Re: [clamav-users] Condition: start condition failed at Fri 2017-03-17 14:45:52 IST; 42min ago
On Fri, Mar 17, 2017 at 05:43:21PM +0100, Reindl Harald wrote: > > > Am 17.03.2017 um 17:35 schrieb Baskaranand: > >Hi, > > > >Ububtu 16.04.2 server edition > > > >ClamAV 0.99.2 installed > > > >postfix 3.1.0-3 installed > > > >I could not reload the clamav-daemon.service due to the below issue. > > > >How to solve it > > man freshclam Executing a simple "restart" (or "stop/start") doesn't work? gc ___ clamav-users mailing list clamav-users@lists.clamav.net http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] Condition: start condition failed at Fri 2017-03-17 14:45:52 IST; 42min ago
On Sat, Mar 18, 2017 at 11:37:29AM +0100, Reindl Harald wrote: > > > Am 17.03.2017 um 22:11 schrieb Gian Carlo: > >On Fri, Mar 17, 2017 at 05:43:21PM +0100, Reindl Harald wrote: > >> > >>Am 17.03.2017 um 17:35 schrieb Baskaranand: > >>>Hi, > >>> > >>>Ububtu 16.04.2 server edition > >>> > >>>ClamAV 0.99.2 installed > >>> > >>>postfix 3.1.0-3 installed > >>> > >>>I could not reload the clamav-daemon.service due to the below issue. > >>> > >>>How to solve it > >> > >>man freshclam > >Executing a simple "restart" (or "stop/start") doesn't work? > > why don't you just do "man freshclam" > > when the service tells you that you did not have any signatures you > need download and update the signatures and hance read the manpgae > of freshclam - how would restart the service magically change that? You are right, but the message said clamd was inactive (dead) and not running "42min ago" In the meanwhile freshclam might have download the signatures (provided it too were not inactive) ___ clamav-users mailing list clamav-users@lists.clamav.net http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [Clamav-users] Freshclam Error
On Mon, Aug 24, 2009 at 12:43:03PM -0400, Carlos Williams wrote: > I noticed this morning on my Debian mail server that when I attempt to > run the "freshclam" command from the CLI, I get the following error: > > mail:~# freshclam > ERROR: /var/log/clamav/freshclam.log is locked by another process > ERROR: Problem with internal logger (UpdateLogFile = > /var/log/clamav/freshclam.log). [...] > Does anyone know what is causing the error when I try and run > "freshclam" manually? It appears to happen every hour automatically > but I would think that I can force it whenever I please as well, no? To force the updating process in Debian, usually, you have to restart the daemon (that is locking the log file): -> /etc/init.d/clamav-freshclam restart Ciao, gc :-) ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] Freshclam Error
On Tue, Aug 25, 2009 at 11:04:30AM -0400, Carlos Williams wrote: > > -> /etc/init.d/clamav-freshclam restart > > So if I manually run the 'freshclam' daemon, then it will lock it up? The log is locked by the daemon. > Should I never manually run this and just let the 'cron' job to auto > update this? Updates are performed by the daemon, not via a cron job, if you chose so during installation. You can fine tune it with the "Checks" parameter in "/etc/clamav/freshclam.conf". If you chose to update via cron job, the script "/etc/init.d/clamav-freshclam" says: "If user wants it run from cron, we only accept no-daemon and stop" Ciao, gc :-) ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
Re: [Clamav-users] Debian 0.90.1-0vol
On Wed, Mar 07, 2007 at 10:41:42PM -0800, [EMAIL PROTECTED] wrote: > I see a new lib - libclamav2, and the new version of clamav is available > on volatile now. What precautions or config updates should I do before > updating this on a running mail server. I have just upgraded several machines from "volatile". As usual, backup your .conf files before update. The only thing I had to fix was the "NotifyClamd" option: ---> NotifyClamd /etc/clamav/clamd.conf instead of "...true". I googled *before* trying the too easy "man freshclam.conf". ;-) Anyway, *thanks, Stephen!!!*. gc :-) ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] debian packages
On Wed, Dec 15, 2004 at 02:44:42PM +0100, Steffen Heil wrote: > Hi > > Does someone know how to contact "Stephen Gran", the debian package > maintainer for clamav? Maintainer: Stephen Gran <[EMAIL PROTECTED]> Bye, gc :-) ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] debian packages
On Wed, Dec 15, 2004 at 05:32:58PM +0100, Steffen Heil wrote: > Hi > > > Maintainer: Stephen Gran <[EMAIL PROTECTED]> > > How did you get that? > apt-cache showpkg clamav did not show something like this for me... --- [EMAIL PROTECTED]:~$ apt-cache show clamav Package: clamav Priority: optional Section: utils Installed-Size: 1320 Maintainer: Stephen Gran <[EMAIL PROTECTED]> [...] --- Bye, gc :-) ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] how to change clamav's warning message?
On Mon, Dec 27, 2004 at 11:00:24AM +0100, Andreas Kotowicz wrote: > Hi, > > I'm using clamav together with amavisd-new. emails get virus checked and > then delivered to the user. if an email contains a virus then there's > following message displayed: "WARNING: contains virus Worm.Sober.I" > how can I change this message? I didn't find any config options for > customizing the message. Using Debian, you can find templates in "/etc/amavis" + the value of the variable "read_l10n_templates" you set in "amavisd.conf". I don't know other custmizations by other distros. Bye, gc :-) ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] mails not getting scanned
On Tue, Jan 18, 2005 at 05:14:33PM +0100, Torsten Bauer wrote: > > > > [...] > any idea what is going wrong? Yes, I suspect it has something to do with the format of your message... :-/ Bye, gc :-) ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Clamav upgrade 0.80-0.81rc1-1
On Thu, Jan 27, 2005 at 10:08:08AM -, Christopher Roberts wrote: > I 'had' a beautiful Clamd installation working on a Debian distribution > with MIMEDefang. > Replacing config file /etc/clamav/freshclam.conf with new version > Starting ClamAV virus database updater: ERROR: Number of checks must be > a positive integer. Check the value of "Checks" in /etc/clamav/freshclam.conf (defaults to 12, I think) > subprocess post-installation script returned error exit status 41 Have you tried "dpkg-reconfigure clamav"? Bye, gc :-) ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] Clamav upgrade 0.80-0.81rc1-1
On Thu, Jan 27, 2005 at 12:12:09PM -, Christopher Roberts wrote: > > Check the value of "Checks" in /etc/clamav/freshclam.conf (defaults to > > 12, I think) > > Thanks GC, you're a genius. Or perhaps I'm just stupid - ... Please don't exagerate: you're NOT stupid!!! ;-) bye, gc :-) ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Re: [Clamav-users] false positives
On Tue, Feb 22, 2005 at 01:47:17PM +, david thompson wrote: > I scanned a windows fat32 partition yesterday and one 'found' was reported. > > I went on to the web to find what 'w32.cih.1003' is. Its a trojan. At > this point I scan the file with f-prot. Nothing found. > > I then download avg - the free windows virus scanner. install it and > get the latest definitions. I scan in windows using avg. Nothing found. When Clamav started blocking "Trojan.Downloader.Small-165" at the end of january, F-prot went on for nearly a week telling the file was ok. F-prot started recognizing the "Bagle variant" *AFTER* I uploaded the attachment. It may happen, I have NOT lost my good opinion in f-prot. BTW... Thanks to all clamav-people! Bye, gc :-) ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Graphical reporting tools
On Sun, Mar 06, 2005 at 01:04:04PM -0500, John Fleming wrote: > >>Vijay's script works fine - see > >>http://www.bandsman.co.uk/cgi-bin/virus/display.pl > > How to get that script? The www.ericavijay.net/cgi-bin/virus/display.pl > link on ericavijay.net just points to a sample html page rather than the > script... http://pandaemail.sourceforge.net/download/perl-install.tgz Bye, gc :-) ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Load averages going too high when doing a full clamscan
On Thu, Apr 28, 2005 at 04:18:41PM -0400, Chris de Vidal wrote: > Have you ever lied, no matter the color? I have. Have you ever stolen > anything, no matter the value? I have. Have you ever lusted? I have. > Jesus said whoever looks at a woman with lustful intent has already > committed adultery with her in his heart. > > We are lying, thieving, adulterers at heart and will face judgement one day. > > There is good news for us! "God shows his love for us in that while we > were still sinners, Christ died for us. Since, therefore, we have now > been justified by his blood, much more shall we be saved by him from the > wrath of God." (Romans 5:8,9) I remember I read something about netquette and length of signatures... gc :-) ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Clamav Log file
On Fri, Apr 29, 2005 at 08:31:26AM +0100, Rawnak wrote: > I use clamav 0.83 on Debian. I upgrade it using the deb package > > Ever since I upgrade to this version, I do not get an virus info in my > /var/log/clamav/clamav.log file. You have... > LogSyslog ...in clamd.conf. You can find "missing" virus infos in "/var/log/syslog". You could disable that line by hand or (more polite) by using "dpkg-reconfigure clamav-daemon" to have all logs in clamav.log. Bye, gc :-) ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Re: Load averages going too high when doing a full clamscan
On Fri, Apr 29, 2005 at 09:14:08PM -0400, Tim Boyer wrote: > Is there any centralized spam scanner available for Linux, a la > Symantec Corporate? I'm using clam on my incoming mail servers, and > the Symantec product protecting the desktops. But it's the only > Windows server app I still have - if I could find a centralized system > that could run on Linux, I could dump Windows completely. Have a look at "razor" or "pyzor". gc :-) ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Virus not found by local clamscan
On Tue, Aug 16, 2005 at 11:53:35AM +0200, [EMAIL PROTECTED] wrote: > I am using the cygwin build of 0.86.2 (ClamAV devel-20050725 ... > I put the file online here: http://www.breaken.de/temp/Happy99.exe.virus Usually, they say it's not a good thing... Anyway, I downloaded your file. ;-) I still use old "ClamAV 0.84/1023/Mon Aug 15 22:15:08 2005" (Debian Sarge) but it says: "Happy99.exe.virus: Trojan.Happy99.SKA FOUND". Bye, gc :-) ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Virus not found by local clamscan
On Tue, Aug 16, 2005 at 11:53:35AM +0200, [EMAIL PROTECTED] wrote: > I put the file online here: Ops! Sorry for me too reporting the address. :-/ Bye, gc :-/ ___ http://lurker.clamav.net/list/clamav-users.html
Re: Re: [Clamav-users] Virus not found by local clamscan
On Tue, Aug 16, 2005 at 12:35:29PM +0200, [EMAIL PROTECTED] wrote: > >Usually, they say it's not a good thing... > > Sorry, but I rather put it online then sending it into a mailing-list. Forgive me: maybe I was too "purist". I realize there are better ways for a malicious person to get something harmful than monitoring a list like this. Bye, gc :-) ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] changing the message of clamav
On Mon, Jun 19, 2006 at 09:34:42AM +0530, Abhijit Chakraborty wrote: > I am facing one small problem. whenever i am sending an email with > virus to a particular email which is running clamav, the virus is > getting blocked and detected as expected. But the problem is that > clamav is sending a mail back to me about where the virus has been > quarantined. I had installed clamav with option of quarantine-dir > . The problem is that the location of quarantine-directory is also > being told in the message. Here is the message output. > > The message in question has been quarantined as > /etc/mail/quarantine/060614/k5E9dUur018967.Eicar-Test-Signature. > > Pls tell me how to stop this message from appearing I believe Clamav is not responsible for sending such a message. Are you using Amavis? Are you the person aliased as "virus_admin" (or something like that)? Bye, gc :-) ___ http://lurker.clamav.net/list/clamav-users.html
Re: [Clamav-users] Problems when i start the daemon
On Mon, Feb 19, 2007 at 11:42:03AM -0300, Michael Fern?ndez M. wrote: > Starting ClamAV daemon: clamdERROR: Problem with internal logger. Please > check the permissions on the /var/log/clamav/clamav.log file. > failed! > > I do not understand why if the permissions are ok. (i did not touch > them) > > -rw-r- 1 clamav adm 4325 2007-02-19 10:41 clamav.log > -rw-r- 1 clamav adm 15887 2007-02-18 06:39 clamav.log.1 > > i just upgrade the version. from 0.88.7-1 to 0.88.7-2 (from debian > volatile) Me too. You just need to kill the pid of running daemons clamd and freshclam. A simple "/etc/init.d/clamav-daemon restart" (or "stop" "start") won't work. Then, "/etc/init.d/clamav-daemon restart" will go, showing the usual "outdated" warning. Bye, gc :-) ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html
Re: [clamav-users] Segregating database definitions in different subdirectories
Il 2019-05-15 8:23 Olivier via clamav-users ha scritto: What's the reason for segregation? You can easily add your own unofficial signatures to the regular directory to have ClamAV use them all. Just to keep the things clean. Otherwise you will have to run two occurrences of ClamAV pointing to those two directories. No, i would like to have one signel occurence of ClamAV using both directories if that is possible. You may create a link in Clamav directory pointing to your local directory/file gc ___ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] Duplicate database, 525 minutes to complete, >90% CPU
Il 2019-05-21 2:08 Clark Dunson via clamav-users ha scritto:
> Hello;
>
> Running for 525 minutes at >90% CPU seems not good. Causes noticeable delay
> in command line activity for all users.
>
> We've got this cronjob:
>
> 30 1 * * * /usr/bin/freshclam 2>&1 && /usr/bin/clamscan -o -i -r --quiet / |
> mail -s "Clam AV Scan Results for $(hostname -s)" itd...@domain.com
It looks like you are scanning the whole the system ("/"), thus
including "/dev", "/proc"...
I believe this may result a hard work
Obviously you can exclude any apparent hardware failure, can't you?
Bye,
Gian Carlo
___
clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/contact.html#ml
