Re: [clamav-users] Some questions about setting up ClamAV

2012-01-25 Thread Jim Preston
On 01/25/2012 11:35 AM, Simon Hobson wrote: [snip] 3) our web site allows users to upload images via a standard form. We would like to set up ClamAV to be able to scan their file before it gets uploaded to the server, how can we do this? You can't - it's not there to scan before it's bee

Re: [clamav-users] Some questions about setting up ClamAV

2012-01-25 Thread Simon Hobson
Andy Newby wrote: We're using ClamAV on a Unix Centos Server, with WHM and Cpanel, we would like to do this: 1) Set up a cron job to scan a single domain (via Cpanel), and a cron job for the entire server (via WHM), how? Create cron jobs to call clamscan with the options you want ? 2) We

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread Tomasz Kojm
On Wed, 25 Jan 2012 16:45:09 +0100 [Cardiff] Tugdual de LASSAT wrote: > Hello Tomasz. > > FYI, did so, and have created ID N°4269, bugzilla report.. > Not knowing I enabled severity to blocker (first in list), but please change > if estimating it is erroneous.. The problem is now fixed in clamav

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread Bowie Bailey
On 1/25/2012 11:02 AM, [Cardiff] Tugdual de LASSAT wrote: > That one is good: > I do get : > > clamdscan selsia.ppt > /root/selsia.ppt: Heuristics.OLE2.ContainsMacros FOUND > > --- SCAN SUMMARY --- > Infected files: 1 > Time: 0.001 sec (0 m 0 s) > > So I must admit there is a pro

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread [Cardiff] Tugdual de LASSAT
That one is good: I do get : clamdscan selsia.ppt /root/selsia.ppt: Heuristics.OLE2.ContainsMacros FOUND --- SCAN SUMMARY --- Infected files: 1 Time: 0.001 sec (0 m 0 s) So I must admit there is a problem in clamscan result that differs... Nevertheless I do not have any macro

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread Bowie Bailey
On 1/25/2012 9:48 AM, [Cardiff] Tugdual de LASSAT wrote: > Hello the list.. > > I have a problem, i wish to submit to your review... > We run 4 years discontinuating, an Exim+Clamav mail server solution that ran > smoothly to our needs, until recent internal false positive has been > signaled... >

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread [Cardiff] Tugdual de LASSAT
Hello Tomasz. FYI, did so, and have created ID N°4269, bugzilla report.. Not knowing I enabled severity to blocker (first in list), but please change if estimating it is erroneous.. Thanks again for your support Tugdual de Lassat -Message d'origine- De : clamav-users-boun...@lists.clam

[clamav-users] Some questions about setting up ClamAV

2012-01-25 Thread Andy Newby
Hi, We're using ClamAV on a Unix Centos Server, with WHM and Cpanel, we would like to do this: 1) Set up a cron job to scan a single domain (via Cpanel), and a cron job for the entire server (via WHM), how? 2) We would like to set up a cron job to update ClamAV with the latest virus DB on a si

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread Tomasz Kojm
On Wed, 25 Jan 2012 16:16:56 +0100 [Cardiff] Tugdual de LASSAT wrote: > Thanks for your prompt return ... > > Problem is: > 1- That specific powerpoint doesn't use macros (it's a plain slide with no > macros in it) > 2- An excel file using macros passed detection without problems. (visibly > all

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread [Cardiff] Tugdual de LASSAT
Thanks for your prompt return ... Problem is: 1- That specific powerpoint doesn't use macros (it's a plain slide with no macros in it) 2- An excel file using macros passed detection without problems. (visibly allowing me to suspect a signature problem) 3- clamscan declares it free ... Am I mad ?

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread Török Edwin
On 01/25/2012 05:02 PM, [Cardiff] Tugdual de LASSAT wrote: > Hello the list.. > > I have a problem, i wish to submit to your review... > We run 4 years discontinuating, an Exim+Clamav mail server solution that ran > smoothly to our needs, until recent internal false positive has been > signaled...

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread Tomasz Kojm
On Wed, 25 Jan 2012 16:02:56 +0100 [Cardiff] Tugdual de LASSAT wrote: > I do understant that it is the function OLE2ContainsMacros function I > activated that is in cause, but aren't signatures used between daemon and > clamscan the same ? This option will make ClamAV detect all office documents

[clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread [Cardiff] Tugdual de LASSAT
Hello the list.. I have a problem, i wish to submit to your review... We run 4 years discontinuating, an Exim+Clamav mail server solution that ran smoothly to our needs, until recent internal false positive has been signaled... One of our members is trying to send internally an email containing a

[clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread [Cardiff] Tugdual de LASSAT
Hello the list.. I have a problem, i wish to submit to your review... We run 4 years discontinuating, an Exim+Clamav mail server solution that ran smoothly to our needs, until recent internal false positive has been signaled... One of our members is trying to send internally an email containing a

Re: [clamav-users] undetected virus

2012-01-25 Thread polloxx
On Tue, Jan 24, 2012 at 9:13 PM, Joel Esler wrote: > This has been handled. > I noticed this. Thanks. P. ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml