Re: [Clamav-users] [EMAIL PROTECTED] undetected

2006-01-18 Thread Damian Menscher
On Wed, 18 Jan 2006, James Miller wrote: [EMAIL PROTECTED] is not be picked up by clamav. I'm running 0.88 and have the latest sigs (main version 35 and daily 1245). I know I should figure out how to write a sig for this but is an update expected soon? Have you submitted a sample? If not, g

[Clamav-users] [EMAIL PROTECTED] undetected

2006-01-18 Thread James Miller
Hi all, [EMAIL PROTECTED] is not be picked up by clamav. I'm running 0.88 and have the latest sigs (main version 35 and daily 1245). I know I should figure out how to write a sig for this but is an update expected soon? Thanks, Jim ___ http://lurke

Re: [Clamav-users] virus not detected

2006-01-18 Thread Stephen Gran
On Wed, Jan 18, 2006 at 12:34:08PM -0500, Payal Rathod said: > On Wed, Jan 18, 2006 at 06:22:38PM +0100, Niek wrote: > > The update was released a few minutes after you started this thread :) > > But on my friends amchine she still get, > # freshclam > ClamAV update process started at Wed Jan 18 2

Re: [Clamav-users] virus not detected

2006-01-18 Thread Brian Morrison
On Wed, 18 Jan 2006 12:34:08 -0500 in [EMAIL PROTECTED] Payal Rathod <[EMAIL PROTECTED]> wrote: > > The update was released a few minutes after you started this thread :) > > But on my friends amchine she still get, > # freshclam > ClamAV update process started at Wed Jan 18 22:59:58 2006 > SECUR

Re: [Clamav-users] virus not detected

2006-01-18 Thread Niek
On 1/18/2006 6:34 PM +0100, Payal Rathod wrote: On Wed, Jan 18, 2006 at 06:22:38PM +0100, Niek wrote: The update was released a few minutes after you started this thread :) But on my friends amchine she still get, # freshclam ClamAV update process started at Wed Jan 18 22:59:58 2006 SECURITY W

RE: [Clamav-users] virus not detected

2006-01-18 Thread Kenneth Byrne
> -Original Message- > From: Payal Rathod [mailto:[EMAIL PROTECTED] > Sent: 18 January 2006 17:34 > To: ClamAV users ML > Subject: Re: [Clamav-users] virus not detected > > > On Wed, Jan 18, 2006 at 06:22:38PM +0100, Niek wrote: > > The update was released a few minutes after you started

Re: [Clamav-users] virus not detected

2006-01-18 Thread Christopher X. Candreva
On Wed, 18 Jan 2006, Payal Rathod wrote: > daily.cvd is up to date (version: 1244, sigs: 840, f-level: 6, builder: > sven) FYI, I have three instances of WORM.VB-8 in my logs from yesterday, so even 1244 detects a non-zero number of these. Evidently just not the one you have ==

Re: [Clamav-users] virus not detected

2006-01-18 Thread Payal Rathod
On Wed, Jan 18, 2006 at 06:22:38PM +0100, Niek wrote: > The update was released a few minutes after you started this thread :) But on my friends amchine she still get, # freshclam ClamAV update process started at Wed Jan 18 22:59:58 2006 SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES See the

Re: [Clamav-users] Undetected Virus

2006-01-18 Thread Gerard Seibert
"Randal, Phil" <[EMAIL PROTECTED]> > I submitted a sample yesterday afternoon (GMT) to > http://cgi.clamav.net/sendvirus.cgi , http://virusscan.jotti.org/ , and > http://www.virustotal.com/ > > Cheers, > > Phil Thanks! I have a question though. I created a directory "/var/mail/quarantine" in wh

Re: [Clamav-users] virus not detected

2006-01-18 Thread Cevher
Payal Rathod wrote: >On Wed, Jan 18, 2006 at 07:04:27PM +0200, Cevher wrote: > > >>You can create a temporary signature... >> >> > >Please tell me how. I read signatures.pdf but ... >$ sigtools --md5 virus_file > temp.hdb >What do I do after that? I use clamd, so do I need to restart it? >Wi

Re: [Clamav-users] virus not detected

2006-01-18 Thread Niek
On 1/18/2006 6:18 PM +0200, Payal Rathod wrote: On Wed, Jan 18, 2006 at 12:11:19PM -0500, Chris Conn wrote: update your defs, version 1245 gets it. I updated and it was found. But that is weird, I always update every 1 hour and just a few mins back I manually tried to update, but the virus w

Re: [Clamav-users] virus not detected

2006-01-18 Thread Payal Rathod
On Wed, Jan 18, 2006 at 12:11:19PM -0500, Chris Conn wrote: > update your defs, version 1245 gets it. I updated and it was found. But that is weird, I always update every 1 hour and just a few mins back I manually tried to update, but the virus was not detected and now it is. I am interested in

Re: [Clamav-users] virus not detected

2006-01-18 Thread Chris Conn
update your defs, version 1245 gets it. Payal Rathod wrote: On Wed, Jan 18, 2006 at 07:04:27PM +0200, Cevher wrote: You can create a temporary signature... Please tell me how. I read signatures.pdf but ... $ sigtools --md5 virus_file > temp.hdb What do I do after that? I use clamd, so do I

Re: [Clamav-users] virus not detected

2006-01-18 Thread Payal Rathod
On Wed, Jan 18, 2006 at 07:04:27PM +0200, Cevher wrote: > You can create a temporary signature... Please tell me how. I read signatures.pdf but ... $ sigtools --md5 virus_file > temp.hdb What do I do after that? I use clamd, so do I need to restart it? With warm regards, -Payal ___

Re: [Clamav-users] virus not detected

2006-01-18 Thread Christopher X. Candreva
On Wed, 18 Jan 2006, Payal Rathod wrote: > Me and many friends here are troubled by a new virus which has > attachments like Video_part.mim, Attachment.hqx etc. We are getting this > since last 36 hours and a friend submitted a few samples to clamav Make sure your virus sigs are up to date. If

Re: [Clamav-users] virus not detected

2006-01-18 Thread Cevher
Payal Rathod wrote: >Hi, >Me and many friends here are troubled by a new virus which has >attachments like Video_part.mim, Attachment.hqx etc. We are getting this >since last 36 hours and a friend submitted a few samples to clamav >interface 7 hours back. Symantech detects it since today mornin

[Clamav-users] virus not detected

2006-01-18 Thread Payal Rathod
Hi, Me and many friends here are troubled by a new virus which has attachments like Video_part.mim, Attachment.hqx etc. We are getting this since last 36 hours and a friend submitted a few samples to clamav interface 7 hours back. Symantech detects it since today morning, but clamav is still no

[Clamav-users] Virus db f-level change?

2006-01-18 Thread Brian Morrison
I noticed recently that for a few versions the functionality level of the daily.cvd file was showing as 7, but now it's back to 6 again. Was this an error, or was it necessary? -- Brian Morrison bdm at fenrir dot org dot uk GnuPG key ID DE32E5C5 - http://wwwkeys.uk.pgp.net/pgpnet/wwwkeys.html

Re: [Clamav-users] Problem starting freshclam

2006-01-18 Thread Rita Horve Agbali
Thanks Rob, it worked. - Original Message - From: "Rob MacGregor" <[EMAIL PROTECTED]> To: "ClamAV users ML" Sent: Tuesday, January 17, 2006 5:25 PM Subject: Re: [Clamav-users] Problem starting freshclam On 17/01/06, Rita Horve Agbali <[EMAIL PROTECTED]> wrote: Hi all, Someone helpe

RE: [Clamav-users] Undetected Virus

2006-01-18 Thread Randal, Phil
> I have the latest version of ClamAV and the signature files > installed, however it fails to detect the Win32.Blackmail.F virus. > > My mail is delivered to a FreeBSD server that I run. One of > the machines on the network is a WinXP machine running > ZoneAlarm Suite. When this Windows machin