Re: [Clamav-users] Version 0.66? (was RE: VBA decoding, update)

2004-01-29 Thread Tomasz Kojm
On Mon, 26 Jan 2004 13:29:19 +0100 Thomas Lamy <[EMAIL PROTECTED]> wrote: > Hm, I thought you would release 0.66 /without/ OLE2 and VBA, to make > it a real _stable_ version. Then 0.67-dev could come up with OLE2 and The CVS version is still broken (see thread timeout related threads in last week

Re: [Clamav-users] SOT: SCO.A disappearing?

2004-01-29 Thread Jessica Ruble-English
Still getting plenty SCO.A's over herer too. Has anybody started seeing the variant "MyDoom.B" yet? Jessica On Thu, 29 Jan 2004 08:19, Jeffrey L. Taylor wrote: I noticed that the virus count has dropped back to pre-SCO.A levels starting around 0330 UTC this morning. I have not seen a single SCO.A

[Clamav-users] First char of dent->d_name disappearing

2004-01-29 Thread adi
Got this while starting clamd: [EMAIL PROTECTED] /root]# clamd LibClamAV debug: Loading databases from /var/lib/clamav LibClamAV Error: cl_loaddb(): Can't open file /var/lib/clamav/iruses.db LibClamAV debug: cl_loaddbdir(): error loading database /var/lib/clamav/iruses.db ERROR: Unable to open fil

Re: [Clamav-users] fyi: 0.65 on OSX

2004-01-29 Thread Tomasz Kojm
On Fri, 23 Jan 2004 16:12:10 -0800 Mark Edwards <[EMAIL PROTECTED]> wrote: > Well, despite my better judgement I decided to go ahead and install > clamav-devel-20040110 on my OSX 10.1.5 machine. Seems to work well, > as far as I can tell. Tests run fine. > > The only issues I've had are freshc

[Clamav-users] Clamscan; clamdscan

2004-01-29 Thread Micha Silver
Last night I made a small change to qmail-scanner.pl- I added 'worm.sco.a' to the array $silent_viruses_array. (To prevent sending Virus Found messages to innocent "sender" addresses) It now looks like: my @silent_viruses_array=('klez','bugbear','worm.sco.a','hybris','yaha','braid' ,'nimda','tanat

Re: [Clamav-users] clamav-milter

2004-01-29 Thread Robert Middleswarth
Nigel Horne wrote: On Tuesday 27 Jan 2004 7:36 pm, Mailing Lists wrote: Does clamav-milter delete these emails or move them to some quarantine directory. I am using a default rpm install from http://crash.fce.vutbr.cz/crash-hat/1/clamav/ That depends in whether or not you're using either

Re: [Clamav-users] yahoo groups??

2004-01-29 Thread Tomasz Papszun
On Mon, 26 Jan 2004 at 18:20:28 -0600, Internet Helpdesk wrote: > I've got a user who says yahoo groups is getting an error message when > trying to send an email to our email server. > > Here's a part of the transcript from the customer: > [...] > Remote host said: 550 5.7.1 Virus detected by Cl

Re: [Clamav-users] Worm.SCO.A

2004-01-29 Thread Jeff Gojkovich
You are exactly right. Hit us on Monday and hasn't stopped since. -- Jeff > Hi. > > My SMTP filter running ClamAV is blocking a huge amount of messages > with the Worm.SCO.A. > It seams to be the same virus as MyDoom or Novarg. > Can anyone confirm this?! > > Thanks. > > > > Att

Re: [Clamav-users] SCO.a

2004-01-29 Thread Shawn Tayler
On Wed, 28 Jan 2004 17:34:33 + Nigel Horne <[EMAIL PROTECTED]> exclaimed: > This comment has been obseleted by the changes to today's CVS snapshot. > > > > Shawn > > > > -Nigel Excellent Thanks --- The SF.Net email is sponsored by Ec

RE: [Clamav-users] RE: Clamav-milter not installing

2004-01-29 Thread james nelson
Afirmative. I compiled sendmail with milter support. The .configure reported no on milter items, so I manualy built libmilter and installed it. Now .configure reports yes on milter items, but still the clamav-milter never gets built. I will check my make logs to see if I have the same bomb out t

RE: [Clamav-users] Worm.SCO.A

2004-01-29 Thread Fritz Mesedilla
They are the same. AV vendors just have their way of naming the same virus. We call it Worm.SCO.A. McAfee calls it MyDoom. Symantec calls it Novarg. Cheers, fritz --- + Basta Ikaw Lord -Original Message- From: Patricia Viana [mailto:[EMAIL PROTECTED] Sent: Thursday, January 29,

RE: [Clamav-users] Worm.SCO.A

2004-01-29 Thread Randal, Phil
ClamAV was picking up the original version here 6 hours before McAfee had their 4319 DATs out, and detected the "B" variant here yesterday at least 4 hours before McAfee's 4320 DATs were released. You guys deserve medals. A big heartfelt thank you to all the ClamAV team (and virus submitters). P

Re: [Clamav-users] Re: SCO.a not being caught at all

2004-01-29 Thread Tomasz Papszun
On Wed, 28 Jan 2004 at 15:23:28 +0100, Dirk Meyer wrote: > > I Verified on 3 diffrent systems (cvs 2004-01-20 running) > clamscan detects, clamdscan not. > > When I stop clamd and strat it again it works. > > Problem: > after freshclam updates, clamddon#t catch the new signatures. > > Question:

Re: [Clamav-users] Clamdscan problem

2004-01-29 Thread Thomas Lamy
Jose R. Ortiz Ubarri wrote: # clamdscan readme.zip /root/readme.zip: Can't access the file ERROR --- SCAN SUMMARY --- Infected files: 0 Time: 0.001 sec (0 m 0 s) And everything I try to scan gives me the same ERROR. I suspect clamd is not running as root, and an ordinary user

[Clamav-users] Segmentation fault after database reload

2004-01-29 Thread Steve King
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello I am finding that when freshclam updates the database and clamd reloads the database, 2-3 minutes later I get a clamd segmentation fault. This has happened since at least December, for every version of clamav I have used. I am currently using

[Clamav-users] Problem compiling - int32_t

2004-01-29 Thread spiralvoice
Hi, I have some problems compiling the latest snapshot (http://www.clamav.net/snapshot/clamav-devel-20040128.tar.gz). Here is what happens, I used this compiler: Reading specs from /usr/lib/gcc-lib/i486-linux/2.7.2.1/specs gcc version 2.7.2.1 ./configure --prefix=/usr --sysconfdir=/etc --disabl

Re: [Clamav-users] RE: Clamav-milter not installing

2004-01-29 Thread Nigel Horne
On Wednesday 28 Jan 2004 2:00 pm, james nelson wrote: > Afirmative. I compiled sendmail with milter support. The .configure > reported no on milter items, so I manualy built libmilter and installed it. > Now .configure reports yes on milter items, but still the clamav-milter > never gets built.

Re: [Clamav-users] Freshclam timeout with version devel-20040127 is too short {Scanned}

2004-01-29 Thread Tomasz Papszun
On Wed, 28 Jan 2004 at 12:12:59 +, Jo Mills wrote: > > I have tried to use freshclam from the cvs version devel-20040127, but > after 20 minutes it times out. My job shows the following: > > > Starting the daily download of the clamAV virus databases to the > > Labserver at Wed Jan 28 11:39

Re: [Clamav-users] Correction to my last post regarding viruses not found

2004-01-29 Thread Jim Maul
Actually, it technically is clamscan, but for the installation i used (www.qmailrocks.org) a step in there says to copy clamscan to clamdscan so running clamscan and clamdscan effectively means the same thing. So yes technically you are correct, but for my setup, my statement is correct as well.

Re: [Clamav-users] Milter timeouts.

2004-01-29 Thread Tomasz Kojm
On Tue, 27 Jan 2004 15:57:13 -0700 Spike Ilacqua <[EMAIL PROTECTED]> wrote: > And suggestions? The only guess I have is that it's being overwhelmed > by the volume (this mail server delivers about 50K inbound message per > day). I'm hopping there is some knob I can turn to help it keep up. > As

Re: [Clamav-users] clamav-milter

2004-01-29 Thread Eduardo Kaftanski
On Wed, Jan 28, 2004 at 10:55:27AM +0100, Kri?tof Petr wrote: > Mailing Lists wrote: > > >Sure, do you have the src RPM so I can build for RH9 or will Fedora > >binary work? I am running 0.60, not 0.65 > > > > it is not good idea to install fedora binaries on old RH versions. > Rebuild src packa

[Clamav-users] fyi: 0.65 on OSX

2004-01-29 Thread OpenMacNews
hi, given the flurry of discussion re: clamav on OSX, i though i'd just offer as an fyi, 0.65 builds/runs flawlessly for me on OSX 10.2.x & 10.3.x on a variety of stock & upgraded boxes. i can't say i agree with the suggestion that the developers spend their time supporting OSX 10.1.x -- which i