[Clamav-users] (no subject)

2006-10-04 Thread Peter Schmiedeskamp
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, I've been examining some systems with Clamav (current scanning engine and defs) and have encountered Trojan.URLspoof.gen.2 on several. Information on this malware appears to be somewhat limited. http://www.viruslist.com/en/find? search_m

Re: [Clamav-users] custom virus file

2006-10-04 Thread Carl Thompson
Either none of the images i have saved from spam match that database (quite possible) or clamscan works slightly differently than clamd while scanning emails. Is it possible that clamscan requires and exact match while clamd/clamav-milter only requires a partial match because its testing each a

Re: [Clamav-users] custom virus file

2006-10-04 Thread Dennis Peterson
Carl Thompson wrote: making the signature isnt the problem. the problem is that clamav will only identify the signature if its on its own (such as the signature is a file all its own) it will not identify email with the signature information in it. as an example i took a spam based email image

Re: [Clamav-users] custom virus file

2006-10-04 Thread Carl Thompson
making the signature isnt the problem. the problem is that clamav will only identify the signature if its on its own (such as the signature is a file all its own) it will not identify email with the signature information in it. as an example i took a spam based email image and made a signature

Re: [Clamav-users] custom virus file

2006-10-04 Thread Carl Thompson
making the signature isnt the problem. the problem is that clamav will only identify the signature if its on its own (such as the signature is a file all its own) it will not identify email with the signature information in it. as an example i took a spam based email image and made a signature

Re: [Clamav-users] update version

2006-10-04 Thread Shawn M. Jones
[EMAIL PROTECTED] wrote: Hola Amigos: necesito actualizar la version de clamav de 0.83 a 0.88. Ya baje los archivos .gz y la pregunta es, que teng que hacer para actualizar?? debo hacer backup de los archivos de configuracion y que mas? que otra medida tengo que tener en cuenta? gracia

Re: [Clamav-users] update version

2006-10-04 Thread Christoph Cordes
[EMAIL PROTECTED] wrote: > Hola Amigos: >necesito actualizar la version de clamav de 0.83 a 0.88. Ya > baje los archivos .gz y la pregunta es, que teng que hacer para > actualizar?? > debo hacer backup de los archivos de configuracion y que mas? > que otra medida tengo que tener en cuen

Re: [Clamav-users] custom virus file

2006-10-04 Thread Christoph Cordes
Carl Thompson wrote: > I have followed the documentation i've found and created custom database > files that identify files that stand alone without a problem using sigtool > --md5 > /path/to/custom.db Try: sigtool --md5 > /path/to/custom.hdb -- Best regards, Christoph

[Clamav-users] update version

2006-10-04 Thread pzader
Hola Amigos: necesito actualizar la version de clamav de 0.83 a 0.88. Ya baje los archivos .gz y la pregunta es, que teng que hacer para actualizar?? debo hacer backup de los archivos de configuracion y que mas? que otra medida tengo que tener en cuenta? gracias ___

[Clamav-users] custom virus file

2006-10-04 Thread Carl Thompson
I have followed the documentation i've found and created custom database files that identify files that stand alone without a problem using sigtool --md5 > /path/to/custom.db However when I tested emails containing these files I did not get a positive result. I have tried both the encoded ver

Re: [Clamav-users] clamd shutdown periodicly

2006-10-04 Thread Odhiambo Washington
* On 04/10/06 15:55 +0700, zen wrote: | Dear users, | i`ve just updated my clamav installation to the latest tarball, | but after this, my clamd service periodicly shutdown with this error | messages: | | Wed Oct 4 15:47:07 2006 -> No stats for Database check - forcing reload | Wed Oct 4 15:47:

[Clamav-users] VirusEvent options

2006-10-04 Thread VIEVILLE Cyril
Hello, I need to change my /etc/clamd.conf because I would like to send an email with a subject like "Virus Alert FILENAME : %v" but I don't know any options to replace FILENAME by the name of the file infected Thx for help. Cordialement, CYRIL VIEVILLE Ingénieur Production GIE MUTAR

Re: [Clamav-users] clamd shutdown periodicly

2006-10-04 Thread zen
Török Edvin wrote: On 10/4/06, zen <[EMAIL PROTECTED]> wrote: Dear users, i`ve just updated my clamav installation to the latest tarball, but after this, my clamd service periodicly shutdown with this error messages: Wed Oct 4 15:47:07 2006 -> No stats for Database check - forcing reload Wed

Re: [Clamav-users] clamd shutdown periodicly

2006-10-04 Thread Török Edvin
On 10/4/06, zen <[EMAIL PROTECTED]> wrote: Dear users, i`ve just updated my clamav installation to the latest tarball, but after this, my clamd service periodicly shutdown with this error messages: Wed Oct 4 15:47:07 2006 -> No stats for Database check - forcing reload Wed Oct 4 15:47:07 2006

[Clamav-users] clamd shutdown periodicly

2006-10-04 Thread zen
Dear users, i`ve just updated my clamav installation to the latest tarball, but after this, my clamd service periodicly shutdown with this error messages: Wed Oct 4 15:47:07 2006 -> No stats for Database check - forcing reload Wed Oct 4 15:47:07 2006 -> Reading databases from /usr/local/share

Re: [Clamav-users] daily.wdb and daily.pdb

2006-10-04 Thread Török Edvin
On 10/3/06, Robert Allerstorfer <[EMAIL PROTECTED]> wrote: Hi, Reading phishsigs_howto.pdf from the latest snapshot tarball, it says that each line must consist of *three* fields, in the form Flags RealURL DisplayedURL Is there an updated documentation where the two-fields form will be explai