Re: [Clamav-users] Non-virus virus messages

2005-08-24 Thread Dennis Peterson
Michael Erdely said: > Has anyone else noticed an increased number of virus-like messages > coming through with attachments that clamav is either scanning with: > Zip Module Failure or it's calling the file clean. > > The files that give me Zip Module Failure when I run clamscan are 656 > bytes. T

[Clamav-users] Non-virus virus messages

2005-08-24 Thread Michael Erdely
Has anyone else noticed an increased number of virus-like messages coming through with attachments that clamav is either scanning with: Zip Module Failure or it's calling the file clean. The files that give me Zip Module Failure when I run clamscan are 656 bytes. They all contain a ..scr (two dot

[Clamav-users] Scanning encrypted files in a mail

2005-08-24 Thread ramya
Hii, this is just for my information.. How does ClamAV work with encrypted/Password protected zip files files. When a virus mail is zipped in this manner will not the signature of the attachment differ, if so, will the comparison not fail. -- Thanks and Regards Ramya Krishnan ** DISC

Re: [Clamav-users] RELOAD/VERSION issues

2005-08-24 Thread Dennis Peterson
Julio Maidanik said: > > > Dennis Peterson wrote: >> Stephen Gran said: >>> On Thu, Aug 18, 2005 at 04:00:19PM +0200, Marc Haber said: Hi, the clamd docs say quite clearly that it is necessary to either send the RELOAD command to the daemon or to send SIGUSR2 to the daemon to >>

Re: [Clamav-users] Getting "RAR module failure ERROR" in log - ideas?

2005-08-24 Thread Brian Morrison
On Wed, 24 Aug 2005 15:49:54 -0500 in [EMAIL PROTECTED] Noel Jones <[EMAIL PROTECTED]> wrote: > At 03:21 PM 8/24/2005, Brian Morrison wrote: > >Running 0.86.2 under RH9 called from Exim, and I've just noticed a > >number of "RAR module failure ERROR" messages in the syslog output. > > > >Any ideas

Re: [Clamav-users] Getting "RAR module failure ERROR" in log - ideas?

2005-08-24 Thread Noel Jones
At 03:21 PM 8/24/2005, Brian Morrison wrote: Running 0.86.2 under RH9 called from Exim, and I've just noticed a number of "RAR module failure ERROR" messages in the syslog output. Any ideas about this? A quick check reveals 4 of these over a 30 minute period about 30 minutes ago but none since.

[Clamav-users] Getting "RAR module failure ERROR" in log - ideas?

2005-08-24 Thread Brian Morrison
Running 0.86.2 under RH9 called from Exim, and I've just noticed a number of "RAR module failure ERROR" messages in the syslog output. Any ideas about this? A quick check reveals 4 of these over a 30 minute period about 30 minutes ago but none since. -- Brian Morrison bdm at fenrir dot org dot

Re: [Clamav-users] RELOAD/VERSION issues

2005-08-24 Thread Dennis Peterson
Julio Maidanik said: > > I believe you are wrong: clamd socket, when specified in clamd.conf is > for > control only. > When a client, like clamdscan wants to pass data to clamd uses either a > temporary file or a socket (in case clamdscan input is stdin). > At least, that is what I conclude from

Re: [Clamav-users] RELOAD/VERSION issues

2005-08-24 Thread Julio Maidanik
Dennis Peterson wrote: > Stephen Gran said: >> On Thu, Aug 18, 2005 at 04:00:19PM +0200, Marc Haber said: >>> Hi, >>> >>> the clamd docs say quite clearly that it is necessary to either send >>> the RELOAD command to the daemon or to send SIGUSR2 to the daemon to >>> have it reload the database.

[Clamav-users] Re: Informazioni su squidclam

2005-08-24 Thread René Berber
Stefano wrote: > Ho un server con sarge e squid installato. > Ho installato anche squidclam sul server in transparent proxy. > Ma quando vado su questo sito > > http://crerbd.regione.emilia-romagna.it/NXT/gateway.dll?f=templates&fn=default.htm > > non si vede niente e mi rimane la pagina bianca:

[Clamav-users] Informazioni su squidclam

2005-08-24 Thread Stefano
Ho un server con sarge e squid installato. Ho installato anche squidclam sul server in transparent proxy. Ma quando vado su questo sito http://crerbd.regione.emilia-romagna.it/NXT/gateway.dll?f=templates&fn=default.htm non si vede niente e mi rimane la pagina bianca: coma mai?? Se disabilito il