Re: [clamav-users] CAN DETECT THIS VIRUS???
is posible to user amavisd from commandline like clamscan??? ie: clamscan /home/email/filemail.0.0 Thanks - Original Message - From: "Nicholas Chua" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, July 14, 2003 11:27 AM Subject: Re: [clamav-users] CAN DETECT THIS VIRUS??? > >Anybody can detect this virus using clamscan command >line? > > This virus is Worm.Sobig.C which is already detected by ClamAV. You might be > interested in amavisd-new. > > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [clamav-users] CAN DETECT THIS VIRUS???
One suggestion: Next time, put the archive on Net, and give us the only link to get it. So, who wants to experience go there... ;-) Mário. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [clamav-users] CAN DETECT THIS VIRUS???
On Monday 14 July 2003 10:46 am, Jordi Escolá (Desarrollo) wrote: > ¿?¿?. yes... and the PROBLEM is that clamav NO DETECTS the virus... you > undestand? Yes, we understand. Please send a copy of the infected file (extracted from the rest of the email which you posted to the list) to [EMAIL PROTECTED] and it will be added to the dabatase. That should keep everyone happy. Thank you, Antony. -- 90% of network problems are routing problems. 9 of the remaining 10% are routing problems in the other direction. The remaining 1% might be something else, but check the routing anyway. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [clamav-users] CAN DETECT THIS VIRUS???
mmm... this virus attached is IMPOSIBLE that INFECTED any user... because is in a file format that not is executable and.. i think that this list is for this reason.. to test "CLAMSCAN"... or NOT? > - Original Message - > From: <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Cc: <[EMAIL PROTECTED]> > Sent: Monday, July 14, 2003 10:13 AM > Subject: Re: [clamav-users] CAN DETECT THIS VIRUS??? > > > > Please stop to post any viruses to the list! I've (we) enough trouble in > > real life with viruses, spammer, attacks and cyberkids. > > And finaly: ... everybody who subscribe the clamav-users-list have a > > working virus-scanner (hope so ?!). > > > > TNX to all, who understand me and have the same problem to find the end of > > the mailbox ... > > > > regards > > > > Juergen Frost > > > > -- > > r.z.w. cimdata AG > > Zum Hospitalgraben 2 > > 99425 Weimar > > Tel: +49 (0) 3643 8640 0 > > Fax: +49 (0) 3643 8640 99 > > Web: http://www.rzw.de > > > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [clamav-users] CAN DETECT THIS VIRUS???
mmm... this virus attached is IMPOSIBLE that INFECTED any user... because is in a file format that not is executable and.. i think that this list is for this reason.. to test "CLAMSCAN"... or NOT? - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Monday, July 14, 2003 10:13 AM Subject: Re: [clamav-users] CAN DETECT THIS VIRUS??? > Please stop to post any viruses to the list! I've (we) enough trouble in > real life with viruses, spammer, attacks and cyberkids. > And finaly: ... everybody who subscribe the clamav-users-list have a > working virus-scanner (hope so ?!). > > TNX to all, who understand me and have the same problem to find the end of > the mailbox ... > > regards > > Juergen Frost > > -- > r.z.w. cimdata AG > Zum Hospitalgraben 2 > 99425 Weimar > Tel: +49 (0) 3643 8640 0 > Fax: +49 (0) 3643 8640 99 > Web: http://www.rzw.de > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [clamav-users] virus in MIME
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Monday 14 Jul 2003 7:51 am, Jordi Escolá \(Desarrollo\) wrote: > I do it .. but not detect the virus Please forward a copy of the e-mail to me ([EMAIL PROTECTED]). - -Nigel - -- Nigel Horne. Arranger, Composer, Conductor, Typesetter. Owner of the brass band group of the Internet. ICQ#20252325 [EMAIL PROTECTED] http://www.bandsman.co.uk/music.htm -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE/EmPvOv/MqfDWaY8RAvMWAJsGuMghVOo2tqH94RvrKwJY4iDUMACgoKwo qm/m4Ll+Q01qZ8LvKDBl4Ic= =vLQB -END PGP SIGNATURE- - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[clamav-users] Re: {Virus?} [clamav-users] CAN DETECT THIS VIRUS???
On Monday 14 July 2003 8:44 am, Jordi Escolá (Desarrollo) ENVIO DIRECTO wrote: > Warning: This message has had one or more attachments removed: > File hm48120.0.vir > Please read the "Information.txt" attachment/s for more information. > > Anybody can detect this virus using clamscan command line? My MailScanner system picked it up using Antivir and F-Prot (but not ClamAV, which is also installed). Suggest you submit a copy of the virus file to [EMAIL PROTECTED] Regards, Antony. -- It is also possible that putting the birds in a laboratory setting inadvertently renders them relatively incompetent. - Daniel C Dennett - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [clamav-users] CAN DETECT THIS VIRUS???
¿?¿?. yes... and the PROBLEM is that clamav NO DETECTS the virus... you undestand? - Original Message - From: "Stefke" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Monday, July 14, 2003 10:58 AM Subject: RE: [clamav-users] CAN DETECT THIS VIRUS??? This list is to discuss development and/or use and/or problems with clamscan, NOT to test if it catches virus X or Y. Stefaan -Original Message- From: Jordi Escolá (Desarrollo) [mailto:[EMAIL PROTECTED] Sent: maandag 14 juli 2003 10:30 To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [clamav-users] CAN DETECT THIS VIRUS??? mmm... this virus attached is IMPOSIBLE that INFECTED any user... because is in a file format that not is executable and.. i think that this list is for this reason.. to test "CLAMSCAN"... or NOT? - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Monday, July 14, 2003 10:13 AM Subject: Re: [clamav-users] CAN DETECT THIS VIRUS??? > Please stop to post any viruses to the list! I've (we) enough trouble > in real life with viruses, spammer, attacks and cyberkids. And finaly: > ... everybody who subscribe the clamav-users-list have a working > virus-scanner (hope so ?!). > > TNX to all, who understand me and have the same problem to find the > end of the mailbox ... > > regards > > Juergen Frost > > -- > r.z.w. cimdata AG > Zum Hospitalgraben 2 > 99425 Weimar > Tel: +49 (0) 3643 8640 0 > Fax: +49 (0) 3643 8640 99 > Web: http://www.rzw.de > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[clamav-users] Re: Antwort: Re: [clamav-users] CAN DETECT THIS VIRUS???
I working in a Mail Server.. I have more than 400 virus attack daily.. and i need to test more than one anti-viruses and.. you are the moderator of this mail-list???... I not undestand that what happend... I only knows if clamscan can detect this virus.. Im subscribed in over 20 mail list...and I received over 200-300 mail daily ...you have one choice.. don't reply my emails - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]>; )> Sent: Monday, July 14, 2003 10:55 AM Subject: Antwort: Re: [clamav-users] CAN DETECT THIS VIRUS??? > Hi Jordi, > > I think you have not every day 100 or 200 acks from mails with viruses to > anyone?! > Only ack's from viruses! > BTW clamscan ist not the only mailinglist I have and other mails I become > to ...understand? ... > > I'm working the most time, not testing ... > > > regards > > Juergen Frost > > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [clamav-users] CAN DETECT THIS VIRUS???
>Anybody can detect this virus using clamscan command >line? This virus is Worm.Sobig.C which is already detected by ClamAV. You might be interested in amavisd-new. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [clamav-users] virus in MIME
I do it .. but not detect the virus - Original Message - From: "Nigel Horne" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, July 11, 2003 1:25 PM Subject: Re: [clamav-users] virus in MIME -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Friday 11 Jul 2003 11:32 am, Jordi Escolá \(Desarrollo\) wrote: > I using kaspersky and Mcafee too... and this antivirus checking directly > the mime files and detects all viruses... clamav don't detects viruses in > base64??? Yes. Use the "--mbox" option. - -Nigel - -- Nigel Horne. Arranger, Composer, Conductor, Typesetter. Owner of the brass band group of the Internet. ICQ#20252325 [EMAIL PROTECTED] http://www.bandsman.co.uk/music.htm -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE/Dp6VOv/MqfDWaY8RAknVAJ42Fz+3HGkiret66pRnvFL+AMvssACdFoW4 yO7aIzC8rA/4Q1FlrfTszBs= =T00C -END PGP SIGNATURE- - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [clamav-users] CAN DETECT THIS VIRUS???
Antony Stone wrote: On Monday 14 July 2003 8:44 am, Jordi Escolá (Desarrollo) ENVIO DIRECTO wrote: Anybody can detect this virus using clamscan command line? My MailScanner system picked it up using Antivir and F-Prot (but not ClamAV, which is also installed). Huh? My copy of AntiVir didn't find it: AntiVir / Linux Version 2.0.7-39 Copyright (C) 1994-2003 by H+BEDV Datentechnik GmbH. All rights reserved. Loading /usr/lib/AntiVir/antivir.vdf ... VDF version: 6.20.0.37 created 11 Jul 2003 For private, non-commercial use only. AntiVir license: 1001015783 for Thomas Lamy, Waidhofen - scan results - directories:0 files:1 alerts:0 scan time: 00:00:01 Thank you for using AntiVir. So it seems only FProt finds it - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [clamav-users] make/zlib/solaris problem
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi James, I have compiled clamav-0.60 on solaris/x86 8 OK, though I did need a few packages from the freesun software site. First things first, try downloading ClamAV0.60 (0.54 is rather old now) then report back here. All the best, - -Nigel - -- Nigel Horne. Arranger, Composer, Conductor, Typesetter. Owner of the brass band group of the Internet. ICQ#20252325 [EMAIL PROTECTED] http://www.bandsman.co.uk/music.htm -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE/Eqc+Ov/MqfDWaY8RAnVnAKCEA5tBPguJzdwYCHE8jmALPfKkHQCfXxrN xwG/kCXIYDnWq+YobbkoNEI= =feIK -END PGP SIGNATURE- - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[clamav-users] make/zlib/solaris problem
Hello, I am trying to compile Clamav on a solaris 8 sparc machine I get the following error /bin/ksh ../libtool --mode=link gcc -g -O2-o libclamav.la -rpath /usr/local/lib -thread-safe -version-info 1:2:0 matcher.lo md5.lo others.lo readdb.lo strings.lo scanners.lo unrarlib.lo zzip-dir.lo zzip-err.lo zzip-file.lo zzip-info.lo zzip-io.lo zzip-stat.lo zzip-zip.lo blob.lo mbox.lo message.lo strrcpy.lo table.lo text.lo -lz -lpthread rm -fr .libs/libclamav.la .libs/libclamav.* .libs/libclamav.* /usr/ccs/bin/ld -G -h libclamav.so.1 -o .libs/libclamav.so.1.0.2 matcher.lo md5.lo others.lo readdb.lo strings.lo scanners.lo unrarlib.lo zzip-dir.lo zzip-err.lo zzip-file.lo zzip-info.lo zzip-io.lo zzip-stat.lo zzip-zip.lo blob.lo mbox.lo message.lo strrcpy.lo table.lo text.lo -lz -lpthread -lc ld: fatal: library -lz: not found ld: fatal: File processing errors. No output written to .libs/libclamav.so.1.0.2 *** Error code 1 make: Fatal error: Command failed for target `libclamav.la' Current working directory /var/tmp/clamav-0.54/libclamav *** Error code 1 make: Fatal error: Command failed for target `all-recursive' The configure script works fine and can find zlib checking zlib.h usability... yes checking zlib.h presence... yes checking for zlib.h... yes this was from doing ./configure;make any help greatly appreciated regards James Hurford E-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [clamav-users] CAN DETECT THIS VIRUS???
My AntiVir found it also, same version and vdf files: The message has been quarantined as 3f1262dc-1965. H+BEDV AntiVir found: Worm/Sobig.C F-PROT Antivirus found: W32/[EMAIL PROTECTED] CLAM Anti Virus found: - Original Message - From: "Thomas Lamy" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, July 14, 2003 4:26 AM Subject: Re: [clamav-users] CAN DETECT THIS VIRUS??? Huh? My copy of AntiVir didn't find it: AntiVir / Linux Version 2.0.7-39 Copyright (C) 1994-2003 by H+BEDV Datentechnik GmbH. All rights reserved. Loading /usr/lib/AntiVir/antivir.vdf ... VDF version: 6.20.0.37 created 11 Jul 2003 For private, non-commercial use only. AntiVir license: 1001015783 for Thomas Lamy, Waidhofen - scan results - directories:0 files:1 alerts:0 scan time: 00:00:01 Thank you for using AntiVir. So it seems only FProt finds it - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [clamav-users] CAN DETECT THIS VIRUS???
mmm... i think that my email have an attach named "jm48120.0.vir"... how you can execute this file format automatly?? > This is a discussion list for people who use clamav - hence the name, > "clamav-users". mmm... well.. I try to use clamav... I CAN SEND a EMAIL to this list in order to know WHY clamav DON'T DETECTS A VIRUS OR NOT - Original Message - From: "Antony Stone" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, July 14, 2003 11:07 AM Subject: Re: [clamav-users] CAN DETECT THIS VIRUS??? > On Monday 14 July 2003 9:29 am, Jordi Escolá (Desarrollo) wrote: > > > mmm... this virus attached is IMPOSIBLE that INFECTED any user... because > > is in a file format that not is executable > > If you look at the contents of the email you posted, it contained an > attachment ending in .pif - which certainly is extecutable by Windows users... > > > and.. i think that this list is for this reason.. to test "CLAMSCAN"... or > > NOT? > > No, it certainly is not. > > This is a discussion list for people who use clamav - hence the name, > "clamav-users". > > If you want to check whether a virus is detected by clamav, send your virus > file to [EMAIL PROTECTED] - if it's already detected by clamav, > you'll get a bounce message back telling you, and if it's not already > detected by clamav, you've successfully submitted it for inclusion in the > database. > > Regards, > > Antony. > > -- > > This is not a rehearsal. > This is Real Life. > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [clamav-users] CAN DETECT THIS VIRUS???
This list is to discuss development and/or use and/or problems with clamscan, NOT to test if it catches virus X or Y. Stefaan -Original Message- From: Jordi Escolá (Desarrollo) [mailto:[EMAIL PROTECTED] Sent: maandag 14 juli 2003 10:30 To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [clamav-users] CAN DETECT THIS VIRUS??? mmm... this virus attached is IMPOSIBLE that INFECTED any user... because is in a file format that not is executable and.. i think that this list is for this reason.. to test "CLAMSCAN"... or NOT? - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Monday, July 14, 2003 10:13 AM Subject: Re: [clamav-users] CAN DETECT THIS VIRUS??? > Please stop to post any viruses to the list! I've (we) enough trouble > in real life with viruses, spammer, attacks and cyberkids. And finaly: > ... everybody who subscribe the clamav-users-list have a working > virus-scanner (hope so ?!). > > TNX to all, who understand me and have the same problem to find the > end of the mailbox ... > > regards > > Juergen Frost > > -- > r.z.w. cimdata AG > Zum Hospitalgraben 2 > 99425 Weimar > Tel: +49 (0) 3643 8640 0 > Fax: +49 (0) 3643 8640 99 > Web: http://www.rzw.de > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
[clamav-users] freshclam logging in ClamAV-20030317 and possibly later versions
freshclam doesn't appear to use "LogSyslog" and call "openlog()" like clamd does... it probably should. Has this been fixed in a more recent version? Thanks, Ed Ed Phillips <[EMAIL PROTECTED]> University of Delaware (302) 831-6082 Systems Programmer III, Network and Systems Services finger -l [EMAIL PROTECTED] for PGP public key - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [clamav-users] CAN DETECT THIS VIRUS???
yes clamav no detects the virus :( any idea? Thanks! - Original Message - From: "Dapid Candra" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, July 14, 2003 10:51 AM Subject: Re: [clamav-users] CAN DETECT THIS VIRUS??? > I can't. Just update the db files. > > NAV detects W32.Sobig.C in 45433.pif attached in the hm48120.0.vir. > > [EMAIL PROTECTED] dapidc]# freshclam > Checking for a new database - started at Mon Jul 14 15:50:13 2003 > Current working dir is /usr/local/share/clamav > Connected to clamav.elektrapro.com. > Reading md5 sum (viruses.md5): OK > viruses.db is up to date. > Reading md5 sum (viruses2.md5): OK > viruses.db2 is up to date. > [EMAIL PROTECTED] dapidc]# clamscan --mbox hm48120.0.vir > hm48120.0.vir: OK > > --- SCAN SUMMARY --- > Known viruses: 8754 > Scanned directories: 0 > Scanned files: 1 > Infected files: 0 > Data scanned: 0.08 Mb > I/O buffer size: 131072 bytes > Time: 0.566 sec (0 m 0 s) > > -- > dapidc > > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [clamav-users] CAN DETECT THIS VIRUS???
I can't. Just update the db files. NAV detects W32.Sobig.C in 45433.pif attached in the hm48120.0.vir. [EMAIL PROTECTED] dapidc]# freshclam Checking for a new database - started at Mon Jul 14 15:50:13 2003 Current working dir is /usr/local/share/clamav Connected to clamav.elektrapro.com. Reading md5 sum (viruses.md5): OK viruses.db is up to date. Reading md5 sum (viruses2.md5): OK viruses.db2 is up to date. [EMAIL PROTECTED] dapidc]# clamscan --mbox hm48120.0.vir hm48120.0.vir: OK --- SCAN SUMMARY --- Known viruses: 8754 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 0.08 Mb I/O buffer size: 131072 bytes Time: 0.566 sec (0 m 0 s) -- dapidc - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [clamav-users] CAN DETECT THIS VIRUS???
It's o.k. Jordi ... forget it .. plonk .. [EMAIL PROTECTED]: > mmm... this virus attached is IMPOSIBLE that INFECTED any user... because is > in a file format that not is executable > and.. i think that this list is for this reason.. to test "CLAMSCAN"... or > NOT? .. regards Juergen - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [clamav-users] CAN DETECT THIS VIRUS???- offtopic
Jordi, I NEVER, NEVER like to read my private mails in mailinglists, newsgroups a.s.o. If I find my private mails again in such a public area (mailinglist is public!) terrible problems come over you. If you like to fight with me, do it private. And now:... back to work .. agains virus. Sorry to all others ... regards Juergen Frost - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: [clamav-users] CAN DETECT THIS VIRUS???
I just checked the submitted sample sent to the list and ClamAV detects the virus as Worm.Sobig.C using the current DB. Some other scanners don't detect the virus since it's a broken sample. The reason that ClamAV don't detect it with the option --mbox is that the mail is a NDR from "AOL Postmaster"? This means that the virus is located in the transcript of the original mail. To get ClamAV to detect the virus I had to extract the original mail and then extract the attactment. The newest ClamAV snapshot should be able to scan MIME formatted e-mails, but I've not tested this yet... Best regards, Diego d'Ambra -Original Message- From: Thomas Lamy [mailto:[EMAIL PROTECTED] Sent: 14. juli 2003 10:26 To: [EMAIL PROTECTED] Subject: Re: [clamav-users] CAN DETECT THIS VIRUS??? Antony Stone wrote: > On Monday 14 July 2003 8:44 am, Jordi Escolá (Desarrollo) ENVIO > DIRECTO wrote: >> >>Anybody can detect this virus using clamscan command line? > > > My MailScanner system picked it up using Antivir and F-Prot (but not > ClamAV, > which is also installed). > Huh? My copy of AntiVir didn't find it: AntiVir / Linux Version 2.0.7-39 Copyright (C) 1994-2003 by H+BEDV Datentechnik GmbH. All rights reserved. Loading /usr/lib/AntiVir/antivir.vdf ... VDF version: 6.20.0.37 created 11 Jul 2003 For private, non-commercial use only. AntiVir license: 1001015783 for Thomas Lamy, Waidhofen - scan results - directories:0 files:1 alerts:0 scan time: 00:00:01 Thank you for using AntiVir. So it seems only FProt finds it - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [clamav-users] CAN DETECT THIS VIRUS???
Please stop to post any viruses to the list! I've (we) enough trouble in real life with viruses, spammer, attacks and cyberkids. And finaly: ... everybody who subscribe the clamav-users-list have a working virus-scanner (hope so ?!). TNX to all, who understand me and have the same problem to find the end of the mailbox ... regards Juergen Frost -- r.z.w. cimdata AG Zum Hospitalgraben 2 99425 Weimar Tel: +49 (0) 3643 8640 0 Fax: +49 (0) 3643 8640 99 Web: http://www.rzw.de - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [clamav-users] CAN DETECT THIS VIRUS???
On Monday 14 July 2003 9:29 am, Jordi Escolá (Desarrollo) wrote: > mmm... this virus attached is IMPOSIBLE that INFECTED any user... because > is in a file format that not is executable If you look at the contents of the email you posted, it contained an attachment ending in .pif - which certainly is extecutable by Windows users... > and.. i think that this list is for this reason.. to test "CLAMSCAN"... or > NOT? No, it certainly is not. This is a discussion list for people who use clamav - hence the name, "clamav-users". If you want to check whether a virus is detected by clamav, send your virus file to [EMAIL PROTECTED] - if it's already detected by clamav, you'll get a bounce message back telling you, and if it's not already detected by clamav, you've successfully submitted it for inclusion in the database. Regards, Antony. -- This is not a rehearsal. This is Real Life. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
