http://oss.netfarm.it/clamav/
-Original Message-
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Gary
Steiner
Sent: Wednesday, November 24, 2010 12:32 PM
To: declude.virus@declude.com
Subject: [Declude.Virus] ClamAv / ClamWin with Declude
What version or port of ClamA
lf Of Matt
Sent: Thursday, April 29, 2010 6:05 PM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] ClamAV
Michael,
I created a step-by-step guide a little over a year ago for the proper
installation. It's pretty simple to do. I can't say however if the steps
have changed i
Michael Cummins
*From:* supp...@declude.com [mailto:supp...@declude.com] *On Behalf Of
*Andy Schmidt
*Sent:* Thursday, April 29, 2010 3:14 PM
*To:* declude.virus@declude.com
*Subject:* RE: [Declude.Virus] ClamAV
There really is no need for ClamAid, because the recent builds
(including oss.netfarm.i
t
General and Non-Emergency support ticket:
https://www.skywaves.com/content/secure/support_ticket.htm
From: "Michael Cummins"
Sent: Thursday, April 29, 2010 3:02 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] ClamAV
In case
a trail here in the archives in
case it helps someone else. :)
- Michael Cummins
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Andy
Schmidt
Sent: Thursday, April 29, 2010 3:14 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] ClamAV
There real
Virus.cfg, ClamAid
probably makes things unnecessary complicated...
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Michael
Cummins
Sent: Thursday, April 29, 2010 2:50 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] ClamAV
In case this is helpful for someone
In case this is helpful for someone else that isn't so great at rolling
their own Clams from the source code:
First, I installed ClamAID using the default options. (SmarterMail /
Declude install for me)
http://www.armresearch.com/tools/arm/clamAID.jsp
This installs Clam 0.92, wraps it
- to integrate the ClamLib and
eliminate any command line needs).
Best Regards,
Andy
-Original Message-
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Cert
Sent: Wednesday, April 28, 2010 7:26 PM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] ClamAV
Hello!
Hello!
The "sherpya" Clam port at oss.netfarm.it is very easy to build and use,
and there are only about 10 lines of code in 2 or 3 modules where you
need to add a "VirusName->" prefix before the actual name of the virus
so Declude can pick it up in the report file. I just mod the code and
re
Generally, ClamD catches most viruses that AVG misses (during those times
when it actually runs), and McAfee catches the occasional virus that ClamD
misses. ClamD downloads updates automatically (using the FreshClam).
I found the http://oss.netfarm.it/clamav build very useful. I don't recall
an
Andy, I must be blind as I try to install this ... I looked at the
link below, and found multiple versions, but none of them have an
installer ... are you installing the ClamWin version and not the
versions are oss.netfarm.it ??? When I take about the archive, I
find all of the files, but
Hi David:
The best is http://oss.netfarm.it/clamav - because it's the same one ClamWin
is using and it's kept up-to-date. I don't recall any installation
difficulty. It did have a successful installer and is able to install itself
as a service.
There is a .REG file that sets up a registry entry w
had
> success with http://www.clamwin.com/ ?
>
>
>
>
> Original Message
> > From: "Scott Fisher"
> > Sent: Monday, December 29, 2008 7:39 AM
> > To: declude.virus@declude.com
> > Subject: RE: [Declude.Virus] ClamAv
> From: "Scott Fisher"
> Sent: Monday, December 29, 2008 7:39 AM
> To: declude.virus@declude.com
> Subject: RE: [Declude.Virus] ClamAv with Declude
>
> I use the runclamscan program to call clamav. Here's my virus.cfg lines
>
> SCANFILE1 c:\clamav\runcla
I use the runclamscan program to call clamav. Here's my virus.cfg lines
SCANFILE1 c:\clamav\runclamscan.exe log=1 C:\clamav\clamdscan.exe --quiet -l
report.txt
VIRUSCODE1 1
REPORT1 FOUND
-Original Message-
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David
Dodell
Se
On Dec 28, 2008, at 10:28 AM, David Dodell wrote:
(2) In my virus.cfg I have
scanfile c:\imail\declude\clamav\clamdscan.exe --quiet -l report.txt
viruscode 1
report FOUND
(3) In my logs it reports
Could Not Parse String FOUND in report.txt
Error 2 in virus scanner 1
Scanned: Error in Virus
I've been using the SOSDG version of ClamAV (http://www.sosdg.org/clamav-win32)
with no problem. The is the same version/port of ClamAV that SmarterMail ships
with their product.
The trick is setting it up to run as a service with runclamscan and runclamd.
These are included with ClamAV in th
I had this same problem and had to stop using clam. I believe someone said that
it was a problem with that version of clam. I don't remember what the fix for
it was' but would be interested to know as well.
Jared
(from my phone)
-Original Message-
From: "Imail Admin" <[EMAIL PROTECTED]>
I'm using the SOSDG port which is currently at version 0.90.3-3c and have not
encountered the problem you describe. Then again, I'm also using SmarterMail,
so don't know if this may be an IMail compatibility problem.
Original Message
> From: "John Shacklett" <[EMAIL PROTECTED
John,
I dropped ClamWin 0.90 a month or so ago due to similar performance issues.
George
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John
> Shacklett
> Sent: Tuesday, June 26, 2007 8:11 AM
> To: Declude.Virus@declude.com
> Subject: [Declude.Virus
; <[EMAIL PROTECTED]>
> Sent: Wednesday, April 25, 2007 8:33 PM
> To: declude.virus@declude.com
> Subject: RE: [Declude.Virus] ClamAV lstat() failed. ERROR
>
> Gary,
>
> I'm not sure I understand your point.
>
> What you define in Virus.cfg, e.g.:
>
&g
Gary,
I'm not sure I understand your point.
What you define in Virus.cfg, e.g.:
SCANFILEC:\Progra~1\Common~1\Networ~1\Engine\SCAN.EXE /LOAD
D:\IMAIL\Declude\SCAN.CFG
is only the START of the command line, to which Declude appends the full
path for the file it tries to scan.
So, if you de
Gary,
In order to scan the file I am sure Declude has to append the path to the
files to scan otherwise how would the virus scanner know what to scan? It
needs some type of path. Unless possibly it sets a working directory and
expects the scanner to scan all the files in the working directory
o: declude.virus@declude.comSubject: RE: [Declude.Virus] ClamAV 0.90.1-2 problemsA new version (0.90.1-3) was posted on the SOSDG web site.
Bri Bruns told me that the --mbox parameter no longer works, so you should
remove it from the line in your virus.cfg file before installing 0.90.1-3.
Gary
[EMAIL PROTECTED]>
> Sent: Tuesday, March 13, 2007 3:13 PM
> To: declude.virus@declude.com
> Subject: RE: [Declude.Virus] ClamAV 0.90.1-2 problems
>
> The following was just posted to clamav-announce:
>
>
>
> Original Message
> > From: "B
The following was just posted to clamav-announce:
Original Message
> From: "Bri Bruns" <[EMAIL PROTECTED]>
> Sent: Tuesday, March 13, 2007 2:43 PM
> To: [EMAIL PROTECTED]
> Subject: [clamav-announce] Problems with ClamAV/SOSDG For WIndows 0.90.1-1
> and -2
>
> Okay, been gett
rsion corrects some build problems and incorrect
linkage to cygclamav1.dll by clamd."
Gary
Original Message
> From: "Mark Reimer" <[EMAIL PROTECTED]>
> Sent: Tuesday, March 13, 2007 11:21 AM
> To: declude.virus@declude.com
> Subject: RE: [D
-6887
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick
Hayer
Sent: Tuesday, March 13, 2007 8:01 AM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] ClamAV 0.90.1-2 problems
Exit code of 2 means ClamAV had an error - Is clamd running? will
Exit code of 2 means ClamAV had an error - Is clamd running? will
clamdscan.exe work? eg no parameters?
-Nick
Gary Steiner wrote:
Ever since I upgraded to ClamAV 0.90.1-2 (the SOSDG windows port), I've been
unable to get it to work. The Declude log files show an error like this:
03/12/2007
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
> Behalf Of george kulman
> Sent: Friday, September 29, 2006 6:06 PM
> To: declude.virus@declude.com
> Subject: RE: [Declude.Virus] ClamAV Exit codes
>
>
> Strange. It sounds like a reso
0:58 AM
> To: declude.virus@declude.com
> Subject: RE: [Declude.Virus] ClamAV Exit codes
>
> Thank you
>
> The strange thing is that the error doesn't appeared constantly at a
> certain
> point. At 06:50PM there was the first dozen result codes 2. Then the next
> one
de.com
> Subject: RE: [Declude.Virus] ClamAV Exit codes
>
>
> Markus,
>
> Here are the Return Codes from the ClamAV Documentation.
>
> George
>
> >From http://www.clamav.net/doc/0.88.4/man/clamdscan.1
>
> .SH "RETURN CODES"
> .LP
> 0
Markus,
Here are the Return Codes from the ClamAV Documentation.
George
>From http://www.clamav.net/doc/0.88.4/man/clamdscan.1
.SH "RETURN CODES"
.LP
0 : No virus found.
.TP
1 : Virus(es) found.
.TP
2 : An error occured.
>From http://www.clamav.net/doc/0.88.4/man/clamscan.1
.SH "RETURN COD
> Failure I do believe, probably ClamD is not running?
Correct. Thank you.
Markus
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive
Failure I do believe, probably ClamD is not running?
-Nick
Markus Gufler wrote:
Does anyone know what exit codes ClamAV has and what they mean?
>From 2006-09-27 06:50PM on I can see a huge number of
"Virus scanner 2 reports exit code of 2"
...in the virus-logfile.
Markus
---
This E-mail
Well since you noticed it and I am setting up a new serverI will try
it tomorrow.
Goran Jovanovic
Omega Network Solutions
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
> Darrell ([EMAIL PROTECTED])
> Sent: Sunday, July 30, 2006 9:18 PM
> To:
Only if he is running an older version of Declude, which does not include
the built-in AVG scanner, which runs as scanner 0.
Bill
- Original Message -
From: "Goran Jovanovic" <[EMAIL PROTECTED]>
To:
Sent: Friday, July 14, 2006 12:13 PM
Subject: RE: [Declude.Virus] Cla
AVG is my first one (it's everybody's first one, it's built in).
Original Message
> From: "Goran Jovanovic" <[EMAIL PROTECTED]>
> Sent: Friday, July 14, 2006 3:26 PM
> To: declude.virus@declude.com
> Subject: RE: [Declude.Virus] Cla
Gary,
You said CLAM was your third AV yet your config shows it is your second
one
SCANFILE2 C:\SmarterMail\Declude\Scanners\runclamscan.exe log=1
C:\clamav-devel\bin\clamdscan.exe --quiet --mbox --max-ratio 0
--max-space 1M -l report.txt
VIRUSCODE2 1
REPORT2 FOUND
Change the SCANFILE2, VIRUSCODE
& Computer Services
519-741-1222
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand
> Sent: Thursday, March 09, 2006 3:22 PM
> To: Declude.Virus@declude.com
> Subject: RE: [Declude.Virus] ClamAV leaving locked fil
Vanderzand
inTown Internet & Computer Services
519-741-1222
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand
> Sent: Wednesday, March 08, 2006 1:35 PM
> To: Declude.Virus@declude.com
> Subject: RE: [Declude.Vi
Me too!
I have the same issue and have been trying to figure out what's going on
Harry Vanderzand
inTown Internet & Computer Services
519-741-1222
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Ken Weise
> Sent: Wednesday, March 08, 2006 1:
Very similiar problem here.
I have a vir folder left over with a filename of "0".
Imail 8.22 , clamav 0.88-2 (SOSDB Cygwin version), Declude 3.06.
Using runclamd and runclamscan wrapper
- Original Message -
From: "Ken Weise" <[EMAIL PROTECTED]>
To:
Sent: Wednesday, March 08, 2006 12:2
Andrew:
After the post I did the same and it is working great. I have done
as Scott has stated.
I review all the messages and none of our Declude filters are being
triggered anymore. All the phishing attempts used to get caught by our
filters.. with ClamAV and the phish.ndb all are bein
at it only took about 15
minutes to get it working with a scheduled task to update itself.
- Original Message -
From:
Colbeck,
Andrew
To: Declude.Virus@declude.com
Sent: Wednesday, March 01, 2006 2:46
PM
Subject: RE: [Declude.Virus] ClamAV &
sanesecurity definitio
l Message -
From:
Colbeck,
Andrew
To: Declude.Virus@declude.com
Sent: Wednesday, March 01, 2006 2:15
PM
Subject: RE: [Declude.Virus] ClamAV
& sanesecurity definitions
Scott,
Are you running ClamAV with the SaneSecurity
antiphishing
@declude.com
Sent: Wednesday, March 01, 2006 2:15
PM
Subject: RE: [Declude.Virus] ClamAV &
sanesecurity definitions
Scott,
Are you running ClamAV with the SaneSecurity antiphishing
signatures as an external spam test in Declude Pro, or as an antivirus engine
in Declude Virus
Scott,
Are you running ClamAV with the SaneSecurity antiphishing
signatures as an external spam test in Declude Pro, or as an antivirus engine in
Declude Virus Pro?
Andrew 8)
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Scott
FisherSent: Wednesday, Ma
: Friday, February 17, 2006 10:34 PM
Subject: Re: [Declude.Virus] ClamAV Footer ...
Who is Sandy, and how can I get in touch with her?
Matt wrote:
Andrew,
There is no native capability to do this dynamically. Adding a footer is
also a difficult task since it must be integrated properly and
sel
Who is Sandy, and how can I get in touch with her?
Matt wrote:
Andrew,
There is no native capability to do this dynamically. Adding a footer
is also a difficult task since it must be integrated properly and
selectively into multiple MIME segments, and without breaking certain
types of messa
Andrew,
There is no native capability to do this dynamically. Adding a footer
is also a difficult task since it must be integrated properly and
selectively into multiple MIME segments, and without breaking certain
types of messages that rely on strict formating (such as calendaring).
Sandy
If so, that's one to add to the Declude Virus manualScott?
Matt
Scott Fisher wrote:
Try adding this to your command line:
--max-ratio 0
The support compression ratio feature (--max-ratio). Overly compressed files
may get falsely detected. I believe the 0 turns it off.
it worked for
Try adding this to your command line:
--max-ratio 0
The support compression ratio feature (--max-ratio). Overly compressed files
may get falsely detected. I believe the 0 turns it off.
it worked for me.
- Original Message -
From: "Hirthe, Alexander" <[EMAIL PROTECTED]>
To:
Sent: Thursda
Manually perform the scan, and look @ the report.txt file.
- Original Message -
From: "Hirthe, Alexander" <[EMAIL PROTECTED]>
To:
Sent: Thursday, February 17, 2005 12:34 PM
Subject: [Declude.Virus] ClamAV?
Hello,
I'm getting errors with Zip Files larger than about 10 MB.
In the virus.lo
I just received the folloing from the Clam list - there appears to be
an issue with UDP ports and cygwin
-Nick
On 6 Dec 2004 at 9:24, Brian Bruns wrote:
From: "Brian Bruns" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Date sent: Mon, 6 Dec 200
For those that use ClamAV the latest ver appears to be Nov20 - I had
the Oct24 ver which would randomly crash - in this latest ver in the
release notes there is reference to fixing this
-Nick Hayer
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-ma
That's why I trying it out. I'm still trying to figure a few things out. I can
say that Clam updated and caught things quick today. Their virus updates came
out before F-Prot did. I still like F-Prot so that's why I'm just watching for
now.
Jeff Kratka
-- Original Message -
Running ClamAV under cygwin? Wow, that seems like a horrible performance
hit on any type of high volume mail server.
Jonathan
At 06:22 PM 11/19/2004, you wrote:
Sorry, I figured it out...
Thanks
Jeff Kratka
TymeWyse Internet
P.O.Box 84 - 110 Ecklun
Sorry, I figured it out...
Thanks
Jeff Kratka
TymeWyse Internet
P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417
tel/fax: (541) 839-6027 - [EMAIL PROTECTED]
-Original Message-
From: [E
someone mentioned yesterday.
John
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Matt
Sent: Tuesday, November 16, 2004
10:21 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus]
ClamAV scan time
Terry,
Maybe if you could clarify. You are running ClamAV in
Terry,
Maybe if you could clarify. You are running ClamAV in daemon mode, am
I correct?
My point was that as of several months ago, the non-daemon installation
was a processor hog and took a lot of time compared to F-Prot, the best
performing scanner. Things might have changed since then.
> ClamAV when not run in daemon mode is very slow in comparison to other
> virus scanners. If your server is getting pushed to it's limits, the
> first sign will likely be their vir directories piling up as a result of
> ClamAV not finishing within the specified time configured in Declude Virus
On 15 Nov 2004 at 16:44, John Carter wrote:
I have had some issues as well. I edited clamd.conf with so far non-
detrimental results..
I changed
ReadTimeout 40 [120]
MaxConnectionQueueLength 50 [30]
MaxThreads 30 [10]
I wanted to change this setting but was unclear if it referred to
time or
ClamAV when not run in daemon mode is very slow in comparison to other
virus scanners. If your server is getting pushed to it's limits, the
first sign will likely be their vir directories piling up as a result of
ClamAV not finishing within the specified time configured in Declude Virus.
I pla
I have noticed this problem with large files, usually TIFFs.
No solutions though...
-- Original Message --
From: "John Carter" <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Date: Mon, 15 Nov 2004 16:44:35 -0600
>Has anyone using ClamAV had problems with
On a related topic, during my testing I found that while I was logged into
my server with pcANYWHERE instead of Terminal Services, I kept seeing CMD
windows pop up when AVG was scanning despite the /silent switch. I don't
ever recall seeing that before, but it's rare that I log in with
pcANYW
Thanks for the explanation. I was hoping for something miraculous that
might be of benefit, but it looks like Declude does all of this already.
On a related topic, during my testing I found that while I was logged
into my server with pcANYWHERE instead of Terminal Services, I kept
seeing CMD
I've spent another few hours playing around with this and when I call
things correctly by starting clamd.exe and then configured Declude to
run clamdscan.exe, the scan times went from 1 second to between 0.08
seconds up to 0.6 seconds across about a dozen scans. I also tracked
this in performa
> There isn't. The problem is that ClamAV doesn't report the virus name in
> the standard format. We are, however, looking into finding a way
> around this.
There's a standard format? Can I get a copy of the standard? ClamAV is
open source so it might be easier to submit a fix to the source th
> There isn't. The problem is that ClamAV doesn't report the virus name in
> the standard format. We are, however, looking into finding a way
> around this.
There's a standard format? Can I get a copy of the standard? ClamAV is
open source so it might be easier to submit a fix to the source th
Are the settings for ClamAV in the Declude Virus Manual complete?
Yes, but:
SCANFILE
C:\clamav-devel\bin\clamscan.exe --quiet --log-verbose --no-summary -l
report.txt
VIRUSCODE 1
I would have thought there would be a REPORT line.
There isn't. The problem is that ClamAV doesn't report the virus n
Have you considered adding the ClamAV to the list of scanners on your site?
We should have it there soon. :)
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Catches known viruses and
ck Frolick
ArgoLink.net
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Terry Fritts
Sent: Sunday, February 29, 2004 3:25 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] clamav
Update on ClamAV
Got the "freshclam" updater working.
Pretty simple actual
Update on ClamAV
Got the "freshclam" updater working.
Pretty simple actually. Just browse one of the mirrors for the db
updates - see http://www.clamav.net/mirrors.html for a list -
Pick one of them - say - http://clamav.sonic.net/database/ -
download the .md5 files to your virus db folder
(eg
74 matches
Mail list logo
