Re: [Clamav-users] clamd memory usage

2010-04-14 Thread Chris
On Wed, 2010-04-14 at 16:27 -0700, Jim Preston wrote: > On Apr 14, 2010, at 4:07 AM, Chris wrote: > > > On Tue, 2010-04-13 at 19:56 -0700, Jim Preston wrote: > >> Chris wrote: > >>> I'll admit I'm not too smart when it comes to how much memory an > >>> app is > >>> supposed to use but it seems t

Re: [Clamav-users] clamd memory usage

2010-04-14 Thread Chris
On Wed, 2010-04-14 at 16:27 -0700, Jim Preston wrote: > On Apr 14, 2010, at 4:07 AM, Chris wrote: > > > On Tue, 2010-04-13 at 19:56 -0700, Jim Preston wrote: > >> Chris wrote: > >>> I'll admit I'm not too smart when it comes to how much memory an > >>> app is > >>> supposed to use but it seems t

Re: [Clamav-users] clamd memory usage

2010-04-14 Thread Jim Preston
On Apr 14, 2010, at 4:07 AM, Chris wrote: On Tue, 2010-04-13 at 19:56 -0700, Jim Preston wrote: Chris wrote: I'll admit I'm not too smart when it comes to how much memory an app is supposed to use but it seems to me that since I installed .96 on my Mandriva 2010 system it's using an excessi

[Clamav-users] Excel file being expanded enormously

2010-04-14 Thread Brian Bebeau
We have a customer who sent an email through us that was a short text body with an Excel spreadsheet attachment. The attachment is about 988K and the entire email is about 1.3M. For some reason, when ClamAV parses the Excel file, it winds up creating about 2300 files and taking up about 1.3 *gig

Re: [Clamav-users] Database updates source

2010-04-14 Thread clamav
Yes, I see the mirror options in the conf file. Presently: DatabaseMirror db.local.clamav.net DatabaseMirror database.clamav.net I know 'local' can be replaced with IANA country code. Can I replace the domain names with ip addresses? ___ Help us bui

Re: [Clamav-users] clamav 0.96 Corrupted CVD header

2010-04-14 Thread Eric Rostetter
Quoting Ben Bauer : I'm tried last week to run the new ClamAV 0.96 on all our mail and proxy server. All fine and ok but one server have problems, that I cannot understand. I also had this problem on a machine here. The System is a 32Bit Debian Etch (4.0) with a self compiled Kernel 2.6.21.1

Re: [Clamav-users] Database updates source

2010-04-14 Thread Del Monte Paolo
You choice witch mirror to use in freshclam.conf file. Regards Paolo -Original Message- From: clamav-users-boun...@lists.clamav.net [mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of cla...@itwmail.us Sent: mercoledì 14 aprile 2010 15.21 To: clamav-users@lists.clamav.net Subject

[Clamav-users] Database updates source

2010-04-14 Thread cla...@itwmail.us
Can I choose or otherwise restrict which mirrors my server uses for database updates? Thanks in advance, ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] clamd memory usage

2010-04-14 Thread Chris
On Tue, 2010-04-13 at 19:56 -0700, Jim Preston wrote: > Chris wrote: > > I'll admit I'm not too smart when it comes to how much memory an app is > > supposed to use but it seems to me that since I installed .96 on my > > Mandriva 2010 system it's using an excessive amount. > > > > > > PID USER

Re: [Clamav-users] create signature for ELF

2010-04-14 Thread Moray Henderson
Andre Hübner wrote: >>> So why don't you just submit the sample at clamav.net/sendvirus? > >ok, i did that yesterday but iam afraid this is not the kind of mailware >which will >included in official virus-db. >the other thing is that i already sometimes submitted a virussample but >never got feedba

[Clamav-users] clamav 0.96 Corrupted CVD header

2010-04-14 Thread Ben Bauer
Hi, I'm tried last week to run the new ClamAV 0.96 on all our mail and proxy server. All fine and ok but one server have problems, that I cannot understand. After a try to start "clamd" I get this error: LibClamAV Error: cli_cvdload: Corrupted CVD header LibClamAV Error: Can't load /usr/local/sh

Re: [Clamav-users] create signature for ELF

2010-04-14 Thread Andre Hübner
Hello, So why don't you just submit the sample at clamav.net/sendvirus? ok, i did that yesterday but iam afraid this is not the kind of mailware which will included in official virus-db. the other thing is that i already sometimes submitted a virussample but never got feedback. i have to be