Re: [Clamav-users] Some basics doubts :)

2004-01-06 Thread Dilip M
On Tue, 6 Jan 2004 15:43:29 +0100, Tomasz Kojm <[EMAIL PROTECTED]> wrote: On Tue, 06 Jan 2004 20:14:43 +0530 Dilip M <[EMAIL PROTECTED]> wrote: My clam-update.log is as aboveis it up2date ? Yes, your virus database is up to date. Best regards, Tomasz Kojm I tested using http://www.testvirus.o

Re: [Clamav-users] Some basics doubts :)

2004-01-06 Thread Dilip M
On Tue, 6 Jan 2004 21:58:07 +0100, Christoph Cordes <[EMAIL PROTECTED]> wrote: Hello Dilip, Tuesday, January 6, 2004, 3:44:43 PM, you wrote: DM> Hi, DM> I just got Clam-AV and Freshclam working :) Was little tough :( DM> I'm running Qmail on Redhat7.3 DM> # more /var/log/clam-update.log DM>

[Clamav-users] IMPORTANT: Huge database update coming soon

2004-01-06 Thread Tomasz Kojm
Hello, I'm proud to announce a really huge virus database update. During Christmas, our virus database maintainer Denis De Messemacker created over 7700 signatures (using sigtool, of course) from his virus collection. The signatures have been tested against 100 GB data of random files. Also they

Re: [Clamav-users] Some basics doubts :)

2004-01-06 Thread Christoph Cordes
Hello Dilip, Tuesday, January 6, 2004, 3:44:43 PM, you wrote: DM> Hi, DM> I just got Clam-AV and Freshclam working :) Was little tough :( DM> I'm running Qmail on Redhat7.3 DM> # more /var/log/clam-update.log DM> DM>

Re: [Clamav-users] clamscan --mbox doesn't detect a virus

2004-01-06 Thread René Bellora
Nigel Horne wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Monday 05 Jan 2004 6:12 pm, René Bellora wrote: Fedora Core 1 Same as me. I don't know what else to suggest. may be compare md5 hashes of the build directory? regards, René ---

Re: [Clamav-users] clamd not starting

2004-01-06 Thread Tomasz Kojm
On Tue, 6 Jan 2004 14:44:15 -0500 (EST) "Carl Holtje ;021;vcsg6;" <[EMAIL PROTECTED]> wrote: > In your shutdown scripts, you might include a little block similar to: > >if [ -S "/tmp/clamd" ] >then > `rm /tmp/clamd` >fi > > to ensure a clean restart... or enable FixStaleSocket

Re: [Clamav-users] clamd not starting

2004-01-06 Thread Carl Holtje ;021;vcsg6;
In your shutdown scripts, you might include a little block similar to: if [ -S "/tmp/clamd" ] then `rm /tmp/clamd` fi to ensure a clean restart... Carl On Tue, 6 Jan 2004, Matt wrote: > that did it! > blah... stupid little thing =) > > On Tue, 2004-01-06 at 14:03, Carl Holtje ;0

Re: [Clamav-users] clamd not starting

2004-01-06 Thread Matt
that did it! blah... stupid little thing =) On Tue, 2004-01-06 at 14:03, Carl Holtje ;021;vcsg6; wrote: > First thing to check: was the socket (/tmp/clamd) removed? > > If not, this will prevent clamd from loading... > > Hope it helps.. > > Carl > > > On Tue, 6 Jan 2004, Matt wrote: > > > I'

Re: [Clamav-users] clamd not starting

2004-01-06 Thread Carl Holtje ;021;vcsg6;
First thing to check: was the socket (/tmp/clamd) removed? If not, this will prevent clamd from loading... Hope it helps.. Carl On Tue, 6 Jan 2004, Matt wrote: > I'm running clamscan 0.65 and it was working until the server was > rebooted... now clamd won't start.. > [EMAIL PROTECTED] root]#

[Clamav-users] clamd not starting

2004-01-06 Thread Matt
I'm running clamscan 0.65 and it was working until the server was rebooted... now clamd won't start.. [EMAIL PROTECTED] root]# /usr/local/sbin/clamd -V clamd / ClamAV version 0.65 however doing a /usr/local/sbin/clamd just causes it to pause for a moment then return to the command prompt and it ne

Re: [Clamav-users] Some basics doubts :)

2004-01-06 Thread Tomasz Papszun
On Tue, 06 Jan 2004 at 20:14:43 +0530, Dilip M wrote: > > My clam-update.log is as aboveis it up2date ? Yes. > Sometime back read that if we send mail to some site,it will reply with > virus! Which ID ? so that i come to know that my clam-av in up2date and > working fine:) I don't know su

Re: [Clamav-users] Some basics doubts :)

2004-01-06 Thread Tomasz Kojm
On Tue, 06 Jan 2004 20:14:43 +0530 Dilip M <[EMAIL PROTECTED]> wrote: > My clam-update.log is as aboveis it up2date ? Yes, your virus database is up to date. Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] www.ClamAV.net (\/)\. http://www.clam

[Clamav-users] Some basics doubts :)

2004-01-06 Thread Dilip M
Hi, I just got Clam-AV and Freshclam working :) Was little tough :( I'm running Qmail on Redhat7.3 # more /var/log/clam-update.log ClamAV update process started at Tue Jan 6 20:03:08 2004 main.cvd is up to date (versio

Re: [Clamav-users] OLE2 unpacker

2004-01-06 Thread Trog
Quoting Tomasz Kojm <[EMAIL PROTECTED]>: > > Looks great. I will test it against our all infected word document > samples today night. If you need some samples just let me know. I've tested it against my collection of 345 Word and 58 Excel macro virus sample documents without any problems. At t

[Clamav-users] Exim paniclog says "clamd: buffer too small"

2004-01-06 Thread Mark Douglas
Hello I can't seem to find a reference to this anywhere. I'm running exim- 4.24 with exiscan-acl patch revision 13 and clamav 0.65. Clamd died on New Years Eve, causing all mail to be rejected with a 451. Simply restarting it resulted in its falling over regularly (apparently every time it en

Re: [Clamav-users] OLE2 unpacker

2004-01-06 Thread Tomasz Kojm
On Tue, 06 Jan 2004 12:56:06 + (GMT) Trog <[EMAIL PROTECTED]> wrote: > > In case anyone is interested... > > I have completed the first version of an OLE2 file unpacker (as used > in MS Office Documents >= Office97). It is currently at: > > http://www.uncon.org/files/ole2extract.c > > Shou

[Clamav-users] Which list

2004-01-06 Thread Tomasz Kojm
On Tue, 6 Jan 2004 10:48:12 + Chris Hastie <[EMAIL PROTECTED]> wrote: > There appears to be some discussion going on on the Clamav-virusdb > list this morning. I was under the impression that list was an > announcement only list notifying of updates to the virus databases. > Can this policy n

Re: [Clamav-users] Another sample that --mbox dosn't detect

2004-01-06 Thread Nigel Horne
On Tuesday 06 Jan 2004 11:49 am, Diego d'Ambra wrote: > Following up on discussion yesterday about option --mbox not being able > to detect virus I've found another sample. I can see what's wrong. I'll look into it ASAP and upload a fix to CVS. > Any DB maintainers that want to take a look at the

[Clamav-users] OLE2 unpacker

2004-01-06 Thread Trog
In case anyone is interested... I have completed the first version of an OLE2 file unpacker (as used in MS Office Documents >= Office97). It is currently at: http://www.uncon.org/files/ole2extract.c Should extract all component files from Office documents. Am interested in failures. Haven't te

[Clamav-users] clamuko: corrupt or unknown clamd scanner error or memory/resource/perms problem - exit status 2

2004-01-06 Thread Dilip M
Hi , I'm running Qmail on machine is Redhat 7.3 Everything was fine till i upgraded Clam-AV from 0-60 to 0.65. Just Complied clam-av 0.65 as per http://www.qmailrocks.org/qmailscanner_db.htm i'm held up in this stage :( # ./test_installation.sh -doit setting QMAILQUEUE to /var/qmail/bin/qmail-

Re: [Clamav-users] Which list

2004-01-06 Thread Tomasz Papszun
On Tue, 06 Jan 2004 at 10:48:12 +, Chris Hastie wrote: > There appears to be some discussion going on on the Clamav-virusdb list this > morning. I was under the impression that list was an announcement only list > notifying of updates to the virus databases. Can this policy not be enforced You

[Clamav-users] Another sample that --mbox dosn't detect

2004-01-06 Thread Diego d'Ambra
Following up on discussion yesterday about option --mbox not being able to detect virus I've found another sample. Since the sample has been sent to ClamAV through the ClamAV submission system, I've remove any private information from the sample that can be downloaded at http://www.softscan.dk/sam

[Clamav-users] Which list

2004-01-06 Thread Chris Hastie
There appears to be some discussion going on on the Clamav-virusdb list this morning. I was under the impression that list was an announcement only list notifying of updates to the virus databases. Can this policy not be enforced somehow, restricting who can post to the list and ensuring the Reply-

Re: [Clamav-users] clamscan doesn't detect virus in .zip

2004-01-06 Thread Odhiambo Washington
* Tomasz Papszun <[EMAIL PROTECTED]> [20040105 19:50]: wrote: > On Mon, 05 Jan 2004 at 13:32:31 -0300, René Bellora wrote: > > Tomasz Papszun wrote: > > > > >A blind shot: does it make a difference if you run > > >'clamscan -r videos.zip'?... > > > > > it doesn't: > > > > # clamscan -r videos.zi