Re: [Clamav-users] ClamAV 0.94 build problem on Cygwin

[Tomasz Kojm]

On Thu, 04 Sep 2008 18:14:24 -0500
René Berber <[EMAIL PROTECTED]> wrote:

> Do we get back support for Cygwin?

Hello René,

we generally had not so good experience with Cygwin based builds of ClamAV
over the past few years. The most common problem was different detection
results depending on the versions of cygwin dlls used (eg. sometimes older
dlls performed better than the latest ones, etc.). We got a lot of reports for
such issues and spent too much time looking for problems in ClamAV which
didn't really exist... We find the native builds much more reliable (and of
course many times faster) and very likely will start providing the win32
binaries with ClamAV 0.95.

Thanks,

-- 
   oo. Tomasz Kojm <[EMAIL PROTECTED]>
  (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg
 \..._ 0DCA5A08407D5288279DB43454822DC8985A444B
   //\   /\  Mon Sep  8 11:58:22 CEST 2008
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] solaris versions successfully compiled that function

[Jose-Marcio Martins da Cruz]

William A Casey wrote:
> clamav-users,
> 
> I am trying to find out if clamav has successfully been compiled on 
> Solaris 2.5.1 and functions properly.
> 
> Or if there is a document that says it is not supported, can't be done, or 
> shouldn't be done.

Well ! Solaris 2.5.1 is more than 10 years old. It isn't supported 
anymore by Sun. Not sure if it'a a good idea to run Clamav on it. But 
you'll surely have problems with, at least, pthreads which weren't 
supported in such old versions.

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Clamav-users] Webinar Recording

[Nigel Horne]

Folks,

Edwin's Webinar given last week on the topic of 0.94 is now available 
for download
from 
https://sourcefire.webex.com/sourcefire/lsr.php?AT=pb&SP=EC&rID=12075182&rKey=51C99713B66EECED

The Webinar covers both the new and improved features of 0.94 and 
includes a demonstration
of what's new in the signature format.

The slides are available from 
http://www.clamav.net/doc/webinars/Webinar-Edvin-2008-09-03.ppt,
and the files used in the presentation from 
http://www.clamav.net/doc/webinars/Webinar-Edvin-2008-09-03-livedemo.tar.gz.

We are always interested in topics for talks, and we are also open to 
volunteers from the open source community who
wish to give a talk. Contact me either by email or by phone.

-Nigel

-- 
Director of Product Management (ClamAV), Sourcefire, 
http://www.sourcefire.com
+44 1226 241048 or +1 706 705 4022 FAX: +44 870 705 9334, Skype: nigelhorne

Come to Las Vegas to see the latest in Sourcefire and open source 
innovation.
Register at www.bossconference.com by September 30th to save $200!



___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Clamav-users] NodalCore cards in use ?

[Andreas Schulze]

hello,

anybody on the list uses NodalCore cards to accelerate ClamAV ?

I tried to get a sample card from sensorynetworks via a german distributor.
But this failed because sensorynetworks expected too much support :-(

Any experiences ?

-- 
Andreas Schulze
Internet-/Security-Dienste

DATEV eG  | 90329 Nürnberg
Telefon +49(911)276-0 | Telefax +49(911)276-3196
E-Mail info @datev.de | www.datev.de
Paumgartnerstr. 6-14  | Nürnberg


GnuPG-Signatur.asc
Description: digitale Signatur dieser Nachricht von Andreas Schulze
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Clamav-users] Clamscan takes 80minutes to scan a file

[Veselin Kantsev]

Hello,
I'm running 
ClamAV 0.90.1/8187, Debian 2.6.18-4-powerpc 


Clamscan takes way too long to process even a single file.

Scan summary shows 80 minutes for scanning one 1 small txt file.

Tested with different file types/sizes, same result.

Removed and reinstalled Clamav package, no difference.


Any advise on what could be slowing clamscan down so much?

Regards,
Veselin
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Clamscan takes 80minutes to scan a file

[Tomasz Kojm]

On Mon, 8 Sep 2008 14:25:15 +0100
Veselin Kantsev <[EMAIL PROTECTED]> wrote:

> Any advise on what could be slowing clamscan down so much?

You're using a very old version of ClamAV which has a bug making it
very slow.

-- 
   oo. Tomasz Kojm <[EMAIL PROTECTED]>
  (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg
 \..._ 0DCA5A08407D5288279DB43454822DC8985A444B
   //\   /\  Mon Sep  8 15:27:51 CEST 2008
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Clamav-users] solaris versions successfully compiled that function

[William A Casey]

Updated info on this subject,


Thank you Bryan and Jose-Marcio for your responses.

When I run configure I get an error asking me to install zlib and 
zlib-devel packaages.
I found zlib on sunfreeware, but can't find a package for zlib-devel

Can anyone help me find this package for Solaris 2.5.1

Here's the error I'm getting...

checking check.h usability... no
checking check.h presence... no
checking for check.h... no
checking pthread.h usability... yes
checking pthread.h presence... yes
checking for pthread.h... yes
checking whether to enable maintainer-specific portions of Makefiles... no
checking for zlib installation... /usr/local
checking for inflateEnd in -lz... no
configure: error: Please install zlib and zlib-devel packages
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Clamscan takes 80minutes to scan a file

[Veselin Kantsev]

thank you Tomasz
ClamAV 0.93.3 works OK

regards,
veselin


On Mon, Sep 08, 2008 at 03:28:45PM +0200, Tomasz Kojm wrote:
> On Mon, 8 Sep 2008 14:25:15 +0100
> Veselin Kantsev <[EMAIL PROTECTED]> wrote:
> 
> > Any advise on what could be slowing clamscan down so much?
> 
> You're using a very old version of ClamAV which has a bug making it
> very slow.
> 
> -- 
>oo. Tomasz Kojm <[EMAIL PROTECTED]>
>   (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg
>  \..._ 0DCA5A08407D5288279DB43454822DC8985A444B
>//\   /\  Mon Sep  8 15:27:51 CEST 2008
> ___
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Clamscan takes 80minutes to scan a file

[Matus UHLAR - fantomas]

On 08.09.08 15:15, Veselin Kantsev wrote:
> thank you Tomasz
> ClamAV 0.93.3 works OK

0.94 is available too ;)

> On Mon, Sep 08, 2008 at 03:28:45PM +0200, Tomasz Kojm wrote:
> > On Mon, 8 Sep 2008 14:25:15 +0100
> > Veselin Kantsev <[EMAIL PROTECTED]> wrote:
> > 
> > > Any advise on what could be slowing clamscan down so much?
> > 
> > You're using a very old version of ClamAV which has a bug making it
> > very slow.


-- 
Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Quantum mechanics: The dreams stuff is made of. 
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] solaris versions successfully compiled that function

[Andrew Watkins]

Again, I would download and install the latest Solaris release from 
sun.com, since 2.5.1 is no longer support. Anyway, have you looked at
http://sunfreeware.com/ which has many packages for solaris. I think you 
should check out the 2.5 links.

Andrew

William A Casey wrote:
> Updated info on this subject,
> 
> 
> Thank you Bryan and Jose-Marcio for your responses.
> 
> When I run configure I get an error asking me to install zlib and 
> zlib-devel packaages.
> I found zlib on sunfreeware, but can't find a package for zlib-devel
> 
> Can anyone help me find this package for Solaris 2.5.1
> 
> Here's the error I'm getting...
> 
> checking check.h usability... no
> checking check.h presence... no
> checking for check.h... no
> checking pthread.h usability... yes
> checking pthread.h presence... yes
> checking for pthread.h... yes
> checking whether to enable maintainer-specific portions of Makefiles... no
> checking for zlib installation... /usr/local
> checking for inflateEnd in -lz... no
> configure: error: Please install zlib and zlib-devel packages
> ___
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] State of Clamuko support

[Bastian Friedrich]

On Wednesday 27 August 2008, Bastian Friedrich wrote:
> I have just tried to get ClamAV 0.94rc1 running and noticed that clamuko
> currently is not available.

This seems to be the case in 0.94 (final) as well?

> I have not tried to re-enable the code in clamd 
> (which is more or less commented out),

This, of course, was utter bullshit.

Anyway: I cannot get ClamAV 0.94 work with Dazuko. Can you? Is it supposed to 
work?

Thx
   Bastian

-- 
 Bastian Friedrich  [EMAIL PROTECTED]
 Address & Fon available on my HP   http://www.bastian-friedrich.de/
\~~\
\ I need someone really bad. Are you really bad?
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] State of Clamuko support

[Tomasz Kojm]

On Mon, 8 Sep 2008 17:29:44 +0200
Bastian Friedrich <[EMAIL PROTECTED]> wrote:

> On Wednesday 27 August 2008, Bastian Friedrich wrote:
> > I have just tried to get ClamAV 0.94rc1 running and noticed that clamuko
> > currently is not available.
> 
> This seems to be the case in 0.94 (final) as well?
> 
> > I have not tried to re-enable the code in clamd 
> > (which is more or less commented out),
> 
> This, of course, was utter bullshit.
> 
> Anyway: I cannot get ClamAV 0.94 work with Dazuko. Can you? Is it supposed
> to work?

Hi Bastian,

please use the latest SVN code with this fix:

Mon Sep  8 16:10:48 CEST 2008 (tk)
--
  * clamd/server-th.c: fix handling of pthread_attr_init/pthread_create in
   ClamukoScanOnAccess (bb#1169)

It should work.

-- 
   oo. Tomasz Kojm <[EMAIL PROTECTED]>
  (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg
 \..._ 0DCA5A08407D5288279DB43454822DC8985A444B
   //\   /\  Mon Sep  8 17:30:30 CEST 2008
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Clamav-users] Can't search wiki

[Ian Eiloart]

Hi,

Why is it necessary to log in to the wiki in order to use the "search" 
function?



-- 
Ian Eiloart
IT Services, University of Sussex
x3148
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Clamav-users] Clamav 0.94

[Jose Julian Buda]

Hi , I have a mail server with :
Debian etch
Postfix
Mailscanner
Clamav

Yesterday it work fine catching virus, but todat  i've made an upgrade from
clamav 0.93 to 0.94 and then
the process stop catching mail with virus, i mean , the mails are stoped
anyway by "No programs allowed" with mailscanner because of the extensions
file, but there is not any message or report from "ClamAv".

I have a txt file with eicar string , if i run on server:

cat filewitheicar.txt | mail [EMAIL PROTECTED]

the mail pass through the mailscanner and the workstation's antivirus alert
me abourt the eicar strings.

Why the mailscanner stop using clamav?

Thank you any help about this.

Sorry about my english

Jose Julian Buda

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] State of Clamuko support

[Bastian Friedrich]

Hi Tomasz,

On Monday 08 September 2008, Tomasz Kojm wrote:
>
> Bastian Friedrich <[EMAIL PROTECTED]> wrote:
[...]
> > Anyway: I cannot get ClamAV 0.94 work with Dazuko. Can you? Is it
> > supposed to work?
>
> Hi Bastian,
>
> please use the latest SVN code with this fix:
>
> Mon Sep  8 16:10:48 CEST 2008 (tk)
> --
>   * clamd/server-th.c: fix handling of pthread_attr_init/pthread_create in
>ClamukoScanOnAccess (bb#1169)
>
> It should work.

Thx a lot. Works fine. :)))

I'll be wondering even more whether we will have a 0.94.1 shortly... :)

Best
   Bastian

-- 
 Bastian Friedrich  [EMAIL PROTECTED]
 Address & Fon available on my HP   http://www.bastian-friedrich.de/
\~~\
\ Take my advice, I don't use it anyway.
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

[Clamav-users] Installing Clamav on Debian

[Carlos Williams]

I am installing clamav on Debian "Etch" and noticed that when it 
resolves the dependencies for required packages, there appears to be a 
missing file it does not install called "clamav-daemon" which sounds 
very critical. When I download clamav, it does the following:

email:/etc/amavis/conf.d# apt-get -t etch-backports install clamav
Reading package lists... Done
Building dependency tree... Done
The following extra packages will be installed:
   clamav-base clamav-freshclam libclamav4 libgmp3c2
Suggested packages:
   unrar lha clamav-docs
Recommended packages:
   arj unzoo
*The following NEW packages will be installed*:
   clamav clamav-base clamav-freshclam libclamav4 libgmp3c2
0 upgraded, 5 newly installed, 0 to remove and 15 not upgraded.




Now do I need to manually install "clamav-daemon"?




email:/etc/amavis/conf.d# apt-get -t etch-backports install clamav-daemon
Reading package lists... Done
Building dependency tree... Done
Suggested packages:
   daemon clamav-docs
The following NEW packages will be installed:
   clamav-daemon
0 upgraded, 1 newly installed, 0 to remove and 15 not upgraded.
Need to get 220kB of archives.
After unpacking 492kB of additional disk space will be used.
Get:1 http://www.backports.org etch-backports/main clamav-daemon 
0.93.3.dfsg-1~bpo40+1 [220kB]
Fetched 220kB in 1s (164kB/s)
Selecting previously deselected package clamav-daemon.
(Reading database ... 16193 files and directories currently installed.)
Unpacking clamav-daemon (from 
.../clamav-daemon_0.93.3.dfsg-1~bpo40+1_amd64.deb) ...
Setting up clamav-daemon (0.93.3.dfsg-1~bpo40+1) ...
Starting ClamAV daemon: clamd LibClamAV Warning: 
***
LibClamAV Warning: ***  This version of the ClamAV engine is outdated. 
***
LibClamAV Warning: *** DON'T PANIC! Read 
http://www.clamav.net/support/faq ***
LibClamAV Warning: 
***
LibClamAV Warning: 
***
LibClamAV Warning: ***  This version of the ClamAV engine is outdated. 
***
LibClamAV Warning: *** DON'T PANIC! Read 
http://www.clamav.net/support/faq ***
LibClamAV Warning: 
***


-- 
Carlos Williams <[EMAIL PROTECTED]>
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Installing Clamav on Debian

[Brandon Perry]

clamav-daemon is clamd. This is sgran's area, you may want to contact him in
IRC.

On Mon, Sep 8, 2008 at 11:37 AM, Carlos Williams
<[EMAIL PROTECTED]>wrote:

> I am installing clamav on Debian "Etch" and noticed that when it
> resolves the dependencies for required packages, there appears to be a
> missing file it does not install called "clamav-daemon" which sounds
> very critical. When I download clamav, it does the following:
>
> email:/etc/amavis/conf.d# apt-get -t etch-backports install clamav
> Reading package lists... Done
> Building dependency tree... Done
> The following extra packages will be installed:
>   clamav-base clamav-freshclam libclamav4 libgmp3c2
> Suggested packages:
>   unrar lha clamav-docs
> Recommended packages:
>   arj unzoo
> *The following NEW packages will be installed*:
>   clamav clamav-base clamav-freshclam libclamav4 libgmp3c2
> 0 upgraded, 5 newly installed, 0 to remove and 15 not upgraded.
>
>
>
>
> Now do I need to manually install "clamav-daemon"?
>
>
>
>
> email:/etc/amavis/conf.d# apt-get -t etch-backports install clamav-daemon
> Reading package lists... Done
> Building dependency tree... Done
> Suggested packages:
>   daemon clamav-docs
> The following NEW packages will be installed:
>   clamav-daemon
> 0 upgraded, 1 newly installed, 0 to remove and 15 not upgraded.
> Need to get 220kB of archives.
> After unpacking 492kB of additional disk space will be used.
> Get:1 http://www.backports.org etch-backports/main clamav-daemon
> 0.93.3.dfsg-1~bpo40+1 [220kB]
> Fetched 220kB in 1s (164kB/s)
> Selecting previously deselected package clamav-daemon.
> (Reading database ... 16193 files and directories currently installed.)
> Unpacking clamav-daemon (from
> .../clamav-daemon_0.93.3.dfsg-1~bpo40+1_amd64.deb) ...
> Setting up clamav-daemon (0.93.3.dfsg-1~bpo40+1) ...
> Starting ClamAV daemon: clamd LibClamAV Warning:
> ***
> LibClamAV Warning: ***  This version of the ClamAV engine is outdated.
>***
> LibClamAV Warning: *** DON'T PANIC! Read
> http://www.clamav.net/support/faq ***
> LibClamAV Warning:
> ***
> LibClamAV Warning:
> ***
> LibClamAV Warning: ***  This version of the ClamAV engine is outdated.
>***
> LibClamAV Warning: *** DON'T PANIC! Read
> http://www.clamav.net/support/faq ***
> LibClamAV Warning:
> ***
>
>
> --
> Carlos Williams <[EMAIL PROTECTED]>
> ___
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
>



-- 
http://www.volatileminds.net
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Installing Clamav on Debian

[Carlos Williams]

Brandon Perry wrote:
> clamav-daemon is clamd. This is sgran's area, you may want to contact him in
> IRC.

It does not appear to be so in the Debian packaging. When I install 
clamav, I don't have clamav-daemon installed. I have to manually do an 
apt-get install clamav-daemon. It then installs and adds an /etc/init.d/ 
script.

I don't know who sgran is or how to contact him. I don't use IRC.

-- 
Carlos Williams <[EMAIL PROTECTED]>
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Clamav 0.94

[Noel Jones]

Jose Julian Buda wrote:
> Hi , I have a mail server with :
> Debian etch
> Postfix
> Mailscanner
> Clamav
> 
> Yesterday it work fine catching virus, but todat  i've made an upgrade from
> clamav 0.93 to 0.94 and then
> the process stop catching mail with virus, i mean , the mails are stoped
> anyway by "No programs allowed" with mailscanner because of the extensions
> file, but there is not any message or report from "ClamAv".
> 
> I have a txt file with eicar string , if i run on server:
> 
> cat filewitheicar.txt | mail [EMAIL PROTECTED]

Try using
clamscan filewitheicar.txt
If clamscan detects the virus, then the problem is with your 
mailscanner config.

If clamscan by itself _does_not_ detect the test file, then 
something is terribly wrong with your clamscan, and your 
problem has nothing to do with mailscanner.

> 
> the mail pass through the mailscanner and the workstation's antivirus alert
> me abourt the eicar strings.
> 
> Why the mailscanner stop using clamav?

First make sure clamscan by itself works as expected.  Then 
you know it's a mailscanner problem.

Maybe clamscan installed to a different path than mailscanner 
expects.  Maybe mailscanner is configured to use some 
no-longer-valid command line switch.

Check your mailscanner logs and/or ask on a mailscanner 
support forum.

-- 
Noel Jones
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Clamav 0.94

[Jose Julian Buda]

- Original Message - 
From: "Noel Jones" <[EMAIL PROTECTED]>
To: "ClamAV users ML" 
Sent: Monday, September 08, 2008 1:54 PM
Subject: Re: [Clamav-users] Clamav 0.94


> Jose Julian Buda wrote:
>> Hi , I have a mail server with :
>> Debian etch
>> Postfix
>> Mailscanner
>> Clamav
>>
>> Yesterday it work fine catching virus, but todat  i've made an upgrade 
>> from
>> clamav 0.93 to 0.94 and then
>> the process stop catching mail with virus, i mean , the mails are stoped
>> anyway by "No programs allowed" with mailscanner because of the 
>> extensions
>> file, but there is not any message or report from "ClamAv".
>>
>> I have a txt file with eicar string , if i run on server:
>>
>> cat filewitheicar.txt | mail [EMAIL PROTECTED]
>
> Try using
>clamscan filewitheicar.txt
> If clamscan detects the virus, then the problem is with your
> mailscanner config.
>
> If clamscan by itself _does_not_ detect the test file, then
> something is terribly wrong with your clamscan, and your
> problem has nothing to do with mailscanner.
>
>>
>> the mail pass through the mailscanner and the workstation's antivirus 
>> alert
>> me abourt the eicar strings.
>>
>> Why the mailscanner stop using clamav?
>
> First make sure clamscan by itself works as expected.  Then
> you know it's a mailscanner problem.
>
> Maybe clamscan installed to a different path than mailscanner
> expects.  Maybe mailscanner is configured to use some
> no-longer-valid command line switch.
>
> Check your mailscanner logs and/or ask on a mailscanner
> support forum.
>
> -- 
> Noel Jones
> ___
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
>
> __ Información de NOD32, revisión 3424 (20080907) __
>
> Este mensaje ha sido analizado con  NOD32 antivirus system
> http://www.nod32.com
>
>



proxymails:~# clamscan filewitheicar.txt
filewitheicar.txt: Eicar-Test-Signature FOUND

--- SCAN SUMMARY ---
Known viruses: 416228
Engine version: 0.94
Scanned directories: 0
Scanned files: 1
Infected files: 1
Data scanned: 0.00 MB
Time: 2.187 sec (0 m 2 s)
proxymails:~#


I do not change anything in the mailscanner config file, i just upgrade the 
clamav.
How can i debug this error?

Thank you

Jose Julian Buda

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Can't search wiki

[Dennis Peterson]

Ian Eiloart wrote:
> Hi,
> 
> Why is it necessary to log in to the wiki in order to use the "search" 
> function?
> 
> 
> 

This works very well for me:

Google.com
pattern site:wiki.clamav.net/

dp
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Clamav 0.94

[Noel Jones]

Jose Julian Buda wrote:
> 
> proxymails:~# clamscan filewitheicar.txt
> filewitheicar.txt: Eicar-Test-Signature FOUND
> 
> --- SCAN SUMMARY ---
> Known viruses: 416228
> Engine version: 0.94
> Scanned directories: 0
> Scanned files: 1
> Infected files: 1
> Data scanned: 0.00 MB
> Time: 2.187 sec (0 m 2 s)
> proxymails:~#
> 
> 
> I do not change anything in the mailscanner config file, i just upgrade the 
> clamav.
> How can i debug this error?
> 

OK, it appears that clamscan is working correctly; mailscanner 
isn't.

Check your mailscanner logs and/or ask on a mailscanner
support forum.

Maybe clamscan installed to a different path than mailscanner 
expects.  Maybe mailscanner is configured to use some 
no-longer-valid command line switch.  Hopefully mailscanner 
will log any errors returned by clamscan.


-- 
Noel Jones
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Clamav 0.94

[Rick Macdougall]

Noel Jones wrote:
> Jose Julian Buda wrote:
>> proxymails:~# clamscan filewitheicar.txt
>> filewitheicar.txt: Eicar-Test-Signature FOUND
>>
>> --- SCAN SUMMARY ---
>> Known viruses: 416228
>> Engine version: 0.94
>> Scanned directories: 0
>> Scanned files: 1
>> Infected files: 1
>> Data scanned: 0.00 MB
>> Time: 2.187 sec (0 m 2 s)
>> proxymails:~#
>>
>>
>> I do not change anything in the mailscanner config file, i just upgrade the 
>> clamav.
>> How can i debug this error?
>>
> 
> OK, it appears that clamscan is working correctly; mailscanner 
> isn't.

perhaps clamscan is working but clamdscan is not working ?

Regards,

Rick

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Clamav 0.94

[Jose Julian Buda]

- Original Message - 
From: "Rick Macdougall" <[EMAIL PROTECTED]>
To: "ClamAV users ML" 
Sent: Monday, September 08, 2008 2:14 PM
Subject: Re: [Clamav-users] Clamav 0.94


> Noel Jones wrote:
>> Jose Julian Buda wrote:
>>> proxymails:~# clamscan filewitheicar.txt
>>> filewitheicar.txt: Eicar-Test-Signature FOUND
>>>
>>> --- SCAN SUMMARY ---
>>> Known viruses: 416228
>>> Engine version: 0.94
>>> Scanned directories: 0
>>> Scanned files: 1
>>> Infected files: 1
>>> Data scanned: 0.00 MB
>>> Time: 2.187 sec (0 m 2 s)
>>> proxymails:~#
>>>
>>>
>>> I do not change anything in the mailscanner config file, i just upgrade 
>>> the
>>> clamav.
>>> How can i debug this error?
>>>
>>
>> OK, it appears that clamscan is working correctly; mailscanner
>> isn't.
>
> perhaps clamscan is working but clamdscan is not working ?
>
> Regards,
>
> Rick
>
> ___
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
>
> __ Información de NOD32, revisión 3424 (20080907) __
>
> Este mensaje ha sido analizado con  NOD32 antivirus system
> http://www.nod32.com
>
>


proxymails:~# clamdscan filewitheicar.txt
/root/filewitheicar.txt: Eicar-Test-Signature FOUND

--- SCAN SUMMARY ---
Infected files: 1
Time: 0.064 sec (0 m 0 s)
proxymails:~#



clamdscan seems to work fine, so clamd is running properly
am i right?

you mean it`s a mailscanner problem?


Thank you
Jose Jlian Buda



___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Clamav 0.94

[Noel Jones]

Jose Julian Buda wrote:
> 
> you mean it`s a mailscanner problem?
> 
> 
> Thank you
> Jose Jlian Buda
> 

Yes, it's a mailscanner problem.

I suspect that mailscanner is using some no-longer-valid 
command line switch with clamscan, but that's just a wild 
guess.  Mailscanner does not use clamd or clamdscan unless 
you've altered it to do so.

Check your mailscanner logs or ask for help on a mailscanner 
support forum.

-- 
Noel Jones
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Clamscan takes 80minutes to scan a file

[Stephen Gran]

On Mon, Sep 08, 2008 at 03:28:45PM +0200, Tomasz Kojm said:
> On Mon, 8 Sep 2008 14:25:15 +0100
> Veselin Kantsev <[EMAIL PROTECTED]> wrote:
> 
> > Any advise on what could be slowing clamscan down so much?
> 
> You're using a very old version of ClamAV which has a bug making it
> very slow.

Could this be added to the FAQ?  It comes up all the time on IRC, and is
probably the number one question seen there.  Even specifically saying
something like "Debian users, this means you!"

Cheers,
-- 
 --
|  Stephen Gran  | "I don't think they could put him in a  |
|  [EMAIL PROTECTED] | mental hospital.  On the other hand, if |
|  http://www.lobefin.net/~steve | he were already in, I don't think   |
|| they'd let him out."|
 --


signature.asc
Description: Digital signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Installing Clamav on Debian

[Stephen Gran]

On Mon, Sep 08, 2008 at 12:37:31PM -0400, Carlos Williams said:
> I am installing clamav on Debian "Etch" and noticed that when it 
> resolves the dependencies for required packages, there appears to be a 
> missing file it does not install called "clamav-daemon" which sounds 
> very critical. When I download clamav, it does the following:
> 
> email:/etc/amavis/conf.d# apt-get -t etch-backports install clamav

Please use the volatile archive (volatile.debian.org) for clamav
packages aimed at debian stable.  The same people are involved in those
packages and the ones targetted at the main archive, and they are
uploaded much sooner than backports tends to.

To answer your question, apt-get install clamav-daemon.
-- 
 --
|  Stephen Gran  | Your CHEEKS sit like twin NECTARINES|
|  [EMAIL PROTECTED] | above a MOUTH that knows no BOUNDS --   |
|  http://www.lobefin.net/~steve | |
 --


signature.asc
Description: Digital signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Installing Clamav on Debian

[Carlos Williams]

Stephen Gran wrote:
> On Mon, Sep 08, 2008 at 12:37:31PM -0400, Carlos Williams said:
>> I am installing clamav on Debian "Etch" and noticed that when it 
>> resolves the dependencies for required packages, there appears to be a 
>> missing file it does not install called "clamav-daemon" which sounds 
>> very critical. When I download clamav, it does the following:
>>
>> email:/etc/amavis/conf.d# apt-get -t etch-backports install clamav
> 
> Please use the volatile archive (volatile.debian.org) for clamav
> packages aimed at debian stable.  The same people are involved in those
> packages and the ones targetted at the main archive, and they are
> uploaded much sooner than backports tends to.

So since I already have Clamav installed and working from backports, can 
I simply just add "volatile.debian.org" to my source.list and simply:

- apt-get update
- apt-get -t volatile install clamav clamav-daemon

Will that work or break my current working config?

-- 
Carlos Williams <[EMAIL PROTECTED]>
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Installing Clamav on Debian

[Brandon Perry]

you shouldn't have to specify the repo (apt is pretty good about stuff like
that). just apt-get update ; apt-get upgrade.

On Mon, Sep 8, 2008 at 2:52 PM, Carlos Williams <[EMAIL PROTECTED]>wrote:

> Stephen Gran wrote:
> > On Mon, Sep 08, 2008 at 12:37:31PM -0400, Carlos Williams said:
> >> I am installing clamav on Debian "Etch" and noticed that when it
> >> resolves the dependencies for required packages, there appears to be a
> >> missing file it does not install called "clamav-daemon" which sounds
> >> very critical. When I download clamav, it does the following:
> >>
> >> email:/etc/amavis/conf.d# apt-get -t etch-backports install clamav
> >
> > Please use the volatile archive (volatile.debian.org) for clamav
> > packages aimed at debian stable.  The same people are involved in those
> > packages and the ones targetted at the main archive, and they are
> > uploaded much sooner than backports tends to.
>
> So since I already have Clamav installed and working from backports, can
> I simply just add "volatile.debian.org" to my source.list and simply:
>
> - apt-get update
> - apt-get -t volatile install clamav clamav-daemon
>
> Will that work or break my current working config?
>
> --
> Carlos Williams <[EMAIL PROTECTED]>
> ___
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
>



-- 
http://www.volatileminds.net
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Installing Clamav on Debian

[Carlos Williams]

Brandon Perry wrote:
> you shouldn't have to specify the repo (apt is pretty good about stuff like
> that). just apt-get update ; apt-get upgrade.

I did an upgrade and it asked me if I would like to install the new 
config file for /etc/clamav/clam.conf and /etc/clamav/freshclam.conf. I 
elected to keep my version rather than the package maintainers new 
version. Now when I restart Clamav, I get the following error:

email:~# /etc/init.d/clamav-daemon restart
Stopping ClamAV daemon: clamd.
Starting ClamAV daemon: clamd ERROR: Parse error at line 41: Unknown 
option PhishingRestrictedScan.
ERROR: Can't open/parse the config file /etc/clamav/clamd.conf

Do I just comment line 41 out? Has anyone seen this before or know what 
I did wrong? Please help!

-- 
Carlos Williams <[EMAIL PROTECTED]>
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] ClamAV 0.94 build problem on Cygwin

[René Berber]

Tomasz Kojm wrote:

> On Thu, 04 Sep 2008 18:14:24 -0500
> René Berber <[EMAIL PROTECTED]> wrote:
> 
>> Do we get back support for Cygwin?
> 
> Hello René,
> 
> we generally had not so good experience with Cygwin based builds of ClamAV
> over the past few years. The most common problem was different detection
> results depending on the versions of cygwin dlls used (eg. sometimes older
> dlls performed better than the latest ones, etc.). We got a lot of reports for
> such issues and spent too much time looking for problems in ClamAV which
> didn't really exist... We find the native builds much more reliable (and of
> course many times faster) and very likely will start providing the win32
> binaries with ClamAV 0.95.

By support I meant getting answers on this list, nothing more.

The idea of Cygwin is to be able to build with the same sources used
under Linux.  Of course there are problem areas, those are few, and the
Cygwin maintainers/package porters should take care of them.

My recommendation for ClamAV is to get rid of all the #ifdef CL_CYGWIN
blocks, and any others related to Cygwin.

A native build will not work with Exim (which has sections written
explicitly for Cygwin and builds out of the box, just like ClamAV) or
any other application that uses sockets; the socket file is not
compatible with native applications.

Thanks for taking time to reply.
-- 
René Berber

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Installing Clamav on Debian

[Andrew McGlashan]

Hi,

Carlos Williams wrote:
> Brandon Perry wrote:
> Do I just comment line 41 out? Has anyone seen this before or know
> what I did wrong? Please help!

You may need to do:
apt-get dist-upgrade

I found when I did an upgrade alone, it only updated half the required 
packages -- dist-upgrade to the rest sorted (running on sarge) for me.

Kind Regards
AndrewM

Andrew McGlashan
Broadband Solutions now including VoIP

Current Land Line No: 03 9912 0504
Mobile: 04 2574 1827 Fax: 03 9012 2178

National No: 1300 85 3804

Affinity Vision Australia Pty Ltd
http://www.affinityvision.com.au
http://adsl2choice.net.au

In Case of Emergency --  http://www.affinityvision.com.au/ice.html 

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Webinar Recording

[Bill Maidment]

On Mon, 08 Sep 2008 12:53:48 +0100, Nigel Horne wrote
> Folks,
> 
> Edwin's Webinar given last week on the topic of 0.94 is now available 
> for download
> from 
>
https://sourcefire.webex.com/sourcefire/lsr.php?AT=pb&SP=EC&rID=12075182&rKey=51C99713B66EECED

So how do I play the .arf in Fedora 9 ? 

--
Bill Maidment
Maidment Enterprises Pty Ltd
www.maidment.vu
One-armed Consultant to Elgas Ltd
Phone: 02 9904 3364

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Webinar Recording

[Dennis Peterson]

Bill Maidment wrote:
> On Mon, 08 Sep 2008 12:53:48 +0100, Nigel Horne wrote
>> Folks,
>>
>> Edwin's Webinar given last week on the topic of 0.94 is now available 
>> for download
>> from 
>>
> https://sourcefire.webex.com/sourcefire/lsr.php?AT=pb&SP=EC&rID=12075182&rKey=51C99713B66EECED
> 
> So how do I play the .arf in Fedora 9 ? 

Use VMPlayer to run a Windows virtual machine in Fedora.

dp
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Webinar Recording

[Bill Maidment]

On Mon, 08 Sep 2008 17:39:16 -0700, Dennis Peterson wrote
> Bill Maidment wrote:
> > On Mon, 08 Sep 2008 12:53:48 +0100, Nigel Horne wrote
> >> Folks,
> >>
> >> Edwin's Webinar given last week on the topic of 0.94 is now available 
> >> for download
> >> from 
> >>
> >
https://sourcefire.webex.com/sourcefire/lsr.php?AT=pb&SP=EC&rID=12075182&rKey=51C99713B66EECED
> > 
> > So how do I play the .arf in Fedora 9 ?
> 
> Use VMPlayer to run a Windows virtual machine in Fedora.
> 

I'm not buying Windoze just to watch the webinar. Think again.

--
Bill Maidment
Maidment Enterprises Pty Ltd
www.maidment.vu
One-armed Consultant to Elgas Ltd
Phone: 02 9904 3364

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Webinar Recording

[Andrew McGlashan]

Hi,

Dennis Peterson wrote:
>>> Edwin's Webinar given last week on the topic of 0.94 is now
>>> available for download
>>> from
>> https://sourcefire.webex.com/sourcefire/lsr.php?AT=pb&SP=EC&rID=12075182&rKey=51C99713B66EECED
>>
>> So how do I play the .arf in Fedora 9 ?
>
> Use VMPlayer to run a Windows virtual machine in Fedora.

It was hard enough finding a player that works in Windows. is there a 
better format?

Kind Regards
AndrewM

Andrew McGlashan
Broadband Solutions now including VoIP

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Clamav 0.94

[Rick Cooper]

 

 > -Original Message-
 > From: [EMAIL PROTECTED] 
 > [mailto:[EMAIL PROTECTED] On Behalf Of 
 > Noel Jones
 > Sent: Monday, September 08, 2008 2:31 PM
 > To: ClamAV users ML
 > Subject: Re: [Clamav-users] Clamav 0.94
 > 
 > Jose Julian Buda wrote:
 > > 
 > > you mean it`s a mailscanner problem?
 > > 
 > > 
 > > Thank you
 > > Jose Jlian Buda
 > > 
 > 
 > Yes, it's a mailscanner problem.
 > 
 > I suspect that mailscanner is using some no-longer-valid 
 > command line switch with clamscan, but that's just a wild 
 > guess.  Mailscanner does not use clamd or clamdscan unless 
 > you've altered it to do so.
 > 
 > Check your mailscanner logs or ask for help on a mailscanner 
 > support forum.

MailScanner has used clamd directly, (no script, no perl module) for many
months now, it is the preferred method by many, many SAs.

Rick


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.


___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Webinar Recording

[Christopher X. Candreva]

On Tue, 9 Sep 2008, Andrew McGlashan wrote:

> It was hard enough finding a player that works in Windows. is there a 
> better format?

If you view the stream, it downloads a Java player that worked in Linux.

Maybe they have a stand-alone java player that will let you play the 
downloaded file ?

==
Chris Candreva  -- [EMAIL PROTECTED] -- (914) 948-3162
WestNet Internet Services of Westchester
http://www.westnet.com/
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Webinar Recording

[Dennis Peterson]

Bill Maidment wrote:
> On Mon, 08 Sep 2008 17:39:16 -0700, Dennis Peterson wrote
>> Bill Maidment wrote:
>>> On Mon, 08 Sep 2008 12:53:48 +0100, Nigel Horne wrote
 Folks,

 Edwin's Webinar given last week on the topic of 0.94 is now available 
 for download
 from 

> https://sourcefire.webex.com/sourcefire/lsr.php?AT=pb&SP=EC&rID=12075182&rKey=51C99713B66EECED
>>> So how do I play the .arf in Fedora 9 ?
>> Use VMPlayer to run a Windows virtual machine in Fedora.
>>
> 
> I'm not buying Windoze just to watch the webinar. Think again.

It was humor. I think Windows-centric presentations are kinda sucky. I 
use a Mac so had no problems but would not have been able, so far as I 
know, to see it from the office where I have only Unix.

dp
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Re: [Clamav-users] Webinar Recording

[Bill Maidment]

On Mon, 08 Sep 2008 20:23:20 -0700, Dennis Peterson wrote

> 
> It was humor. I think Windows-centric presentations are kinda sucky. I 
> use a Mac so had no problems but would not have been able, so far as I 
> know, to see it from the office where I have only Unix.

A smiley or two might have given me a hint ;-) 8-)

--
Bill Maidment
Maidment Enterprises Pty Ltd
www.maidment.vu
One-armed Consultant to Elgas Ltd
Phone: 02 9904 3364

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml