Re: [Clamav-users] clamd: Segmentation Fault?

Philipp Grosswiler wrote: Unfortunately, clamd crashed today morning at 05:00 (almost exactly at 05:00). I only realized it by accident. This is what the log is showing: Thu Feb 26 04:58:10 2004 -> stream: Worm.MyDoom.E.UPX FOUND Thu Feb 26 05:01:21 2004 -> Segmentation fault :-( Bye.. Thu Feb 26

[Clamav-users] clamd: Segmentation Fault?

Unfortunately, clamd crashed today morning at 05:00 (almost exactly at 05:00). I only realized it by accident. This is what the log is showing: Thu Feb 26 04:58:10 2004 -> stream: Worm.MyDoom.E.UPX FOUND Thu Feb 26 05:01:21 2004 -> Segmentation fault :-( Bye.. Thu Feb 26 05:11:18 2004 -> SelfCheck

[Clamav-users] Windows/Web Logging

Hi all, Newbie question.. Is there a way to setup web based logging or stats (view) on clam running on a Windows box? Thanks --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a

[Clamav-users] Good Work!

SomeFool stopped! Blocked 50+ SomeFool infected mails in last 10 minutes! :) J --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://

[Clamav-users] Anybody using milter with --server and a firewall in between?

Hello all, I'm working on restructuring an ISP's mail servers, and as part of it, we're setting up some load sharing measures. One of them is shifting clamav off of the actual mail servers, and running clamav-milter with the --server option to connect to a remote clamd. The problem we found was

Re: [Clamav-users] Zip files.

On Wed, 2004-02-25 at 11:40, Peter McCreath wrote: > Any pointers would be greatly appreciated, Did you run freshclam as soon as you saw the few get past? Two zip file got past me, then I ran freshclam, and start catching Somefool.B and they where all zip files. Just a thought, -- Russel Ol

RE: [Clamav-users] Virus listing

David Gregg wrote: > Could not find in the archives... > > Does anybody know how/where to obtain a listing of all viruses that > ClamAV 'knows' about? If you have Ver. 0.67 or higher (0.67-1 or CVS) then "sigtool -l" will do the trick. Otherwise, I'm not certain. --

Re: [Clamav-users] Help generating W32.Netsky.C signature?

On Wed, 25 Feb 2004, Andrew McCall wrote: > Hi Folks, > > I have a live copy of what I presume to be W32.Netsky.C on my server right now > in Maildir format. I am trying to generate a signature for it using the > [...] > > I *know* this file is a new virus, and want to generate a signature from

Re: [Clamav-users] Virus listing

On Wed, 25 Feb 2004 [EMAIL PROTECTED] wrote: > Quoting Andrew McCall <[EMAIL PROTECTED]>: > > > > > On Wednesday, February 25, 2004, at 09:40 pm, David Gregg wrote: > > > > > Could not find in the archives... > > > > > > Does anybody know how/where to obtain a listing of all viruses that > > >

Re: [Clamav-users] Couple of questions regarding ClamAV

On Wed, 25 Feb 2004, Jason wrote: > Hello everyone. > > I'm new to the list and ClamAV. I'm looking for a Anti-virus solution to > run on our company mail server. A friend of mine recommended clamav as a > great solution for our needs. I have not finazlied the details of my > setup, but right now

Re: [Clamav-users] Virus listing

On Wed, 25 Feb 2004 at 16:00:51 -0700, [EMAIL PROTECTED] wrote: > > Doesn't work for me: > > # sigtool -l > sigtool: invalid option -- l > ERROR: Unknown option passed. > # sigtool -h > > Clam AntiVirus: Signature Tool (sigtool) 0.65

Re: [Clamav-users] Virus listing

Quoting Andrew McCall <[EMAIL PROTECTED]>: > > On Wednesday, February 25, 2004, at 09:40 pm, David Gregg wrote: > > > Could not find in the archives... > > > > Does anybody know how/where to obtain a listing of all viruses that > > ClamAV > > 'knows' about? > > I think sigtool -l shows them.

Re: [Clamav-users] Virus listing

using sigtool on W2k... Doesn't appear to be able to list all viruses in database. ANy suggestions? - Original Message - From: "Peter Bonivart" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, February 25, 2004 2:24 PM Subject: Re: [Clamav-users] Virus listing > David Greg

Re: [Clamav-users] Virus listing

On Wednesday, February 25, 2004, at 09:40 pm, David Gregg wrote: Could not find in the archives... Does anybody know how/where to obtain a listing of all viruses that ClamAV 'knows' about? I think sigtool -l shows them. Thanks. --- SF.Net

Re: [Clamav-users] Virus listing

David Gregg wrote: Does anybody know how/where to obtain a listing of all viruses that ClamAV 'knows' about? sigtool -l -- /Peter Bonivart --Unix lovers do it in the Sun Sun Fire V210, Solaris 9, Sendmail 8.12.10, MailScanner 4.25-14, SpamAssassin 2.63 + DCC 1.2.30, ClamAV 0.67 + GMP 4.1.2 --

[Clamav-users] ./configure --prefix=/usr/local --enable-milter failes on ClamAV- 0.67

The Clamav milter fails on % make. Attached is the config.log:: Thanks in advance! -- This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. It was created by configure, which was generat

[Clamav-users] Re: Couple of questions regarding ClamAV

Peter Bonivart wrote: Hi Peter, Thanks for the input. I recommend you take a look at MailScanner, it's a framework that handles unpacking MIME attachments and sends batches of attachments to Clam (or any combination of around 20 supported scanners) so Clam is only used in it's most basic and

Re: [Clamav-users] Virus listing

> Could not find in the archives... > > Does anybody know how/where to obtain a listing of all viruses that ClamAV > 'knows' about? > > Thanks. On a related note... # cd /usr/local/share/clamav # sigtool -u daily.cvd LibClamAV Error: Unknown type flag . ERROR: Can't unpack file. /var/log/clam-up

[Clamav-users] Virus listing

Could not find in the archives... Does anybody know how/where to obtain a listing of all viruses that ClamAV 'knows' about? Thanks. --- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux wi

Re: [Clamav-users] Couple of questions regarding ClamAV

Jason wrote: Couple of questions about ClamAV. Can someone give me a run down on stability of ClamAV? Is it pretty much just set it up and let it run? Reliability? Performance. A daemonized version of software was very important to me, that is why im looking at ClamAV. I recommend you take a loo

[Clamav-users] Couple of questions regarding ClamAV

Hello everyone. I'm new to the list and ClamAV. I'm looking for a Anti-virus solution to run on our company mail server. A friend of mine recommended clamav as a great solution for our needs. I have not finazlied the details of my setup, but right now, im looking for a Anti-virus scanner. With

Re: [Clamav-users] "segmentation fault" on clamav-0.67 on Solaris

Piotr Kasztelowicz wrote: I attempt to compile clamav-0.67 on Solaris 2.7 on sparc wirh newest gmp, gcc-3.2 and zlib. The compilation was going without problems, but the software does not work. If I was attempting to try 'freshclam' or 'clamscan' the effect was 'segmentation fault' My question - wh

Re: [Clamav-users] Freshclam: "Maximal time (1200 seconds) reached"

On 25 Feb 2004 11:32:20 +0100 Tarjei Knapstad <[EMAIL PROTECTED]> wrote: > The freshclam daemon process died the other day, and the last entry in > my log looks like: > > ClamAV update process started at Wed Feb 18 06:51:56 2004 > ERROR: Can't connect to port 80 of host database.clamav.net > (193

[Clamav-users] "segmentation fault" on clamav-0.67 on Solaris

Hello I attempt to compile clamav-0.67 on Solaris 2.7 on sparc wirh newest gmp, gcc-3.2 and zlib. The compilation was going without problems, but the software does not work. If I was attempting to try 'freshclam' or 'clamscan' the effect was 'segmentation fault' My question - what is wrong I hav

[Clamav-users] Clam name for Bizex virus ?

Assumeing Clam already has a signature for this one, what name is Clam useing for it ? http://securityresponse.symantec.com/avcenter/venc/data/w32.bizex.worm.html == Chris Candreva -- [EMAIL PROTECTED] -- (914) 967-7816 WestNet Internet Se

Re: [Clamav-users] 0 byte attachments (was: Help generating W32.Netsky.C signature?)

Andrew McCall wrote: Update: I am getting lots of emails that appear to be viruses, following the same pattern as W32.Netsky.B, and this is my original reason for thinking it was a new variant of this virus. The attachments are 0 bytes - so even if I was able to work out how to generate a sign

Re: [Clamav-users] Help generating W32.Netsky.C signature?

Update: I am getting lots of emails that appear to be viruses, following the same pattern as W32.Netsky.B, and this is my original reason for thinking it was a new variant of this virus. The attachments are 0 bytes - so even if I was able to work out how to generate a signature, I couldn't! A

[Clamav-users] Re: Help generating W32.Netsky.C signature?

On Wed, 25 Feb 2004 16:37:35 +, Andrew McCall wrote: > > I *know* this file is a new virus, and want to generate a signature from it. > But the documentation isn't clear on exactly how to do this. > I'd think that first thing to do would be to extract the real attachment from this

Re: [Clamav-users] Zip files.

On Feb 25, 2004, at 11:40 AM, Peter McCreath wrote: I'm still having problems with zip files containing viruses getting past Clamav, I'm running Clamav 0.67 , with Mimedefang 2.39. I've enabled Streamsavetodisk and Scanarchive in my clamav.conf, but all to no avail. Any pointers would be greatly ap

[Clamav-users] Help generating W32.Netsky.C signature?

Hi Folks, I have a live copy of what I presume to be W32.Netsky.C on my server right now in Maildir format. I am trying to generate a signature for it using the following command: /usr/local/clamav/bin/clamscan --stdout --mbox 1077205367.25429.saturn,S=1212 I receive the following report: 10

[Clamav-users] Zip files.

Hello All, I'm still having problems with zip files containing viruses getting past Clamav, I'm running Clamav 0.67 , with Mimedefang 2.39. I've enabled Streamsavetodisk and Scanarchive in my clamav.conf, but all to no avail. Any pointers would be greatly appreciated, Regards Peter __

Re: [Clamav-users] Re: Multiple viruses in same file.

On Wednesday 25 February 2004 4:26 pm, Jim Maul wrote: > > Which raises another question - if NAV and clamav detected > > virus differently, does this mean, that NAV virus database has newest > > viruses first while clamav has newest last? > > Isnt this an issue of AV programs calling viruses by d

[Clamav-users] Re: Multiple viruses in same file.

-Original Message- From: Virgo Pärna <[EMAIL PROTECTED]> Sent: Wednesday, 25. Feb 2004 3:01 -0500 To: [EMAIL PROTECTED] Subject: [Clamav-users] Re: Multiple viruses in same file. On Wed, 25 Feb 2004 09:32:50 +0800, cc <[EMAIL PROTECTED]> wrote: > > But wouldn't that waste cpu cycles when

[Clamav-users] Virus not caught?

I had my first virus slip through today. Something struck me as odd... the .deb package recommends lha and zoo but doesn't say anything about unzip... the payload was "misc.zip" which contained "misc.doc.com"... does ClamAV not scan into zip files? D smime.p7s Description: S/MIME cryptographi

Re: [Clamav-users] Submission to virusbtn.com and AV-test.org?

On Tue, 2004-02-24 at 13:46, Mitch (WebCob) wrote: > Helen, the editor of virusbtn.com says as far as she knows, Clam AV has > never been submitted for review. > > I asked for details on the process, and ask here if there is any reason NOT > to submit to various reviewers - don't want to step on t

[Clamav-users] Freshclam: "Maximal time (1200 seconds) reached"

The freshclam daemon process died the other day, and the last entry in my log looks like: ClamAV update process started at Wed Feb 18 06:51:56 2004 ERROR: Can't connect to port 80 of host database.clamav.net (193.1.219.100) ERROR: Connection with database.clamav.net (IP: 193.1.219.100) failed. Try

Re: [Clamav-users] Re: Multiple viruses in same file.

On Wed, 25 Feb 2004 08:01:48 + (UTC) Virgo Pärna <[EMAIL PROTECTED]> wrote: > Actually, my idea was to have switch to enable it Not to do > it by default, but to have this ability for testing purposes. Like That was supported in ClamAV <= 0.15 (enabled by default and could be disable

Re: [Clamav-users] clamav-milter, "Please try again later" message.

On Wednesday 25 February 2004 10:56, Sergey wrote: > Feb 25 04:03:59 clamav-milter[7350]: clamfi_header: Received: from 192.168.1.1 > ([192.168.1.1]) by mail(WinRoute Pro 4.1) > with SMTP; Tue, 24 Feb 2004 21:34:29 +0400 > Feb 25 04:03:59 clamav-milter[7350]: clamfi_header: From:

[Clamav-users] Re: Multiple viruses in same file.

On Wed, 25 Feb 2004 09:32:50 +0800, cc <[EMAIL PROTECTED]> wrote: > > But wouldn't that waste cpu cycles when it has already been confirmed > that the said file is infected? I mean, if say you were scanning your > Actually, my idea was to have switch to enable it Not to do it by defau