Re: [Clamav-users] Signature/Weirdness

2009-09-14 Thread Bill Landry
>> At 2:00 PM -0700 9/14/09, Bill Landry wrote: >>> > At 12:59 PM -0700 9/14/09, Bill Landry wrote: >Tom Shaw wrote: >> I am running ClamAV 0.95.2/9806/Mon Sep 14 14:37:58 2009 when I >> run >> clamscan on a file I get no detection yet when I submit the same >> file >>

Re: [Clamav-users] Signature/Weirdness

2009-09-14 Thread Bill Landry
> At 2:00 PM -0700 9/14/09, Bill Landry wrote: >> > At 12:59 PM -0700 9/14/09, Bill Landry wrote: Tom Shaw wrote: > I am running ClamAV 0.95.2/9806/Mon Sep 14 14:37:58 2009 when I run > clamscan on a file I get no detection yet when I submit the same > file > to > vi

Re: [Clamav-users] Signature/Weirdness

2009-09-14 Thread Tom Shaw
At 2:00 PM -0700 9/14/09, Bill Landry wrote: > At 12:59 PM -0700 9/14/09, Bill Landry wrote: Tom Shaw wrote: I am running ClamAV 0.95.2/9806/Mon Sep 14 14:37:58 2009 when I run clamscan on a file I get no detection yet when I submit the same file to virustotal (0.94.1/20090912) I get Tr

Re: [Clamav-users] Signature/Weirdness

2009-09-14 Thread Bill Landry
> At 12:59 PM -0700 9/14/09, Bill Landry wrote: >>Tom Shaw wrote: >>> I am running ClamAV 0.95.2/9806/Mon Sep 14 14:37:58 2009 when I run >>> clamscan on a file I get no detection yet when I submit the same file >>> to >>> virustotal (0.94.1/20090912) I get Trojan.Zbot-4583 detected. >>> >>> My

Re: [Clamav-users] Signature/Weirdness

2009-09-14 Thread Tom Shaw
At 12:59 PM -0700 9/14/09, Bill Landry wrote: Tom Shaw wrote: I am running ClamAV 0.95.2/9806/Mon Sep 14 14:37:58 2009 when I run clamscan on a file I get no detection yet when I submit the same file to virustotal (0.94.1/20090912) I get Trojan.Zbot-4583 detected. My clamav install has been

Re: [Clamav-users] Signature/Weirdness

2009-09-14 Thread Bill Landry
Tom Shaw wrote: > I am running ClamAV 0.95.2/9806/Mon Sep 14 14:37:58 2009 when I run > clamscan on a file I get no detection yet when I submit the same file to > virustotal (0.94.1/20090912) I get Trojan.Zbot-4583 detected. > > My clamav install has been operating fine for months on OSX 10.5. >

[Clamav-users] Signature/Weirdness

2009-09-14 Thread Tom Shaw
I am running ClamAV 0.95.2/9806/Mon Sep 14 14:37:58 2009 when I run clamscan on a file I get no detection yet when I submit the same file to virustotal (0.94.1/20090912) I get Trojan.Zbot-4583 detected. My clamav install has been operating fine for months on OSX 10.5. Ideas? Tom _

Re: [Clamav-users] unofficial rules preferred

2009-09-14 Thread Karsten Bräckelmann
On Mon, 2009-09-14 at 17:27 +0200, Wolfgang Breyha wrote: > I'm running clamd with both official and sanesecurity sigs. > > Now I made a test with my virus archive and recognized that clamd prefers the > sanesecurity sigs. Using only ClamAV original sigs I have ~3500 virus matches. > Using both or

[Clamav-users] Submission policies

2009-09-14 Thread Giampaolo Tomassoni
Hi, I occasionally submit virus samples to ClamAV through the official submission page. Before submission I also check these viruses with VirusTotal, where at least a bunch of AV products do often detect my samples as malware. If this happens, I also add a link to the VirusTotal's analysis page

Re: [Clamav-users] unofficial rules preferred

2009-09-14 Thread Tomasz Kojm
On Mon, 14 Sep 2009 17:27:23 +0200 Wolfgang Breyha wrote: > Hi! > > I'm running clamd with both official and sanesecurity sigs. > > Now I made a test with my virus archive and recognized that clamd prefers > the sanesecurity sigs. Using only ClamAV original sigs I have ~3500 virus > matches. Us

[Clamav-users] unofficial rules preferred

2009-09-14 Thread Wolfgang Breyha
Hi! I'm running clamd with both official and sanesecurity sigs. Now I made a test with my virus archive and recognized that clamd prefers the sanesecurity sigs. Using only ClamAV original sigs I have ~3500 virus matches. Using both original and sanesecurity sigs ~3900 are found, but the originals

Re: [Clamav-users] Install upgrade from 94 to 95.2 freschclamclamscan failure

2009-09-14 Thread david
Hello Steve, thanks for the reply. I have read the docs but these are now sorely missed points. Assuming it is too late to issue the prescribed command set what is the next course of action to restore clamd? Please advise, David. Steve Holdoway wrote .. > On Sun, 2009-09-13 at 13:06 -0500, da.