[clamav-users] ClamAV stopped detecting viruses

2002-10-25 Thread Mike Burkhouse
Hi All, I am using: ClamAV 0.22 - spamd Spamassassin 2.31 RedHat Linux 7.3 qmail-scanner 1.13 qmail 1.03 Everything was working fine until early this week, my Norton caught 2 emails infected with klez and now I just got one with nimda that fell through the filter. I continue to get warnings abo

[clamav-users] Creating an original signature...

2002-10-25 Thread Scott Medlock
Has anyone created an original signature to add to the virus.db file? It's a text email (not attachment)... I'm using Amavis w/clamav and it's not quite clear to me how to get it done. (sigtool?) Specifically, I'm wanting to add the Friendgreetings permissive virus to what we reject as a virus.

Re: [clamav-users] Does clamav catch KLEZ??

2002-10-25 Thread Odhiambo Washington
* Eric Sandquist <[EMAIL PROTECTED]> [20021025 18:34]: wrote: > I have several of the KLEZ trapped in my linux box... ClamAv has > successfully caught it when sent through email using: ClamAv-0.51, > Amavis-NG, and Postfix Hello Eric, Amavis-NG refused to compile on my m

RE: [clamav-users] Does clamav catch KLEZ??

2002-10-25 Thread Eric Sandquist
I have several of the KLEZ trapped in my linux box... ClamAv has successfully caught it when sent through email using: ClamAv-0.51, Amavis-NG, and Postfix Eirc -Original Message- From: Odhiambo Washington [mailto:[EMAIL PROTECTED] Sent: Friday, October 25, 2002 4:22 AM To: [EMAIL PROT

Re: [clamav-users] Does clamav catch KLEZ??

2002-10-25 Thread Nigel Horne
On Friday 25 Oct 2002 1:40 pm, Odhiambo Washington wrote: > I did that but the error message is still there. > I bumped it again to 75 (silly me) and it stopped complaining... > I don't quite understand what the value does ;) Assuming that it doesn't contain personal information, any chance that

Re: [clamav-users] Does clamav catch KLEZ??

2002-10-25 Thread Odhiambo Washington
* Nigel Horne <[EMAIL PROTECTED]> [20021025 15:15]: wrote: > On Friday 25 Oct 2002 11:26 am, Odhiambo Washington wrote: > > > [EMAIL PROTECTED] /usr/local/var/archives/klez-v2 | clamscan --mbox - > > assertion "offset < MAXARGS" failed: file "message.c

Re: [clamav-users] Does clamav catch KLEZ??

2002-10-25 Thread Nigel Horne
On Friday 25 Oct 2002 11:26 am, Odhiambo Washington wrote: > [EMAIL PROTECTED] /usr/local/var/archives/klez-v2 | clamscan --mbox - > assertion "offset < MAXARGS" failed: file "message.c", line 215 > Abort One of the mail messages has more than MAXARGS in the MIME header information in the header.

Re: [clamav-users] Does clamav catch KLEZ??

2002-10-25 Thread Odhiambo Washington
* Tomasz Kojm <[EMAIL PROTECTED]> [20021025 13:11]: wrote: > > I am testing clamav this way: > > > > > > [EMAIL PROTECTED] ('tty') ~/public_html/Virus 159 -> sudo cat klez | clamscan > > --box - > > --mbox not a --box That was a

Re: [clamav-users] Does clamav catch KLEZ??

2002-10-25 Thread Tomasz Kojm
> I am testing clamav this way: > > > [EMAIL PROTECTED] ('tty') ~/public_html/Virus 159 -> sudo cat klez | clamscan --box - --mbox not a --box > This file is available at http://ns2.wananchi.com/~wash/Virus > and it's an mbox file which has mails infected with klez worm. > > Why does clamscan

[clamav-users] Does clamav catch KLEZ??

2002-10-25 Thread Odhiambo Washington
I am testing clamav this way: [EMAIL PROTECTED] ('tty') ~/public_html/Virus 159 -> sudo cat klez | clamscan --box - stdin: OK --- SCAN SUMMARY --- Known viruses: 7244 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 0.63 Mb I/O buffer size: 131072 bytes Tim

Re: [clamav-users] Fewer known viruses.

2002-10-25 Thread Tomasz Kojm
> That is correct? > > What I must todo after this? Recompile somethings or other thing. > > 100 Tks > It's correct. If you have changed the file from the amavis-ng sources, then you need to do 'make install' again. In other case you don't need to recompile amavis. Best regards, Tomasz