[clamav-users] Problems compiling CVS Snapshots

2003-07-11 Thread Kevin Hanser
Title: Message I'm having trouble getting a CVS snapshot to compile on a RH9 system.  I've never had a problem compiling any of the releases before, and I'm currently running 0.60.  However, when I've tried to compile a CVS snapshot, it keeps erroring out during the compile.  I tried with th

Re: [clamav-users] Invisible Virus

2003-07-11 Thread René Bellora
>What's the password? virus René - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: [clamav-users] Invisible Virus

2003-07-11 Thread Antony Stone
On Friday 11 July 2003 4:44 pm, Rodrigo Severo wrote: > I believe that this is the Keylogger.Trojan as per Symantec definition: > . Having finally got my hands on Msdosdll.exe, I see that Kaspersky detects it as "Bac

Re: [clamav-users] Invisible Virus

2003-07-11 Thread Antony Stone
On Friday 11 July 2003 5:53 pm, Antony Stone wrote: > What's the password? It's okay: I finally guessed "virus" :) Antony. -- Anyone that's normal doesn't really achieve much. - Mark Blair, Australian rocket engineer - To

Re: [clamav-users] Invisible Virus

2003-07-11 Thread Antony Stone
On Friday 11 July 2003 4:29 pm, René Bellora wrote: > hi! > > it's a rar archive. One of the file contained in it, 'Msdosdll.exe' is > detected by McAfee as a trojan, but not the container (?). Clamscan doesn't > detect either one. I'm attaching Msdosdll.exe What's the password? Antony. -- Al

Re: [clamav-users] Invisible Virus

2003-07-11 Thread Rodrigo Severo
Ted Fines wrote: None of the systems I have run it through think this is a virus. Here are the systems that did not detect it (note four different vendors). (1) Norton Antivirus/Windows (2) Command Antivirus/Netware (I emailed the unzipped file as an attachment from my webmail account at www.my

Re: [clamav-users] Invisible Virus

2003-07-11 Thread Mário Luis Ghoneim
Warning... Run the Orcamento.exe. It 'll intall the MsdosDll.exe Mário - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: [clamav-users] Invisible Virus

2003-07-11 Thread Antony Stone
On Friday 11 July 2003 3:48 pm, Mário Luis Ghoneim wrote: > You must to run it. > > After this it install the files with the virus... > > Try again, please. How about: _you_ run it on _your_ machine, and then send us the file you think is a virus? I don't have a Windows machine on which I am pr

Re: [clamav-users] Invisible Virus

2003-07-11 Thread Antony Stone
On Friday 11 July 2003 11:54 am, Mário Luis Ghoneim wrote: > Hi, > > This file MsdosDll.exe was attached and it was infected with > Keylogger.Trojan The file which you have provided for us to download from the web, filevirus.zip, contains a single large file called Orcamento.exe, which my scan

Re: [clamav-users] Invisible Virus

2003-07-11 Thread Mário Luis Ghoneim
You must to run it. After this it install the files with the virus... Try again, please. Mário. - Original Message - From: "Ted Fines" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, July 11, 2003 11:34 AM Subject: Re: [clamav-users] Invisible Virus > None of the systems I

Re: [clamav-users] Invisible Virus

2003-07-11 Thread Ted Fines
None of the systems I have run it through think this is a virus. Here are the systems that did not detect it (note four different vendors). (1) Norton Antivirus/Windows (2) Command Antivirus/Netware (I emailed the unzipped file as an attachment from my webmail account at www.myrealbox.com, whic

Re: [clamav-users] Invisible Virus

2003-07-11 Thread Mário Luis Ghoneim
> Can you post the file on some URL so we can download it It is here http://jcradios.com.br/virusfile/ Mário. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

[clamav-users] Help ,.........

2003-07-11 Thread Svetlin Ivanov
 SI> I'm a newbie with ISP archive can you help me .  SI> I need to run mgetty+pppd 2.4.1+pptpd (MSChap v2 +mppe)+(icradius  SI> the last for redhat system rh9)  SI> can you send me any good patches for this or something else to solve  SI> this big problem for me I'm trying long time to ru

Re: [clamav-users] Clamd with Clamav-Milter, Sendmail 8.12.9 timeout lockup?

2003-07-11 Thread Nigel Horne
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ta. This time you remembered to attached the files :-) - -Nigel - -- Nigel Horne. Arranger, Composer, Conductor, Typesetter. Owner of the brass band group of the Internet. ICQ#20252325 [EMAIL PROTECTED] http://www.bandsman.co.uk/music.htm -BEGIN

Re: [clamav-users] Invisible Virus

2003-07-11 Thread Ted Fines
Can you post the file on some URL so we can download it? Or, zip it with a password and email me/us the zipfile/password so we can take a look at it. Ted --On Friday, July 11, 2003 7:54 AM -0300 Mário Luis Ghoneim <[EMAIL PROTECTED]> wrote: Hi, This file MsdosDll.exe was attached and it was

Re: [clamav-users] virus in MIME

2003-07-11 Thread Nigel Horne
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Friday 11 Jul 2003 11:32 am, Jordi Escolá \(Desarrollo\) wrote: > I using kaspersky and Mcafee too... and this antivirus checking directly > the mime files and detects all viruses... clamav don't detects viruses in > base64??? Yes. Use the "--mbox"

Re: [clamav-users] Clamd with Clamav-Milter, Sendmail 8.12.9 timeout lockup?

2003-07-11 Thread Nigel Kukard
Attached. -Nigel > > There is 2 buffer overrun possibilities which can cause assert()'s to be > > triggered, which takes down clamav-milter. > > > > I've sent patches through to Nigel Horne concerning this. > > I must have missed them. Please resend. > > - -Nigel > diff -c --new-file --recurs

Re: [clamav-users] virus in MIME

2003-07-11 Thread Mário Luis Ghoneim
> Did you give the "--mbox" option when scanning the file(s)? > What version of clamav are you How can I to do that? I use clamav-0.54. Tks. Mário - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail:

[clamav-users] Invisible Virus

2003-07-11 Thread Mário Luis Ghoneim
Hi, This file MsdosDll.exe was attached and it was infected with Keylogger.Trojan My clamav didn't get it. Some idea? --- SCAN SUMMARY --- Known viruses: 8745 Scanned directories: 1 Scanned files: 2 Infected files: 1 Data scanned: 0.07 Mb I/O buffer size: 131072 bytes Time: 7.7

Re: [clamav-users] virus in MIME

2003-07-11 Thread Jordi Escolá (Desarrollo)
I using kaspersky and Mcafee too... and this antivirus checking directly the mime files and detects all viruses... clamav don't detects viruses in base64??? I need scan virus with a command line... - Original Message - From: "Franky Van Liedekerke" <[EMAIL PROTECTED]> To: <[EMAIL PROTECT

Re: [clamav-users] virus in MIME

2003-07-11 Thread Nigel Horne
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Friday 11 Jul 2003 10:25 am, Jordi Escolá \(Desarrollo\) wrote: > (sorry for my english) Well I'm sure it'll be better than my Catalan... > Hi I'm tried clamav antivirus with many infected files, but the antivirus > no detects the new viruses and

Re: [clamav-users] virus in MIME

2003-07-11 Thread Franky Van Liedekerke
Hi, If you want to do mailfile checking, with mime attachments and such, it's best to let another tool (like amavisd-new) do the unpacking and breaking up of the mail first, and let clamav scan the resulting files. Franky On Fri, 11 Jul 2003 11:25:26 +0200 Jordi Escolá (Desarrollo) <[EMAIL PROTE

[clamav-users] virus in MIME

2003-07-11 Thread Jordi Escolá (Desarrollo)
(sorry for my english) Hi I'm tried clamav antivirus with many infected files, but the antivirus no detects the new viruses and other viruses attached in a mail file... ie .scr,.pif... I have the las virus database definition... any body can help me???' TIA (from Barcelona!) --

Re: [clamav-users] Clamd with Clamav-Milter, Sendmail 8.12.9 timeout lockup?

2003-07-11 Thread Nigel Horne
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Friday 11 Jul 2003 10:11 am, Nigel Kukard wrote: > There is 2 buffer overrun possibilities which can cause assert()'s to be > triggered, which takes down clamav-milter. > > I've sent patches through to Nigel Horne concerning this. I must have misse

[clamav-users] Re: Clamd with Clamav-Milter, Sendmail 8.12.9 timeout lockup?

2003-07-11 Thread Margit Meyer
Hi, I had similar problems with crashing clamd and clamav-milter on Solaris 8. In this newsgroup I was told that this is a known problem - the mail scanning engine still isn' t perfect. I was adviced not to use the milter but MailScanner (http://www.sng.ecs.soton.ac.uk/mailscanner/) and clamscan.

Re: [clamav-users] Clamd with Clamav-Milter, Sendmail 8.12.9 timeout lockup?

2003-07-11 Thread Nigel Kukard
There is 2 buffer overrun possibilities which can cause assert()'s to be triggered, which takes down clamav-milter. I've sent patches through to Nigel Horne concerning this. You can also try our fork of clamav-milter which is a standalone package... ivs-milter, http://freshmeat.net/projects/ivs

Re: [clamav-users] Clamd with Clamav-Milter, Sendmail 8.12.9 timeout lockup?

2003-07-11 Thread Ludek Finstrle
> To add to this thread. > > It seems to hang on quite a few (not all) Session TimeOuts and ALL > 'WARNING: ScanStream: Size exceeded' events I have same problem. I have low traffic and this situation come when too e-mails is coming at the same time. BTW isn't it problem on SMP machines? I have