RE: [Clamav-users] Calling andrey@cherezov.koenig.su

2004-02-10 Thread Andrey Cherezov
> I just tried sending you some e-mail but got this message.
> Please fix your system and when you've done so let me know
> and I'll try chatting again.
>
> -Nigel
> (reason: 550 Your message is classified as SPAM! If this
> an error, please click here:
> http://eserv.ru/MailClassify/[EMAIL PROTECTED])

This is not a bug in my system, just the bayesian spam-filter
(PopFile.sf.net).
Somebody clicked the URL provided, and now the system "fixed", thanks :)

> Please check that you have the latest source code, in particular my
message.c is
> 1.29, and my mbox.c is 1.39

>From CVS\Entries in the sources I compiled:
/message.c/1.29/Tue Feb 10 17:01:30 2004//
/mbox.c/1.39/Fri Feb  6 13:46:08 2004//




---
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


RE: [Clamav-users] Calling andrey@cherezov.koenig.su

2004-02-10 Thread Andrey Cherezov
> > Please check that you have the latest source code, in
> particular my message.c is
> > 1.29, and my mbox.c is 1.39
>
> From CVS\Entries in the sources I compiled:
> /message.c/1.29/Tue Feb 10 17:01:30 2004//
> /mbox.c/1.39/Fri Feb  6 13:46:08 2004//

Very like some Cygwin issues... I've copied the _same_
clamav binary, cygwin core DLLs, AV databases and config to my other
server (where Cygwin is _not_ installed) and got the different result:

C:\Eserv3\antivirus\clamav\bin>...-mail\DATA\infected\!3289!1114431587!2.eml
"
C:\Eserv3\DATA\infected\!3289!1114431587!2.eml: Worm.SCO.A FOUND

On my dev. PC (where this clamd.exe compiled under Cygwin)
virus isn't detected in the same message file:

G:\temp\clamav1\bin>clamdscan.exe
"G:\temp\clamav1\bin\!3289!1114431587!2.eml"
G:\temp\clamav1\bin\!3289!1114431587!2.eml: OK

That is strange... Now I'll try to compile it with a debug log enabled.

Thank you,




---
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


RE: [Clamav-users] DEBUG LOG (was: Calling andrey@cherezov.koenig.su :)

2004-02-10 Thread Andrey Cherezov
Dear Nigel,

Here is 2 debug logs from clamd from 2 different PC.

1st - Windows 2003 Server w/o Cygwin installed:
...
LibClamAV debug: messageFindArgument: compare 8 bytes of filename with
filename="text.zip"
LibClamAV debug: blobSetFilename: text.zip
LibClamAV debug: Mixed message part 2 is of type 0
LibClamAV debug: in parseEmailBody(nBlobs = 1)
LibClamAV debug: 1 attachments found
LibClamAV debug: Saving attachment in /tmp/4d6f53514572dc94/text.zip
LibClamAV debug: Saving attachment as /tmp/4d6f53514572dc94/text.zip002388
(22643 bytes long)
LibClamAV debug: blobDestroy 1
LibClamAV debug: parseEmailBody() returning 1
LibClamAV debug: Mixed message part 2 is of type 0
LibClamAV debug: in parseEmailBody(nBlobs = 0)
LibClamAV debug: 0 attachments found
LibClamAV debug: 0 multiparts found
LibClamAV debug: parseEmailBody() returning 2
LibClamAV debug: cli_mbox returning 0
LibClamAV debug: Scanning /tmp/4d6f53514572dc94/text.zip002388
LibClamAV debug: Recognized ZIP file file
LibClamAV debug: Starting scanzip()
LibClamAV debug: Zip -> text.pif, compressed: 22528, normal: 22528.
LibClamAV debug: cl_filetype(): File type not recognized
LibClamAV debug: Worm.SCO.A virus found in descriptor 10.
LibClamAV debug: Zip -> Found Worm.SCO.A virus.

OK !

2nd - Windows XP with Cygwin installed:
...
LibClamAV debug: Empty part
LibClamAV debug: The message has 3 parts
LibClamAV debug: Find out the multipart type(mixed)
LibClamAV debug: Mixed message with 3 parts
LibClamAV debug: Mixed message part 0 is of type 6
LibClamAV debug: Mixed message text part disposition ""
LibClamAV debug: Adding part to main message
LibClamAV debug: Mixed message part 1 is of type 1
LibClamAV debug: blobCreate
LibClamAV debug: messageFindArgument: compare 8 bytes of filename with
name="text.zip"
LibClamAV debug: messageFindArgument: compare 8 bytes of filename with
filename="text.zip"
LibClamAV debug: blobSetFilename: text.zip
LibClamAV debug: Mixed message part 2 is of type 0
LibClamAV debug: in parseEmailBody(nBlobs = 1)
LibClamAV debug: 1 attachments found
LibClamAV debug: Saving attachment in /tmp/6ff24f8c75437b35/text.zip
LibClamAV debug: Saving attachment as /tmp/6ff24f8c75437b35/text.zip002748
(22643 bytes long)
LibClamAV debug: blobDestroy 1
LibClamAV debug: parseEmailBody() returning 1
LibClamAV debug: Mixed message part 2 is of type 0
LibClamAV debug: in parseEmailBody(nBlobs = 0)
LibClamAV debug: 0 attachments found
LibClamAV debug: 0 multiparts found
LibClamAV debug: parseEmailBody() returning 2
LibClamAV debug: cli_mbox returning 0
LibClamAV debug: Scanning /tmp/6ff24f8c75437b35/text.zip002748
^^^ this is a latest line! There no "Recognized ZIP file file" etc
lines!
And no any error messages.

Clamdscan:
1st:
C:\Eserv3\antivirus\clamav\bin>-mail\DATA\infected\!3289!1114431587!2.eml"
C:\Eserv3\DATA\infected\!3289!1114431587!2.eml: Worm.SCO.A FOUND
--- SCAN SUMMARY ---
Infected files: 1
Time: 0.126 sec (0 m 0 s)

2nd (much slower PC):
G:\temp\clamav1\bin>clamdscan.exe
"G:\temp\clamav1\bin\!3289!1114431587!2.eml"
G:\temp\clamav1\bin\!3289!1114431587!2.eml: OK
--- SCAN SUMMARY ---
Infected files: 0
Time: 0.173 sec (0 m 0 s)




---
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


RE: [Clamav-users] DEBUG LOG (was: Calling andrey@cherezov.koenig.su :)

2004-02-10 Thread Andrey Cherezov
Nigel,

I found difference in these 2 cases.
On the second PC (WinXP with installed Cygwin) this code

bread = read(desc, magic, MAGIC_BUFFER_SIZE);

returns bread=13 instead of 14 (#define MAGIC_BUFFER_SIZE 14)
and later failed to pass this check:

if (bread != MAGIC_BUFFER_SIZE) {

as result, cli_magic_scandesc do not call the cl_filetype
and scan this zip file w/o extracting, as not archive.

Do not know, why this happens (13 :). Just commented out
this "if (bread" fragment, recompiled, and now this works
for all tested Worm.SCO.A infected files on this PC.

G:\temp\clamav1\bin>clamdscan.exe
"G:\temp\clamav1\bin\!3289!1114431587!2.eml"
G:\temp\clamav1\bin\!3289!1114431587!2.eml: Worm.SCO.A FOUND
--- SCAN SUMMARY ---
Infected files: 1
Time: 0.230 sec (0 m 0 s)




---
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] MD5 CVD checks in Cygwin version

2004-02-10 Thread Andrey Cherezov
Compare files "original\main.cvd" and
"downloaded_by_freshclam_under_cygwin\MAIN.CVD"
071D: 0A 0D
071E: 2F 0A
071F: DD 2F
0720: 6D DD
0721: FB 6D
0722: DB FB
0723: 4E DB
0724: 87 4E

0x0D 0x0A - line terminator in DOS/Windows/Cygwin...

Seems, the problem is same as with ZIP file detection -
read(stream) and write(stream) under Cygwin work as text
functions instead of binary ones - expand LF to CRLF ?
How to override this?




---
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


RE: [Clamav-users] MD5 CVD checks in Cygwin version

2004-02-11 Thread Andrey Cherezov
> read(stream) and write(stream) under Cygwin work as text
> functions instead of binary ones - expand LF to CRLF ?
> How to override this?

I've added "|O_BINARY" to freshclam/manager.c[472]:
if((fd = open(file, O_WRONLY|O_CREAT|O_EXCL|O_BINARY, 0644)) == -1) {

and now freshclam.exe works right.




---
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


RE: [Clamav-users] DEBUG LOG (was: Calling andrey@cherezov.koenig.su :)

2004-02-10 Thread Andrey Cherezov
> Do not know, why this happens (13 :). Just commented out
> this "if (bread" fragment, recompiled, and now this works
> for all tested Worm.SCO.A infected files on this PC.

When I added "|O_BINARY" to this code in mbox.c this 13/14
magic_buffer problem also fix.

#else
(void)mktemp(filename);
fd = open(filename, O_WRONLY|O_CREAT|O_EXCL|O_TRUNC|O_BINARY, 0600);
#endif




---
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


RE: [Clamav-users] Re: MD5 CVD checks in Cygwin version

2004-02-11 Thread Andrey Cherezov
> Great !
>
> Could anybody briefly explain wich parts of Cygwin are
> necessary to build
> Clamav under Win32 ? I have some knowledge of C but don't have any
> experience in Cygwin tools. Is the C compiler the only needed tool to
> compiler Clamav ?

Compilation under cygwin is the same as in unix:
make configure
make

This will create all required *.exe. To run them on the PC
without cygwin installed you'll need these files from cygwin:

09.08.2003  08:3562 464 cygbz2-1.dll
20.09.2003  22:32   971 618 cygwin1.dll
09.08.2003  08:2861 440 cygz.dll

If you need, I can put working copy of this ClamAV port on my server
for downloading. Seems it stable enough - I've successfully tested it
with collection of 179 mail viruses (70 seconds to scan this 58 Mb volume).

Now I'm uploading it (via slow connection) to my main server,
and it will reside on the URL
http://bitrix.eserv.ru/download/clamav1.rar
(1 732 836 bytes, including all *.exe, *.dll and *.CVD).




---
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


RE: [Clamav-users] Re: MD5 CVD checks in Cygwin version

2004-02-11 Thread Andrey Cherezov
> ClamAV-0.66 and ClamAV-devel, the last hunk of the patch failed, so
> see the attached patch instead.  I've tested it on Linux, but would
> like to know if it works on Windows.  According to MS library docs
> it ought to work, but I'm not sure about the Cygwin runtime library.
> Maybe you could test it under Cygwin?

Yes, I've applied the patch, recompile under cygwin, and it works
w/o MD5 problems:

G:\temp\clamav1\bin>freshclam.exe
ClamAV update process started at Wed Feb 11 21:11:40 2004
SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES
Reading CVD header (main.cvd): OK
main.cvd is up to date (version: 19, sigs: 19987, f-level: 1, builder: ddm)
Reading CVD header (daily.cvd): OK
Downloading daily.cvd [*]
daily.cvd updated (version: 126, sigs: 688, f-level: 1, builder: tomek)
Database updated (20675 signatures) from database.clamav.net
(209.204.175.217)

Please checkout this patched manager.c into the CVS.




---
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] Re: clamav-devel 20040213 for windows

2004-02-16 Thread Andrey Cherezov
> Date: Mon, 16 Feb 2004 16:15:58 +0700
> From: "Fajar A. Nugraha" <[EMAIL PROTECTED]>
> Subject: Re: [Clamav-users] Re: clamav-devel 20040213 for windows

> Just as I thought. ANyway, the developers seems to have fixed this by
> adding O_BINARY (again) for Cygwin build only.
> As usual, you can get my precompiled daily build on www.clamav.or.id.
> Tested it earlier, and it works fine.

In this your clamav/Windows build there is fixed 'MD5 problem',
but seems not fixed temporary file creation error in mbox.c:
this version failed to recognize most of real viruses.
Here is result of small check on virus archive - found only 26
viruses from 179.

--- SCAN SUMMARY ---
Known viruses: 20724
Scanned directories: 1
Scanned files: 179
Infected files: 26
Data scanned: 55.32 MB
I/O buffer size: 131072 bytes
Time: 31.360 sec (0 m 31 s)

Fajar, the right version of mbox.c is 1.40 and 1.42-44.
1.41 - wrong.

The fixed version (posted to ftp://bitrix.eserv.ru/download/clamav1.rar
11.Feb.2004) works on any windows (with or w/o cygwin installed,
not depends of LF/CRLF cygwin settings), clamDscan not inserts /cygdrive/,
detects all viruses in virus archive, could be installed in any directory...
--- SCAN SUMMARY ---
Infected files: 179
Time: 70.156 sec (1 m 10 s)




---
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] RE: clamav-devel 20040213 for windows

2004-02-14 Thread Andrey Cherezov
> From: "Brian Bruns" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Date: Fri, 13 Feb 2004 23:41:59 -0500
> Subject: [Clamav-users] clamav-devel 20040213 for windows
> Reply-To: [EMAIL PROTECTED]
>
> Ok, I finished it up quickly and uploaded, so enjoy.
>
> http://www.sosdg.org/clamav-win32/clamav-devel.exe
>
> Major changes in this version are cygwin 1.5.7 DLLs which
> fixes some version
> mismatch issues, latest CVS source used to build the binary.
>
> Give it a try, if theres problems, let me know.

Brian,
this version still have old 'MD5 problem' in freshclam.exe:
   Reading CVD header (daily.cvd): OK
   Downloading daily.cvd [*]
   ERROR: Verification: MD5 verification error.
   Trying again...
and the old problem in clamd.exe with binary temporary files
(as result this version often failed to detect Worm.SCO virus
in zip files).

Both problems was fixed few days ago. You seems used the old
code to compile these binaries. The file manager.c on the
anonymous CVS still old (9.Feb, but fixes made 11.Feb!),
you should use a path from Ian Abbott (attached) - this
solves cvd md5 problem.

And please check you're using current mbox.c
 * $Log: mbox.c,v $
 * Revision 1.41  2004/02/12 18:43:58  nigelhorne
 * Use mkstemp on Solaris
 *
 * Revision 1.40  2004/02/11 08:15:59  nigelhorne
 * Use O_BINARY for cygwin
^


begin 666 freshclam-cvs-win32.patch
[EMAIL PROTECTED](&9R97-H8VQA;2]M86YA9V5R+F,-"CT]/3T]/3T]/3T]/3T]/3T]
M/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T]
M/3T]/3T-"E)#4R!F:6QE.B O8W9SPT**PEM<')I
M;G1F*") 0V%N)W0@;W!E;B!N97<@9FEL92 E2!B92!U;[EMAIL PROTECTED]'=H>2 _*2 J+PT*0$ @+34R
M."PW("LU,Shttp://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] mbox.c

2004-02-14 Thread Andrey Cherezov
Nigel,

Diff for /clamav/clamav-devel/libclamav/mbox.c between version 1.40 and
1.41:
http://cvs.sourceforge.net/viewcvs.py/clamav/clamav-devel/libclamav/mbox.c?r
1=1.40&r2=1.41
You deleted O_BINARY in v1.41 again?!
This is origin of problems with cygwin version, compiled by Brian Bruns.
Please fix this back.

The current CVS version (mbox.c 1.41) is not usable under Windows :(
1.40 - OK




---
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] Re: clamav-devel 20040213 for windows

2004-02-17 Thread Andrey Cherezov
>From: Fajar A. Nugraha <[EMAIL PROTECTED]>

> It seems Nigel already fixed that
> Which means starting from devel-20040215 the daily build should work
> fine too.

But clamav-devel-latest.cygwin.zip from 02/16/04 - didn't work fine :(
Will download more current version now...

> >The fixed version (posted to *ftp://bitrix.eserv.ru/download/clamav1.rar*
> >
> >
> Are you sure? There's now folder called "download" there.
> There's pub, addons, eserv, but no download.

Sorry, there must be "http" instead of "ftp".
http://bitrix.eserv.ru/download/clamav1.rar

> >11.Feb.2004) works on any windows (with or w/o cygwin installed,
> >not depends of LF/CRLF cygwin settings), clamDscan not inserts
/cygdrive/,
> >detects all viruses in virus archive, could be installed in any
directory...
> >
> >
> Is it modified source code or do you compile it in a special way?
> You probably should submit the diffs to clamav developers so this change
> can be incorporated into future releases.

Yes, this was modified sources - mbox.c and manager.c. My 'O_BINARY' fixes
already incorporated into the CVS version.

> If you compile it in a special way, then I really like to know how :)
I modified also 'configure' and 'libtool' script to not require absolute
paths. Then compile sources with this script:
#!/bin/sh
host=i686-pc-cygwin
target=i686-pc-cygwin
prefix=.
sbindir=.
sysconfdir=.
MY_CFLAGS="-O2"
MY_LDFLAGS=
  CFLAGS="${MY_CFLAGS}" LDFLAGS="${MY_LDFLAGS}" \
  configure \
  --prefix=${prefix} \
  --exec-prefix=${prefix} --sysconfdir=${sysconfdir} \
  --libdir=${prefix}/lib --includedir=${prefix}/include \
  --mandir=${prefix}/man --infodir=${prefix}/info \
  --libexecdir='${sbindir}' --localstatedir=/var \
  --datadir='${prefix}/db' --disable-clamav --enable-shared \
  --enable-static
make
I do not know how to modify 'configure' in unix compatible way.




---
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] RE: clamav-devel 20040213 for windows

2004-02-17 Thread Andrey Cherezov
> >From: Fajar A. Nugraha <[EMAIL PROTECTED]>
>
> > It seems Nigel already fixed that
> > Which means starting from devel-20040215 the daily build
> should work
> > fine too.
>
> But clamav-devel-latest.cygwin.zip from 02/16/04 - didn't work fine :(
> Will download more current version now...

The same problem with the
clamscan.exe 383090 17.02.04 06:18
from http://clamav.or.id/snapshot/clamav-devel-latest.cygwin.zip
it not detects MyDoom (Worm.SCO.A), Sircam and some others viruses.
On the WinXP PC with Cygwin installed.

Looks strange. I will test it on other PC (Win2003 w/o cygwin).




---
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] RE: clamav-devel 20040213 for windows

2004-02-17 Thread Andrey Cherezov
> The same problem with the
> clamscan.exe 383090 17.02.04 06:18
> from http://clamav.or.id/snapshot/clamav-devel-latest.cygwin.zip
> it not detects MyDoom (Worm.SCO.A), Sircam and some others viruses.
> On the WinXP PC with Cygwin installed.
>
> Looks strange. I will test it on other PC (Win2003 w/o cygwin).

On the Win2003 Server this clamscan.exe build also NOT detects MyDoom.
And clamDscan.exe not usable because inserts /cygdrive/... in the path,
and clamD.exe unable to use such path:

clamdscan.exe C:\Eserv3-mail\DATA\infected
/cygdrive/c/Eserv3-mail/DATA/infected/C:\Eserv3-mail\DATA\infected: Can't
access the file ERROR




---
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] RE: clamav-devel 20040213 for windows

2004-02-17 Thread Andrey Cherezov
> > The same problem with the
> > clamscan.exe 383090 17.02.04 06:18
> > from http://clamav.or.id/snapshot/clamav-devel-latest.cygwin.zip
> > it not detects MyDoom (Worm.SCO.A), Sircam and some others viruses.
> > On the WinXP PC with Cygwin installed.

I found, this problem in the clamscan.exe itself.
But clamDscan.exe (via clamd.exe) detects all viruses successfully now.

The only required additional fix - change the file clamdscan/client.c:
line 219:
under cygwin use
sprintf(file, "%s", opt->filename);
instead of original
sprintf(file, "%s/%s", cwd, opt->filename);
Because in cygwin getcwd() returns /cygdrive/... confusing clamd.exe





---
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] RE: clamav-devel 20040213 for windows

2004-02-17 Thread Andrey Cherezov
> I found, this problem in the clamscan.exe itself.
It not read clamav.conf and not autodetects many mailbox
formats. But works fine when options set in command line.

> Is it modified source code or do you compile it in a special way?

Below are changes made in 'configure' script to allow
using clamav under windows with any paths. Just deleted path checks :)
The binary build compiled with these and previous patches from the
current CVS sources available for tests from:
http://bitrix.eserv.ru/download/clamav3.rar  (1.7 Mb)
(works in any directory and clamdscan not inserts /cygdrive)

* configure
# Be sure to have absolute paths.
#for ac_var in exec_prefix prefix
#do
#  eval ac_val=$`echo $ac_var`
#  case $ac_val in
#[\\/$]* | ?:[\\/]* | NONE | '' ) ;;
#*)  { echo "$as_me: error: expected an absolute directory name for
--$ac_var: $ac_val" >&2
#   { (exit 1); exit 1; }; };;
#  esac
#done

* CONFIGURE.ORIG
# Be sure to have absolute paths.
for ac_var in exec_prefix prefix
do
  eval ac_val=$`echo $ac_var`
  case $ac_val in
[\\/$]* | ?:[\\/]* | NONE | '' ) ;;
*)  { echo "$as_me: error: expected an absolute directory name for
--$ac_var: $ac_val" >&2
   { (exit 1); exit 1; }; };;
  esac
done

*

* configure
# Be sure to have absolute paths.
#for ac_var in bindir sbindir libexecdir datadir sysconfdir sharedstatedir \
#  localstatedir libdir includedir oldincludedir infodir mandir
#do
#  eval ac_val=$`echo $ac_var`
#  case $ac_val in
#[\\/$]* | ?:[\\/]* ) ;;
#*)  { echo "$as_me: error: expected an absolute directory name for
--$ac_var: $ac_val" >&2
#   { (exit 1); exit 1; }; };;
#  esac
#done

* CONFIGURE.ORIG
# Be sure to have absolute paths.
for ac_var in bindir sbindir libexecdir datadir sysconfdir sharedstatedir \
  localstatedir libdir includedir oldincludedir infodir mandir
do
  eval ac_val=$`echo $ac_var`
  case $ac_val in
[\\/$]* | ?:[\\/]* ) ;;
*)  { echo "$as_me: error: expected an absolute directory name for
--$ac_var: $ac_val" >&2
   { (exit 1); exit 1; }; };;
  esac
done

*

* ltmain.sh
  # We need an absolute path.
# case $arg in
# [\\/]* | [A-Za-z]:[\\/]*) ;;
# *)
#   $echo "$modename: only absolute run-paths are allowed" 1>&2
#   exit 1
#   ;;
# esac
  if test "$prev" = rpath; then
* LTMAIN.ORIG
  # We need an absolute path.
  case $arg in
  [\\/]* | [A-Za-z]:[\\/]*) ;;
  *)
$echo "$modename: only absolute run-paths are allowed" 1>&2
exit 1
;;
  esac
  if test "$prev" = rpath; then
*

* ltmain.sh
# We need an absolute path.
#   case $dir in
#   [\\/]* | [A-Za-z]:[\\/]*) ;;
#   *)
# $echo "$modename: only absolute run-paths are allowed" 1>&2
# exit 1
# ;;
#   esac
case "$xrpath " in
* LTMAIN.ORIG
# We need an absolute path.
case $dir in
[\\/]* | [A-Za-z]:[\\/]*) ;;
*)
  $echo "$modename: only absolute run-paths are allowed" 1>&2
  exit 1
  ;;
esac
case "$xrpath " in
*

Run configure:
prefix=.
sbindir=.
sysconfdir=.
MY_CFLAGS="-O2"
MY_LDFLAGS=
  CFLAGS="${MY_CFLAGS}" LDFLAGS="${MY_LDFLAGS}" \
  configure \
  --prefix=${prefix} \
  --exec-prefix=${prefix} --sysconfdir=${sysconfdir} \
  --libdir=${prefix}/lib --includedir=${prefix}/include \
  --mandir=${prefix}/man --infodir=${prefix}/info \
  --libexecdir='${sbindir}' --localstatedir=/var \
  --datadir='${prefix}/db' --disable-clamav --enable-shared \
  --enable-static




---
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] cvd digital signatures in clamav under windows - OK !

2004-02-17 Thread Andrey Cherezov
I'm recompiled clamav under cygwin with GNU MP enabled (static)
to support digital signatures.

clamd:
LibClamAV debug: ./share/clamav/daily.cvd: CVD file detected
LibClamAV debug: in cli_cvdload()
LibClamAV debug: MD5(.tar.gz) = fdb603f18c089ba34fef74c8a87bec85
LibClamAV debug: Decoded signature: fdb603f18c089ba34fef74c8a87bec85
LibClamAV debug: Digital signature is correct.

and no more 'SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES'
warnings from freshclam.exe.

This new test build: http://bitrix.eserv.ru/download/clamav4.rar (1.9 Mb)




---
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] clamav/windows: 15 viruses per second :)

2004-02-17 Thread Andrey Cherezov
clamd+clamDscan under Windows 2003 PIII/1GHz
--- SCAN SUMMARY ---
Infected files: 7611
Time: 478.706 sec (7 m 58 s)




---
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] something wrong with main.cvd or new clamd (?) cygwin

2004-02-29 Thread Andrey Cherezov
I compiled the clamd.exe from current cvs - under cygwin.
It loads and works OK with these files:

main.cvd 1037239 bytes
daily.cvd 72297 bytes

But now freshclam downloaded the new (?) version of these files:
ClamAV update process started at Sat Feb 28 23:32:57 2004
Reading CVD header (main.cvd): OK
Downloading main.cvd [*]
main.cvd updated (version: 20, sigs: 20112, f-level: 1, builder: tkojm)
Reading CVD header (daily.cvd): OK
Downloading daily.cvd [*]
daily.cvd updated (version: 146, sigs: 235, f-level: 1, builder: tkojm)
Database updated (20347 signatures) from database.clamav.net
(62.210.153.201)

main.cvd 945575 bytes
daily.cvd 28393 bytes

And clamd failed to load it! :

LibClamAV debug: Loading ./share/clamav/main.cvd
LibClamAV debug: ./share/clamav/main.cvd: CVD file detected
LibClamAV debug: in cli_cvdload()
LibClamAV debug: MD5(.tar.gz) = 10732d823251ab960c53e87e20f0755f
LibClamAV debug: Decoded signature: 10732d823251ab960c53e87e20f0755f
LibClamAV debug: Digital signature is correct.
LibClamAV debug: in cli_untgz()
LibClamAV debug: Unpacking /tmp/8b07be1b75074c3b/COPYING
LibClamAV debug: Unpacking /tmp/8b07be1b75074c3b/viruses.db
LibClamAV debug: Loading databases from /tmp/8b07be1b75074c3b
LibClamAV debug: Loading /tmp/8b07be1b75074c3b/viruses.db
LibClamAV debug: parse_add() return code: -5
LibClamAV Error: readdb(): Malformed pattern line 5526 (file
/tmp/8b07be1b75074c3b/viruses.db).
LibClamAV debug: cl_loaddbdir(): error loading database
/tmp/8b07be1b75074c3b/viruses.db

Old clamd.exe version (from 02/17/2004 cvs) load the same file w/o error
message:
LibClamAV debug: Loading ./share/clamav/main.cvd
LibClamAV debug: ./share/clamav/main.cvd: CVD file detected
LibClamAV debug: in cli_cvdload()
LibClamAV debug: MD5(.tar.gz) = 10732d823251ab960c53e87e20f0755f
LibClamAV debug: Decoded signature: 10732d823251ab960c53e87e20f0755f
LibClamAV debug: Digital signature is correct.
LibClamAV debug: Digital signature verification OK.
LibClamAV debug: in cli_untgz()
LibClamAV debug: Unpacking /tmp/0434500120c7c020/COPYING
LibClamAV debug: Unpacking /tmp/0434500120c7c020/viruses.db
LibClamAV debug: Loading databases from /tmp/0434500120c7c020
LibClamAV debug: Loading /tmp/0434500120c7c020/viruses.db




---
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users


[Clamav-users] RE: The windows binary is getting old (Brad Morgan)

2004-03-10 Thread Andrey Cherezov
> The Windows binary is getting old.  I believe its a
> development version
> prior to .66.  I'd like to get a .67-1 (or later) version.
>
> I've got Cygwin installed on one of my computers.  Can I
> build it myself?
> If so, is there a how-to or an old mailing list message with
> instructions?

Just run the 'configure' script there and then 'make'.
Or you can use the precompiled binaries from
http://bitrix.eserv.ru/download/clamav6.rar
(this is a 6.Mar.2004 dev version with ArchiveDetectEncrypted
support)




---
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
___
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users