0.99.2 on Linux Slackware64 14.1. I'm running clamav-milter for sendmail. I have "OLE2BlockMacros yes" set in /usr/local/etc/clamd.conf. This is working fine, I get: fd[10]:

[clamav-users] unsubscribe

2016-12-19 Thread ca...@toursupply.com
unsubscribe -Original Message- From: "Mark Foley" Sent: Monday, December 19, 2016 8:36am To: clamav-users@lists.clamav.net Subject: [clamav-users] No notice of OLE2.ContainsMacros Before I submit a bug report on this, I thought I'd see if any list members have

[clamav-users] the problem of endless loop

2016-12-19 Thread Tsutomu Oyamada
Hi, all. I have a question about the error which is caused by the shotage of the size acquired by mpool_malloc function on clamd version 0.97.8. the message: mpool_malloc(): Attempt to allocate 8388608 bytes. Please report to http://bugs.clamav.net This error does not exist in version 0.98

Re: [clamav-users] the problem of endless loop

2016-12-19 Thread Al Varnell
See How to Report a Bug and then file at Bugzilla . -Al- On Mon, Dec 19, 2016 at 03:56 PM, Tsutomu Oyamada wrote: > > Hi, all. > > I have a question about the error which is caused by the shotage of the size

Re: [clamav-users] Porting LibClamAV for Android

2016-12-19 Thread crazy thinker
Hi I have heard that a lot of open surce libraries (in c/c++) ported to android using ndk-build tool and would like to get help from ClamAV Developers to build clamav from source for android platform. it would be so useful if we build liblcamav.so for android. and we can see ClamAV mobile app

Re: [clamav-users] Porting LibClamAV for Android

2016-12-19 Thread crazy thinker
i still don't understand that why clamav developers not intersted in this? ' On 19 December 2016 at 18:12, crazy thinker wrote: > Hi > > > I have heard that a lot of open surce libraries (in c/c++) ported to > android using ndk-build tool and would like to get

Re: [clamav-users] Porting LibClamAV for Android

2016-12-19 Thread Bengt H.
Skickat från min iPhone > 19 dec. 2016 kl. 13:48 skrev crazy thinker : > > i still don't understand that why clamav developers not intersted in > this? ' > > On 19 December 2016 at 18:12, crazy thinker > wrote: > >> Hi >> >> >> I have

Re: [clamav-users] Porting LibClamAV for Android

2016-12-19 Thread Bengt H.
Unsubscribe please Skickat från min iPhone > 19 dec. 2016 kl. 13:48 skrev crazy thinker : > > i still don't understand that why clamav developers not intersted in > this? ' > > On 19 December 2016 at 18:12, crazy thinker > wrote: > >> Hi

Re: [clamav-users] Porting LibClamAV for Android

2016-12-19 Thread Ralf Hildebrandt
* Bengt H. : > Unsubscribe please List-Unsubscribe: , -- Ralf Hildebrandt Charite Universitätsmedizin Berlin ralf.hildebra...@charite.deCampus Benjamin Franklin http://www.charite.de