Re: [Clamav-users] database not being updated

2004-01-08 Thread Fajar A. Nugraha
Assuming you use recent clamav version (preferable devel), compile clamav with default settings for clamav user, and your database directory is /usr/local/share/clamav, try chown -R clamav /usr/local/share/clamav Newer versions of freshclam will automatically switch to clamav user, or the user

[Clamav-users] database not being updated

2004-01-08 Thread Payal Rathod
Hi, On one machine where I had forgotten to update the database for 2 months, I am getting and error, # freshclam Current working dir is /usr/local/share/clamav Checking for a new database - started at Fri Jan 9 08:30:45 2004 Connected to clamav.elektrapro.com. Reading md5 sum (viruses.md5): OK R

Re: [Clamav-users] is the virus db screwed up ?

2004-01-08 Thread mantor
that caught me off guard didn't know what was happening till i really thought bout it well thanks for the update btw great virus scanner and thanks for your time :) On Thu, 2004-01-08 at 16:32, Tomasz Papszun wrote: > On Thu, 08 Jan 2004 at 21:45:47 +0100, Tomasz Kojm wrote: > > On 08 Jan 2004 1

Re: [Clamav-users] is the virus db screwed up ?

2004-01-08 Thread Tomasz Papszun
On Thu, 08 Jan 2004 at 21:45:47 +0100, Tomasz Kojm wrote: > On 08 Jan 2004 14:40:42 -0500 > mantor <[EMAIL PROTECTED]> wrote: > > > also i know this might not be clamav problem but was searching through > > the logs and found this and thats when it started > > Jan 7 21:08:07 filter2 X-Qmail-Scann

Re: [Clamav-users] is the virus db screwed up ?

2004-01-08 Thread mantor
Sorry my bad it really was a qmail-scanner problem. After that big update to the virus database the scanner supposedly pooped and needed more memory so what i did is update the setting from 20 megs to 40 megs in the softlimit seems to fine now. Sorry for that panic On Thu, 2004-01-08 at 15:07, Tom

Re: [Clamav-users] Mimail problem and kudos

2004-01-08 Thread Tomasz Kojm
On Thu, 8 Jan 2004 13:47:09 -0600 Paul Carpenter <[EMAIL PROTECTED]> wrote: > I've been running clamd (0.65) through exiscan (exim 4.24) on a RH 9.0 > box. I'm also running RAV as a system filter until my subscription > runs out. > > Clamd has been catching everything before it gets to RAV exce

Re: [Clamav-users] is the virus db screwed up ?

2004-01-08 Thread Stewart MacLund
on my last reload... SelfCheck: Database modification detected. Forcing reload. Reading databases from /usr/local/share/clamav Database correctly reloaded (29930 viruses) $ clamd -V clamd / ClamAV version 0.65 4.9-RC FreeBSD 4.9-RC #1 on another server... Verbose logging activated. Reading data

Re: [Clamav-users] is the virus db screwed up ?

2004-01-08 Thread Tomasz Kojm
On 08 Jan 2004 14:40:42 -0500 mantor <[EMAIL PROTECTED]> wrote: > freebsd 4.9 clamav 0.65 > might not notice if your just scanning it regularly > > also i know this might not be clamav problem but was searching through > the logs and found this and thats when it started > Jan 7 21:08:07 filter2

Re: [Clamav-users] is the virus db screwed up ?

2004-01-08 Thread [EMAIL PROTECTED]
On Thu, 2004-01-08 at 15:40, Stefan Kaltenbrunner wrote: > I think this happens everytime somebody updates an old installation that > used the *.db file to the new *.cvd format without deleting the old > files. clamd then somehow reports the sum of the signatures in these > files(!). That's exa

Re: [Clamav-users] is the virus db screwed up ?

2004-01-08 Thread Stefan Kaltenbrunner
Tomasz Papszun wrote: On Thu, 08 Jan 2004 at 19:25:36 +, Antony Stone wrote: Clamscan's working fine for me here (Linux 2.4.23, ClamAV 0.60, with the big database update just released, therefore 27645 signatures). 27645? How come? The database at the moment contains 19799 signatures. I thi

Re: [Clamav-users] is the virus db screwed up ?

2004-01-08 Thread Antony Stone
On Thursday 08 January 2004 8:23 pm, [EMAIL PROTECTED] wrote: > Tomasz, > > On Thu, 2004-01-08 at 15:07, Tomasz Papszun wrote: > > 27645? How come? The database at the moment contains 19799 signatures. > > Here's what I'm seeing on (on 2 different linux/ia32 machines): > > Thu Jan 8 06:14:11 2004

Re: [Clamav-users] is the virus db screwed up ?

2004-01-08 Thread Antony Stone
On Thursday 08 January 2004 8:16 pm, Antony Stone wrote: > On Thursday 08 January 2004 8:07 pm, Tomasz Papszun wrote: > > On Thu, 08 Jan 2004 at 19:25:36 +, Antony Stone wrote: > > > Clamscan's working fine for me here (Linux 2.4.23, ClamAV 0.60, with > > > the big database update just release

Re: [Clamav-users] is the virus db screwed up ?

2004-01-08 Thread [EMAIL PROTECTED]
Tomasz, On Thu, 2004-01-08 at 15:07, Tomasz Papszun wrote: > 27645? How come? The database at the moment contains 19799 signatures. Here's what I'm seeing on (on 2 different linux/ia32 machines): Server1: SNIP $ grep -Ei 'protecting|reloaded' clamd.log Sun Jan 4 07:37:29 2004 -> Protec

Re: [Clamav-users] Mimail problem and kudos

2004-01-08 Thread Tomasz Papszun
On Thu, 08 Jan 2004 at 13:47:09 -0600, Paul Carpenter wrote: > I've been running clamd (0.65) through exiscan (exim 4.24) on a RH 9.0 box. > I'm also running RAV as a system filter until my subscription runs out. > > Clamd has been catching everything before it gets to RAV except for Mimail. I

Re: [Clamav-users] is the virus db screwed up ?

2004-01-08 Thread Antony Stone
On Thursday 08 January 2004 8:07 pm, Tomasz Papszun wrote: > On Thu, 08 Jan 2004 at 19:25:36 +, Antony Stone wrote: > > Clamscan's working fine for me here (Linux 2.4.23, ClamAV 0.60, with the > > big database update just released, therefore 27645 signatures). > > 27645? How come? The database

Re: [Clamav-users] is the virus db screwed up ?

2004-01-08 Thread Tomasz Papszun
On Thu, 08 Jan 2004 at 19:25:36 +, Antony Stone wrote: > > Clamscan's working fine for me here (Linux 2.4.23, ClamAV 0.60, with the big > database update just released, therefore 27645 signatures). 27645? How come? The database at the moment contains 19799 signatures. -- Tomasz Papszun

[Clamav-users] Mimail problem and kudos

2004-01-08 Thread Paul Carpenter
I've been running clamd (0.65) through exiscan (exim 4.24) on a RH 9.0 box. I'm also running RAV as a system filter until my subscription runs out. Clamd has been catching everything before it gets to RAV except for Mimail. I looked at the archives and made sure I had ScanArchive active. I d

Re: [Clamav-users] is the virus db screwed up ?

2004-01-08 Thread mantor
freebsd 4.9 clamav 0.65 might not notice if your just scanning it regularly also i know this might not be clamav problem but was searching through the logs and found this and thats when it started Jan 7 21:08:07 filter2 X-Qmail-Scanner-1.20: [filter2107352768646113762] clamscan: corrupt or unknow

Re: [Clamav-users] is the virus db screwed up ?

2004-01-08 Thread Antony Stone
On Thursday 08 January 2004 7:17 pm, mantor wrote: > Jan 8 13:29:31 filter2 /kernel: pid 63342 (clamscan), uid 1003: exited > on signal 11 (core dumped) > > that happend today dont know what going on but i uninstalled clamscan > reinstalled then it started working again but after i manually updat

[Clamav-users] is the virus db screwed up ?

2004-01-08 Thread mantor
Jan 8 13:29:31 filter2 /kernel: pid 63342 (clamscan), uid 1003: exited on signal 11 (core dumped) Jan 8 13:35:16 filter2 /kernel: pid 63603 (clamscan), uid 1003: exited on signal 11 (core dumped) Jan 8 13:35:21 filter2 /kernel: pid 63611 (clamscan), uid 1003: exited on signal 11 (core dumped)

Re: [Clamav-users] Re: [Clamav-users]clamav-milter

2004-01-08 Thread Internet Helpdesk
Ah, it's as simple as using --enable-debug when compiling. Cool What do the different debug levels log? I see that level 9 logs quite a bit :) Specifically what log level only logs errors? When enabling debug is there an option to direct the output to syslog? -Troy - Original Message

Re: [Clamav-users] RE: More tests from www.testvirus.org

2004-01-08 Thread Noel Jones
On Thu, Jan 08, 2004 at 01:38:37AM +0100, Tomasz Papszun wrote: > > In case someone is interested, I'm including here test results of > a set: > Postfix + Amavisd-new (20030616p5-6) + ClamAV (0.60+BugFixesFromCVS-20030916). > > >From the 1st group of tests on www.antivirus.org, only 1 of 15 test

Re: [Clamav-users] Virus Descriptions

2004-01-08 Thread Tomasz Papszun
On Thu, 08 Jan 2004 at 15:35:43 +, Antony Stone wrote: > On Thursday 08 January 2004 3:26 pm, Steven King wrote: > > > There are places on the web where virus information > > can be obtained. For example, Google came up with > > http://www.f-secure.com/virus-info/wild.html. No doubt > > htere

Re: [Clamav-users] Virus Descriptions

2004-01-08 Thread Antony Stone
On Thursday 08 January 2004 3:26 pm, Steven King wrote: > Hello > > There are places on the web where virus information > can be obtained. For example, Google came up with > http://www.f-secure.com/virus-info/wild.html. No doubt > htere are others. True, there are plenty of such resources around;

Re: [Clamav-users] Virus Descriptions

2004-01-08 Thread Steven King
Hello There are places on the web where virus information can be obtained. For example, Google came up with http://www.f-secure.com/virus-info/wild.html. No doubt htere are others. Steve = Yahoo! Messenger - Communic

Re: AW: AW: [Clamav-users] clamd crash detection ?

2004-01-08 Thread [EMAIL PROTECTED]
On Thu, 2004-01-08 at 04:11, Cedric Foll wrote: > I just have a little pb with it. It's about how you find your path at > the start of the file. > I get the folowing error: > [EMAIL PROTECTED] tmp]# /usr/local/bin/clamdwatch.pl > Clamd is in an unknown state. > It returned: /usr/local/bin/usr/local

Re: [Clamav-users] clamav vs. other virus scanners

2004-01-08 Thread Antony Stone
On Thursday 08 January 2004 12:21 pm, Payal Rathod wrote: > Hi all, > Recently I noticed that Norton AV clears more than 60,000 viruses, > maybe other virus scanners also have similar numbers, why do we have a > very less number? Two main reasons: 1. ClamAV has a high proportion of recent viruse

[Clamav-users] clamav vs. other virus scanners

2004-01-08 Thread Payal Rathod
Hi all, Recently I noticed that Norton AV clears more than 60,000 viruses, maybe other virus scanners also have similar numbers, why do we have a very less number? Is it because we do not have big database or we protect against new viruses only and keep new definition updated? I personally had no p

Re: [Clamav-users] 6 viruses in http://www.testvirus.org/ were NOT detected by Clam-AV

2004-01-08 Thread Tomasz Kojm
On Thu, 08 Jan 2004 17:24:57 +0530 Dilip M <[EMAIL PROTECTED]> wrote: > Is this common with Clam-AV or am i need take care of some things in > Clam-AV ? Please read the last post from Tomasz Papszun ! Best regards, Tomasz Kojm -- oo. [EMAIL PROTECTED] www.ClamAV.net

[Clamav-users] 6 viruses in http://www.testvirus.org/ were NOT detected by Clam-AV

2004-01-08 Thread Dilip M
Hi all, Hope some guys in grp are NOT fed up from my mails :(( If so i'm apolozise. Yday i had a problem of Clam-AV not detecting viruses sent from http://www.testvirus.org/ === Problem was with /etc/clam.conf #Clamuk

Re: [Clamav-users] Virus Descriptions

2004-01-08 Thread Antony Stone
On Thursday 08 January 2004 10:47 am, Alex Pleiner wrote: > * Philipp Grosswiler <[EMAIL PROTECTED]> [2004-01-07 18:42]: > > I am wondering if there exists any descriptions of the viruses found by > > ClamAV, similary to McAfee/Symantec/... > > > > Many of my customers would like to find out more

RE: [Clamav-users] Virus Descriptions

2004-01-08 Thread Philipp Grosswiler
Would it at least be possible to have a reference or alias to other online resources (e.g. McAfee's Virus Information Library)? For example, if I am searching for the virus "Worm.Gibe.F" on the McAfee Virus Information Library there are no matches found. It would be nice if I could use the alias t

Re: [Clamav-users] Virus Descriptions

2004-01-08 Thread Tomasz Kojm
On Thu, 8 Jan 2004 11:47:44 +0100 Alex Pleiner <[EMAIL PROTECTED]> wrote: > > Does that exist in some way or could this be done? > > AFAIK it does not exist. I asked for the same some months ago and got > no answer. I would appreciate an online virus desciption database and > am more then willing

Re: [Clamav-users] Virus Descriptions

2004-01-08 Thread Alex Pleiner
* Philipp Grosswiler <[EMAIL PROTECTED]> [2004-01-07 18:42]: > I am wondering if there exists any descriptions of the viruses found by > ClamAV, similary to McAfee/Symantec/... > Many of my customers would like to find out more about the virus they got > and how they could protect themselves, and

Re: AW: AW: [Clamav-users] clamd crash detection ?

2004-01-08 Thread Cedric Foll
Le mer 07/01/2004 à 20:16, [EMAIL PROTECTED] a écrit : > On Wed, 2004-01-07 at 10:59, Power-Netz (Schwarz) wrote: > > Your script code does work, but does not recognize the crashed child :-( > > The parent task seems to life and answere the PING , but the actual > > used child does no longer react.

Re: [Clamav-users] Re: [Clamav-users]clamav-milter

2004-01-08 Thread Nigel Horne
On Thursday 08 Jan 2004 2:01 am, Internet Helpdesk wrote: > At any rate, is there way to make clamav-milter produce a log or at least > produce some output on the terminal screen? The man page for clamav-milter > mentions a -x or --debug-level but these options are not recognized. They are recog

Re: [Clamav-users] Clamd locks up

2004-01-08 Thread Nigel Horne
On Thursday 08 Jan 2004 7:48 am, Tomasz Kojm wrote: > We need more information (version numbers, logs, configuration > details).. And operating systems that this appears on. > Best regards, > Tomasz Kojm -Nigel -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#2025

[Clamav-users] Re: Clamd locks up

2004-01-08 Thread Marius Schwarz
Hello Daniel, On 07.01.04, you wrote: > every few hours, which is obviously unacceptable. Is there any known solutoin > to a problem like this (other than setting up scripts to restart it every No, when you view the archives of the list from app 30 hours ago, you will find enough code and links

Re: [Clamav-users] Clamd locks up

2004-01-08 Thread Tomasz Kojm
On Thu, 8 Jan 2004 09:57:18 +1000 Daniel Andersen <[EMAIL PROTECTED]> wrote: > Hi, > > I'm running clamd on two production mail servers, and it seems to lock > up fairly regularly for reasons unknown to me. On one server it only We need more information (version numbers, logs, configuration deta