Re: [Clamav-users] Virus not detected on Linux/MacOSX

2008-09-19 Thread fchan
Remember not everyone that uses clamav is not an expert so for someone that is new to clamav thinks that every file that went through clamav would be scanned for malware would be incorrect and they have a possibility of opening an infected file. I think a message or warning that a file that was

Re: [Clamav-users] Virus not detected on Linux/MacOSX

2008-09-19 Thread Alexandre Biancalana
On 9/19/08, Dennis Peterson <[EMAIL PROTECTED]> wrote: > Alexandre Biancalana wrote: > > On 9/19/08, Dennis Peterson <[EMAIL PROTECTED]> wrote: > >> fchan wrote: > >> > I read your links and I understand possible DoS and other issues but > >> > to repeat Alexandre's idea, why is there no erro

Re: [Clamav-users] Virus not detected on Linux/MacOSX

2008-09-19 Thread Dennis Peterson
Alexandre Biancalana wrote: > On 9/19/08, Dennis Peterson <[EMAIL PROTECTED]> wrote: >> fchan wrote: >> > I read your links and I understand possible DoS and other issues but >> > to repeat Alexandre's idea, why is there no error message for file >> > that are too large to notify the admin so th

Re: [Clamav-users] Virus not detected on Linux/MacOSX

2008-09-19 Thread Alexandre Biancalana
On 9/19/08, Dennis Peterson <[EMAIL PROTECTED]> wrote: > fchan wrote: > > I read your links and I understand possible DoS and other issues but > > to repeat Alexandre's idea, why is there no error message for file > > that are too large to notify the admin so they can adjust clamd.conf > > or o

Re: [Clamav-users] Virus not detected on Linux/MacOSX

2008-09-19 Thread Dennis Peterson
fchan wrote: > I read your links and I understand possible DoS and other issues but > to repeat Alexandre's idea, why is there no error message for file > that are too large to notify the admin so they can adjust clamd.conf > or other action. Right now this infected file passes through like if

Re: [Clamav-users] Virus not detected on Linux/MacOSX

2008-09-19 Thread fchan
I read your links and I understand possible DoS and other issues but to repeat Alexandre's idea, why is there no error message for file that are too large to notify the admin so they can adjust clamd.conf or other action. Right now this infected file passes through like if it was not infected w

Re: [Clamav-users] bzip2 1.0.5 and clamav 0.94

2008-09-19 Thread fchan
I have RedHat ES 5.1 and I have support with RedHat so I have logged a trouble ticket for this issue and this is their latest reply: 16-SEP-2008 02:03:47Shailendra Suhas Bandodkar Greetings, Thanks for the update. I consulted the security response team. They say that they have reviewed t

Re: [Clamav-users] Clamd does not work

2008-09-19 Thread fchan
Check if /tmp/clamd.socket is there. If so remove it before you start clamd which can hinder clamd from starting. I hope this helps. Frank FreeBSD 5.4-RELEASE-patched-p8 ClamAV 0.94 from ports Clamd does not work. When starting, i get this in logs: However, clamd is not running and

Re: [Clamav-users] How important are file extensions?

2008-09-19 Thread Alejandro Pedraza
>> Does clamav have a mechanism to find out a file is an archive without >> relying on its extension? For example does it know it has to unzip a >> zipped file even if its extension was changed to a random one >> different than .zip ? > > ClamAV doesn't rely on file extensions. It uses magic number

Re: [Clamav-users] How important are file extensions?

2008-09-19 Thread Tomasz Kojm
On Fri, 19 Sep 2008 14:46:40 -0500 "Alejandro Pedraza" <[EMAIL PROTECTED]> wrote: > Hi, > > Does clamav have a mechanism to find out a file is an archive without > relying on its extension? For example does it know it has to unzip a > zipped file even if its extension was changed to a random one

[Clamav-users] How important are file extensions?

2008-09-19 Thread Alejandro Pedraza
Hi, Does clamav have a mechanism to find out a file is an archive without relying on its extension? For example does it know it has to unzip a zipped file even if its extension was changed to a random one different than .zip ? Thanks, Alejandro ___ Help

Re: [Clamav-users] Virus not detected on Linux/MacOSX

2008-09-19 Thread Tomasz Kojm
On Fri, 19 Sep 2008 10:51:52 -0300 "Alexandre Biancalana" <[EMAIL PROTECTED]> wrote: > Right ! This is detect now, but the correct behavior would not be > display a error message like "File too big, not scanned!" ?? Some discussions on this topic: http://lurker.clamav.net/message/20080129.163022

Re: [Clamav-users] Virus not detected on Linux/MacOSX

2008-09-19 Thread Alexandre Biancalana
On 9/19/08, Tomasz Kojm <[EMAIL PROTECTED]> wrote: > On Fri, 19 Sep 2008 10:14:29 -0300 > "Alexandre Biancalana" <[EMAIL PROTECTED]> wrote: > > > Bug 1195 opened ! > > Please see my comment, clamscan --max-filesize=50M detects the file Right ! This is detect now, but the correct behavior would

Re: [Clamav-users] Virus not detected on Linux/MacOSX

2008-09-19 Thread Tomasz Kojm
On Fri, 19 Sep 2008 10:14:29 -0300 "Alexandre Biancalana" <[EMAIL PROTECTED]> wrote: > Bug 1195 opened ! Please see my comment, clamscan --max-filesize=50M detects the file -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg

Re: [Clamav-users] Clamd does not work

2008-09-19 Thread kwijibo
Vladimir wrote: > A lot of lines like > #0 0x28141268 in _pthread_sigmask (how=3, set=0xbfbfeb50, oset=0x0) > at /usr/src/lib/libthr/thread/thr_sig.c:60 > #1 0x281a5a1a in sigprocmask () from /usr/lib/libpthread.so.1 > Did you change the PTHREAD_LIBS in the ports Makefile at all? I unfortu

Re: [Clamav-users] Virus not detected on Linux/MacOSX

2008-09-19 Thread Alexandre Biancalana
On 9/19/08, Arnaud Jacques <[EMAIL PROTECTED]> wrote: > Hello, > > Le vendredi 19 septembre 2008 01:54, Alexandre Biancalana a écrit : > > > Hi list, > > > > I'm experiencing a very strange situation and need some help. I have > > some files infected by W32.Parite.B in my linux file server, bu

Re: [Clamav-users] Virus not detected on Linux/MacOSX

2008-09-19 Thread Alexandre Biancalana
On 9/19/08, Török Edwin <[EMAIL PROTECTED]> wrote: > On 2008-09-19 02:54, Alexandre Biancalana wrote: > > Hi list, > > > > I'm experiencing a very strange situation and need some help. I have > > some files infected by W32.Parite.B in my linux file server, but the > > clamav on the file serve

Re: [Clamav-users] bzip2 1.0.5 and clamav 0.94

2008-09-19 Thread Markus Egg
ldconfig: yes I remembered that afterwards. ;-) clamav 0.94 plus patch is running on SuSE 10.3 ok now for the last 14 days. Which announcement do you mean? I do not read this mailing list regularly... I did not find anything on the website. For the future one suggestion: can you please put things

Re: [Clamav-users] Virus not detected on Linux/MacOSX

2008-09-19 Thread Arnaud Jacques
Hello, Le vendredi 19 septembre 2008 01:54, Alexandre Biancalana a écrit : > Hi list, > > I'm experiencing a very strange situation and need some help. I have > some files infected by W32.Parite.B in my linux file server, but the > clamav on the file server does not detect the virus, so I copied

Re: [Clamav-users] Virus not detected on Linux/MacOSX

2008-09-19 Thread Török Edwin
On 2008-09-19 02:54, Alexandre Biancalana wrote: > Hi list, > > I'm experiencing a very strange situation and need some help. I have > some files infected by W32.Parite.B in my linux file server, but the > clamav on the file server does not detect the virus, so I copied the > file to my OS X 10, r