On Wednesday 11 August 2004 9:13 pm, [EMAIL PROTECTED] wrote:
> Hi,
>
> I was wondering prior to version .05 (feb 10, 2004) what the real virus
> installed with mail clam av was.
Please can you rephrase your question?
Version 0.05 of what?
ClamAV does not install any viruses.
Regards,
Antony.
On Wednesday 28 July 2004 9:33 pm, Bruno Lellis wrote:
> Hello,
> I've read some emails that says that clamav scan file with password for a
> long time. But I put a password in eicar zip and test with 'clamscan
> eicar.zip' and clamav does not detect virus, only if no password-protected
> zip is d
On Tuesday 27 July 2004 6:54 pm, Jona Tallieu wrote:
> Hi All,
>
> Just upgraded to 0.75 on OSX 10.3.
>
> When checking CLAMAV version to be sure the upgrade was ok I get:
>
> mail:/usr/local/bin root# ./clamscan --version
> clamscan / ClamAV version 0.75
>
> But when I forgot the ./, I get this:
On Monday 26 July 2004 11:46 am, Suril Patel wrote:
> Hi,
>
> I am on FreeBSD and want to put a form on my website whereby visitors can
> send a message plus a CV attachment (probably in MS Word format).
Why not insist on a vendor-neutral format, such as pdf? Not everyone can
read MS Word, and
On Saturday 24 July 2004 4:34 pm, tahir hussien wrote:
>
> Hi there :
>
> i'm using Clamav 0.74 with dansguardian filter.my
> problem is ...when i open any internet page it begin the request but No
> page to display i open the log file and found that it request page and the
> (GET 0) infron
On Friday 16 July 2004 8:35 pm, A.R.S. KA9QLQ Alvin Koffman wrote:
> I ran freshclam after getting this email from cron and it said I'm up to
> date. Strange.
>
> ERROR: Can't get information about database.clamav.net host.
> ERROR: Connection with database.clamav.net (IP: ???) failed.
> ERROR: Ca
On Wednesday 14 July 2004 12:58 pm, Gavin Aiken wrote:
> I receive a number of
> emails every day with the SomeFool, LovGate and Bagle worms - these all use
> forged 'from' addresses so bouncing the message back is usually not useful
> at all (and clogs up the mail server). In fact I have had a nu
On Wednesday 14 July 2004 11:31 am, Chan Ho wrote:
> One day, my colleagues complained that there is a internal email missing. I
> went to check the log and quarantine folder that there is some emails
> suspends by clamav and log as "Trojan.Startpage.gen-17" found. But the
> emails itself does not
On Thursday 08 July 2004 5:15 pm, [EMAIL PROTECTED] wrote:
> I just installed clamav for the first time today, so please bear with me.
>
> Although clamscan finds a lot of HTML naztyness, the Virus #1, I´m
> receiving Netsky.P totally gets away.
Does your ClamAV installation detect Eicar (or any
On Wednesday 07 July 2004 1:34 pm, Alexander Fossa wrote:
> Hi,
>
> I am trying to update the definitions, but i always get the error.
>
> SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES
>
> I have installed the gmp-devel package but still the error...
>
> Any ideas?
Have you recompiled fres
On Saturday 26 June 2004 8:44 am, RPraveenKumar wrote:
> I am new to this clamav
> Kindly guide me how to go about this
http://www.clamav.net/binary.html
http://www.clamav.net/doc/0.73/html
http://www.clamav.net/faq.html
--
This is not a rehearsal.
This is Real Life.
On Tuesday 22 June 2004 8:16 pm, Matias Lopez Bergero wrote:
> Hi!
>
> If i search for [EMAIL PROTECTED] or just Netsky in the clamav database I
> got no results.
> This virus is called in a different way for clamav?
>
> Where can I learn the know as aliases of this viruses??
The link "Virus Nami
On Tuesday 22 June 2004 2:41 am, Joseph A. Nagy, Jr. wrote:
> On Tue, Jun 22, 2004 at 03:30:19AM +0200, Damjan wrote the following:
> > > However you cannot:
> > >
> > > - directly use the virus databases
> >
> > How come?
> > As far as I know, copyright law doesn't protect databases.
>
> You have
On Monday 21 June 2004 11:11 pm, Philipp Ringli wrote:
> sorry. i am a bloody beginner...
>
> this is what i could find:
> [EMAIL PROTECTED] stats]# locate xdm
> /usr/share/doc/HOWTO/HTML/en/XDM-Xterm/xdm-advconfig.html
> /usr/share/doc/HOWTO/HTML/en/XDM-Xterm/xdm.html
> /usr/share/doc/HOWTO/HTML/
On Friday 18 June 2004 9:12 am, Simon Fishley wrote:
> When you think about it though - does it really matter if you don't stop a
> virus in an encrypted archive file? Unless the recipient knows the
> password there is very little risk of damage. Not a very successful way of
> getting a virus to
On Thursday 17 June 2004 10:01 am, [EMAIL PROTECTED] wrote:
> Hi Antony!
>
> > Have you recompiled your system libraries for the Duron since upgrading
> > from the Pentium?
>
> No, the "old" mainboard is only 6 months old and have guarantee.
> I hope the new come today or tommorow with a pentium b
On Thursday 17 June 2004 9:17 am, [EMAIL PROTECTED] wrote:
> Hi Antony!
>
> > What Operating System & version?
>
> I had a mainboard-crash so I must changed my pentium board with a
> duron-board.
> It is a crux linux, it is like LFS based on source.
Have you recompiled your system libraries for t
On Wednesday 16 June 2004 2:22 pm, [EMAIL PROTECTED] wrote:
> Hi folks!
>
> My clamav is not running anymore and I dont know why?
What have you changed since it did last work?
> I thought perhaps I had an old version 0.70-rc so I installed the new
> 0.73, but everytime I get everytime the same e
On Tuesday 15 June 2004 4:35 pm, Damian Menscher wrote:
> > The primary reason database.clamav.net was split into several regional
> > zones was to avoid gigantic DNS reply, which would require TCP instead
> > of UDP. Instead of returning all mirror IP addressess, it returns only
> > several addre
On Tuesday 15 June 2004 4:35 am, Damian Menscher wrote:
> On Tue, 15 Jun 2004, Fajar A. Nugraha wrote:
> > Ryan Moore wrote:
> > > Damian Menscher wrote:
> > >> What do you get when you do "host database.clamav.net" ?
> > >
> > > Yea, doh. Is the DNS supposed to return a RR based on your location?
On Monday 14 June 2004 10:06 am, Kent Emia wrote:
> i just browse thru my pc and found this file and wondered what would be
> the use of anti-virus if this won't clean infected file???
>
> Q: Does ClamAV repair infected files ?
> A: No. Due to the structure of used database, it can't repair infect
On Sunday 06 June 2004 3:05 pm, kitten wrote:
> Trashscan is for single users only.. I want a MTA scanner.
http://www.mailscanner.info is good for that.
Regards,
Antony.
> List wrote:
> >>Hi..
> >>
> >>I want to reject virus emails, but i don't know much about procmail. Is
> >>there anyone tha
On Saturday 29 May 2004 2:24 pm, Mário L. Ghoneim wrote:
> [EMAIL PROTECTED] etc]# /usr/local/bin/freshclam -l /var/log/clam-update.log
> ClamAV update process started at Sat May 29 10:15:49 2004
> SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES
> Reading CVD header (main.cvd): OK
> main.cvd i
On Saturday 29 May 2004 10:48 am, Terry Allen wrote:
> Hi all,
> I did try posting this morning about this, but nothing has
> come back to my address off the list yet after subscribing, so here
> goes again.
> I have been running ClamAV (0.65) for some time without issue
> until last w
On Thursday 27 May 2004 7:38 pm, Nigel Horne wrote:
> On Thursday 27 May 2004 16:50, Mário L. Ghoneim wrote:
> > Please,
> >
> > Someone knows what´s wrong?
> >
> > [EMAIL PROTECTED] arquivos]# /usr/local/bin/clamscan /var/spool/mail/mario
> > ERROR: Parse error at line 67: Unknown option ThreadTi
On Thursday 20 May 2004 9:13 pm, Jim Maul wrote:
> Exactly, and after some more playing around, i found that i dont even have
> to remove ALL of those lines. I can leave them all in except the first
> line which was "-Original Message-"
>
> If i remove that line, clamscan finds the virus
On Thursday 20 May 2004 7:50 pm, Jim Maul wrote:
> > > There is something that is causing clamav to not be able to detect this
> > > virus after the message has been bounced and now forwarded.
> >
> > Damaged bounces are not dangerous. Why bother making signatures for them
> > when you don't make
On Thursday 20 May 2004 7:21 pm, Peter Bonivart wrote:
> Jim Maul wrote:
> > There is something that is causing clamav to not be able to detect this
> > virus after the message has been bounced and now forwarded.
>
> Damaged bounces are not dangerous. Why bother making signatures for them
> when y
On Wednesday 19 May 2004 12:54 pm, Betsy Schwartz wrote:
> Some PC's on our network have been flagged as having
> "agobot,gaobot,polybot" (or a sasser variant), by the perimiter security
> system. I have looked at Kevin's excellent database at
> http://www.rainingfrogs.co.uk and don't see any mat
On Wednesday 19 May 2004 10:38 am, Jona Tallieu wrote:
> Hi all,
>
> We have CLAMD up & running with our CommunigatePro
> mailserver and CGPAV filter.
>
> We do an hourly check for fresh virusses using cron
> and freshclam, and it works perfectly.
Hopefully you are doing this at a random number o
On Tuesday 18 May 2004 3:39 pm, Samuel Benzaquen wrote:
> Hi,
>
> I'm trying to do a report of how clamav have reduced disk usage by blocking
> virus emails.
Huh? That seems like a very strange measure of benefit from blocking viruses
to me. It's a bit like measuring how much less frequently
On Saturday 15 May 2004 2:31 pm, Gavin Henry wrote:
> > On Saturday 15 May 2004 10:52 am, Gavin Henry wrote:
> > > Dear all,
> > >
> > > I have noticed on a Windows systems, that a 3 day out of date
> > > Stinger.exe scanner from McAffee seems to find more viruses/trojans
> > > etc. than an up two
On Saturday 15 May 2004 10:52 am, Gavin Henry wrote:
> Dear all,
>
> I have noticed on a Windows systems, that a 3 day out of date Stinger.exe
> scanner from McAffee seems to find more viruses/trojans etc. than an up two
> date calmav scanner, i.e. Clamwin.
Give us some examples of the particular
On Monday 10 May 2004 8:14 pm, Scott Harris wrote:
> Below are some results from a recent run of all the tests on
> www.testvirus.org.
>
> #5 Got through Clam but BitDefender caught it.
> #8 MimeDefang removed eicar.com
> #12 Got through Clam but GFI quarantined
> #19 Got through Clam but Kaspersk
On Saturday 08 May 2004 12:09 am, Todd Lyons wrote:
> Ing. Germán González B. wanted us to know:
>
> > After one hour the messages are sent to posmaster (Every hour the queue
> > is procesed)
> >
> > CLAMAV_FLAGS="--quarantine-dir=/var/clamav/quarantine --max-children=200
>
> Holy cow! 200 ???
On Friday 07 May 2004 8:52 pm, Phil Ershler wrote:
> Hi,
> I am attempting to replace our e-mail virus scanner (RAV) with clamav.
> I am running it under OS X 10.3. I have about 250 e-mail messages that
> RAV has quarantined as being virus infected. If I use clamscan to scan
> these files, i
On Friday 07 May 2004 2:14 pm, Mike Lambert wrote:
> On Fri, 7 May 2004, Antony Stone wrote:
> > On Friday 07 May 2004 12:49 pm, Dan O'Brien wrote:
> > > > What is the simplest and best solution for providing virus detection
> > > > of incoming email usin
On Friday 07 May 2004 12:49 pm, Dan O'Brien wrote:
> > What is the simplest and best solution for providing virus detection of
> > incoming email using Clamav with sendmail both assuming I don't have
> > milter and that I do?
I like http://www.mailscanner.info as it neatly handles all the email /
On Wednesday 05 May 2004 3:09 pm, Flynn wrote:
> Hi everyone ...
>
> I have a file, which I suppose is infected with W32/[EMAIL PROTECTED], if I trust
> some other AV.
> If I submit it to the clam on-line scan server, it finds it as
> "Worm.SomeFool.Gen-1"
>
> but... clamscan does not find it.
>
>
On Wednesday 05 May 2004 3:00 pm, Matthew Myers wrote:
> Is there a way to auto delete the temp files created when scanning? My
> system (v 0.70) hung yesterday due to the temp files not being
> deleted...they tend to grow and grow and grow. Today I already have over
> 10,000 temp files, and alt
On Tuesday 04 May 2004 6:30 pm, chintan chintan wrote:
> Hi guys,
>
> I am a new user of clamav. I was testing clamAv against various worms and
> viruses I have collected from McAfee's AV. A lot of them dont trigger any
> alert.
Are you sure these are (still) viruses? Some commercial A-V produc
On Tuesday 04 May 2004 4:46 pm, Russ Phillips wrote:
> Hi,
>
> I have a query. Most commercial AV software claims to catch something
> like 70,000+ viruses. On the other hand, ClamAV claims to catch 20,000+
> viruses.
>
> Why the difference? Is it because McAfee, Sophos et al consider each and
> e
On Monday 03 May 2004 7:10 pm, Michael St. Laurent wrote:
> Wow. I posted a message to the list at 9:23 AM (PDT) and as of 11:06 AM
> (PDT) it *still* hasn't posted. I wonder if this one will do any better?
You mean the one saying: "According to http://sarc.com/ there are several
variants of t
On Monday 03 May 2004 9:12 pm, Steve Brorens wrote:
> Some of the boxes I have running ClamAV will be behind behind
> restrictive firewalls.
> They receive smtp email, and can do DNS calls, but have no http/80
> access to the internet. I *do* have ssh access though from the outside, and
> could sc
On Monday 03 May 2004 10:11 pm, Michael St. Laurent wrote:
> Antony Stone <mailto:[EMAIL PROTECTED]> wrote:
> > On Monday 03 May 2004 7:10 pm, Michael St. Laurent wrote:
> >> Wow. I posted a message to the list at 9:23 AM (PDT) and as of
> >> 11:06 AM (PDT) it *s
On Saturday 01 May 2004 10:20 am, Antony Stone wrote:
> On Saturday 01 May 2004 10:06 am, Dale Gallagher wrote:
> >
> > I'd appreciate a permission listing of those /dev entries
> > on the Slack boxes that have it working. Thanks.
>
> I'm not using clamd
On Saturday 01 May 2004 10:06 am, Dale Gallagher wrote:
> Hi
>
> > you can use /dev/fd/2?
> > /proc/self/fd/2
>
> None of the suggestions incl. the above work
>
> Running Slack 9.1 boxes with Kernels 2.4.25 and others with
> 2.6.4
>
> Errors reported are consistent:
>
> ERROR: Can't open /dev/
On Friday 30 April 2004 6:21 pm, Ken Goods wrote:
> Should have said I'm running clamav-0.70rc-1.i386.rpm Is there a newer
> version than this?
Clicking on the "Download - stable" link from http://www.clamav.net leads to
http://prdownloads.sourceforge.net/clamav where the latest version shown is
On Friday 30 April 2004 6:08 pm, Ken Goods wrote:
> Installed this machine about 2 weeks ago using the latest and greatest
> version. This morning I am getting the following message when running
> freshclam. I added asterisks to the new lines in question. Checked the
> announce list and do not see
On Monday 26 April 2004 7:28 am, Mihai Berendei wrote:
> ---
> This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek
> For a limited time only, get FREE Ground shipping on all orders of $35
> or more. Hurry up and shop folks, this o
On Sunday 25 April 2004 12:21 pm, John van Lit wrote:
> All,
>
> At this moment I'm using clamav-0.70-rc. When I check my update log is see
> the following error.
>
> Your ClamAV installation is OUTDATED - please update immediately !
>
> How can I resolve this?
Er, upgrade to 0.70?
Antony.
--
On Tuesday 20 April 2004 5:11 pm, Adrian Gurbina (main) wrote:
> W32.Netsky.P.dam is not detectable by clamav
> i use freshclam with -c 40 and it cant detect that virus ?
> is there a problem?
The .dam suffix means "damaged". The sample you have may be sufficiently
damaged that ClamAV can't re
On Monday 19 April 2004 6:50 pm, Todd Lyons wrote:
> Same problem many people are having. Your freshclam is probably
> downloading to a place that your commandline scanner knows to look, but
> your daemon is looking somewhere else.
>
> Personally I'm wondering if it would be better to remove the
On Monday 19 April 2004 5:10 pm, Riccardo Ghiglianovich wrote:
> Moreover, Clamav Virus database Search
> http://clamav-du.securesites.net/cgi-bin/clamgrok does not contains
> nothing named Netsky*
Please can we put a big notice on the ClamAV website telling people that
NetSky is SomeFool?
We c
On Monday 19 April 2004 2:34 pm, Pad Hosmane wrote:
> Hi,
> Clamav is not detecting or cleaning [EMAIL PROTECTED] I am running
> clamav-0.07-rc.
That's the name I see F-Prot using for what ClamAV identifies as
Worm.SomeFool.Gen-2
Are you seeing other varieties which aren't picked up, or is yo
On Sunday 18 April 2004 5:20 pm, Emmanuel Saracco wrote:
> hi,
>
> I have the following message with last 0.70:
>
> ERROR: Can't open new file ./clamav-c5c9e8986810b4fd to write
> open: Permission denied
> ERROR: Can't download daily.cvd from 62.210.153.201
> badiou:/tmp#
>
> can someone point me
On Sunday 18 April 2004 12:33 pm, WipeOut wrote:
> Ian Armstrong wrote:
> > I am looking for an SMTP proxy to use with Clamav. Can anyone
> > recommend one?
>
> I am looking for the same thing but so far I haven't found anything to
> do it.. It seems that everything wants to integrate with the mai
On Friday 16 April 2004 1:20 pm, Mike van Vugt wrote:
> Scaned a lot of files:
>
> --- SCAN SUMMARY ---
> Known viruses: 21074
> Scanned directories: 9239
> Scanned files: 97704
> Infected files: 8
> Data scanned: 13575.66 MB
> I/O buffer size: 131072 bytes
> Time: 6137.270 sec (10
On Wednesday 14 April 2004 8:08 pm, Oscar A. Valdez wrote:
> I just installed ClamAV, but Worm.SomeFool.P (in a zip file) is getting
> through, although the online scanner at
> http://www.gietl.com/test-clamav/ detects it.
>
> Am I missing something in my configuration?
Try sending yourself an em
On Wednesday 14 April 2004 7:28 pm, B. van Ouwerkerk wrote:
> > > - cross posting
> > > - questions send to the wrong list
> >
> > I think both of these examples are things which would be improved by
> > having two lists.
>
> Of course not. Do we have cross postings right now? No.
Not literally c
On Wednesday 14 April 2004 4:21 pm, B. van Ouwerkerk wrote:
> At 17:01 14-04-2004 +0300, you wrote:
> >May I propose a separate mailing list for milter users? There seems to
> >be alot of discussions about milter (now I even know it's some form of
> >sendmail plugin) that warrants this.
> >Some of
On Wednesday 14 April 2004 3:01 pm, Odhiambo Washington wrote:
> May I propose a separate mailing list for milter users? There seems to
> be alot of discussions about milter (now I even know it's some form of
> sendmail plugin) that warrants this.
> Some of us use Exiscan and we find milter quite
On Wednesday 14 April 2004 1:09 am, jef moskot wrote:
> On Wed, 14 Apr 2004, Antony Stone wrote:
> > The problem here is that it's only possible to measure "prevalence" once
> > there's been quite a lot of it under the old name...
>
> Other viruses/worms h
On Wednesday 14 April 2004 12:16 am, jef moskot wrote:
> I think if the website just said "What we call 'SomeFool' others call
> 'Netsky'," 95% of all questions would be covered.
That seems like a good idea to me.
> Personally, I don't understand why this particular name has not been
> changed,
On Tuesday 13 April 2004 9:51 pm, Henry Harvey wrote:
> Is there anywhere I can check the corresponding
> virus names for ClamAV? I understand that
> the names from some other AVs are not the
> same as how ClamAV calls it. Like Netsky.P
> is actually in SomeFool.P in ClamAV.
>
> I'm looking at the
On Tuesday 13 April 2004 8:38 pm, [EMAIL PROTECTED] wrote:
> I have done everything in the docs and still it just does not work. I am
> on RH9 so I had to use the rpm version to even get clamd to work but there
> it is in the processes but check the maillog and not one mention of
> scanning the t
On Tuesday 13 April 2004 6:43 pm, Mike van Vugt wrote:
> $ /usr/sbin/clamd
> ERROR: Problem with internal logger. Please check the permissions on the
> /var/log/clamav/clamd.log file
Which user are you trying to run clamd as?
> $ ls -al
> total 16
> drwxr-xr-x 2 clamav clamav 4096 Apr 13 16:36
On Tuesday 13 April 2004 4:30 pm, Nigel Horne wrote:
> On Tuesday 13 Apr 2004 3:11 pm, Andrei Bucur wrote:
> > can i stop scaning email for selected users ? not from !
>
> No-one has ever asked for that before, so the answer is currently no means
> to do that.
You could try http://www.mailscanner
On Tuesday 13 April 2004 2:28 pm, Gary S. Searing wrote:
> Hello,
>
> I would appreciate it if someone could give me basic instructions on how
> to set up one of my mail gateways(running clamav) to act as a master for
> virus databases... and have all of my other mail gateways pointing at
> this m
On Monday 12 April 2004 5:10 pm, Keith G. Murphy wrote:
> I'm finding this detected on C:\WINDOWS\directcc.exe on some Win98
> shares, even when the executable in question has been freshly installed.
So submit the file as a false positive on the ClamAV website then.
No point in assuming that the
On Sunday 11 April 2004 12:54 am, Spades wrote:
> any idea, how can i get clam to work with sendmail?
http://www.MailScanner.info is good, alternatively there is the clamav-milter,
or I believe you can use Amavis.
Regards,
Antony.
--
Wanted: telepath. You know where to apply.
On Friday 09 April 2004 9:34 pm, Spades wrote:
> heya,
>
> how do i link clamav with sendmail?
I use http://www.MailScanner.info - very configurable, supports other AV
engines at the same time as ClamAV if you want, and integrates nicely with
SpamAssassin too - also does some very useful tests
On Friday 09 April 2004 5:52 pm, Brad Morgan wrote:
> > he said: those virusses are caught by norton on workstations,
> > clamav didn't catch them on the mailserver. Given that the workstations
> > received them by mail.
>
> I don't know how Norton is configured in this case, but in my case I have
On Friday 09 April 2004 5:21 pm, Mike Lambert wrote:
> Greetings,
>
> I have been running ClamAV version devel-20040405 for three days without
> issue, until this morning. Now, for each virus rejected, the following
> entry appears in the syslog:
>
> /kernel: pid 72343 (clamav-milter), uid 3001: e
On Friday 09 April 2004 5:10 pm, Jim Maul wrote:
> > >>We have Symantec Corporate Ed AV running on
> > >>all workstations and it blocks those files
> > >>from even saving to any pc. I have the logs
> > >>which says that
> > >>
> > >>[EMAIL PROTECTED]
> > >>[EMAIL PROTECTED]
> > >>[EMAIL PROTECTED]
On Friday 09 April 2004 3:15 pm, Henry Harvey wrote:
> Would it be possible to report what
> viruses (names) are not being detected by ClamAV,
> instead of submitting a sample?
That isn't much use, since without a sample we can't generate a signature.
> We have Symantec Corporate Ed AV running o
On Friday 09 April 2004 3:03 pm, Keith Patton wrote:
> Fajar A. Nugraha wrote:
> >
> > ClamWin seems like a good program, Alex. Can you modify it so that it
> > could connect to a remote clamd server?
> > Possibly as an option.
> > The distributed clamav.exe on clamav source's contrib directory do
On Friday 09 April 2004 2:35 pm, Mike van Vugt wrote:
> My Steps
>
> groupadd clamav
> useradd -g clamav -s /bin/false -c "Clam AntiVirus" clamav
>
> tar xzvf clamav-versie.tar.gz
> * cd clamav-versie
> * ./configure --sysconfdir=/etc/clamav
> * make
> * als root: make inst
On Thursday 08 April 2004 10:30 pm, Henry Harvey wrote:
> I received an email with a virus but wasn't
> detected by ClamAv. I am running postfix +
> amavisd-new and clamav. I am new to ClamAv
> and don't know what the procedures are to
> report viruses.
Follow the "submit sample" link from the Cl
On Thursday 08 April 2004 8:45 pm, Jack London Networks wrote:
> Okay, I like the --mbox support of clamscan. Problem is - now that I
> know there are infected messages in people's inboxes/other folders, I
> have very little information to go on to find and clean those
> messages. For example,
On Thursday 08 April 2004 11:38 am, Muhammad Kashif Muneer wrote:
> Dear All Members,
>
> I am using Clamav 0.67 as my Antivirus on mail server with clam-milter.
> Yesterday I download ClamWin and install it on windows client
> successfully. Now I would like to ask how I can use the virus database
On Thursday 08 April 2004 4:16 am, Ian Armstrong wrote:
> I have just installed Clamav with exiscan. How do I know when Clamav has
> found (or rejected) a virus?
You could try sending yourself a test virus and see what happens?
http://www.eicar.org/anti_virus_test_file.htm
Regards,
Antony.
--
On Wednesday 07 April 2004 7:59 pm, Jeff Ramsey wrote:
> Do I have to use a CVS version to get this one to be detected? Sophos
> detects it fine on this machine.
No.
I'm picking up Worm.SomeFool.P (aka Worm/NetSky.P according to Antivir,
W32/[EMAIL PROTECTED] according to F-Prot, W32/[EMAIL PRO
On Tuesday 06 April 2004 9:44 pm, jef moskot wrote:
> > The focus of the product is to stop viruses, not to name them with a
> > popular name.
>
> Yes, but this is not best accomplished by calling users "stupid" (even
> when they are).
That may be true, however it's no excuse for allowing stupid
On Tuesday 06 April 2004 3:58 pm, Eric Rostetter wrote:
> Quoting Erick Perez - Vision Media <[EMAIL PROTECTED]>:
> > Question:
> > If Worm.SomeFool is Netsky, then why is not labeled as netsky?
>
> Answer:
> If netsky is Worm.SomeFool, then why is it not labeled as Worm.SomeFool?
Do you call peo
On Tuesday 06 April 2004 11:57 am, Regan Yelcich wrote:
> I'm having problems with the SomeFool virus and zip files... here's
> what's happening...
>
> If I upload the zip file to the server and run clamscan or clamdscan
> on the file it recognises the virus no problem.
>
> If I extract the virus
On Tuesday 06 April 2004 9:57 am, Vernon A. Fort wrote:
> I have several emails which clamav detects as 'Worm.SomeFool.Gen-2', but
> Sophos nor McAcfee will detect the virus. Would this be some new
> varient that clamav fould. From the description, this sig was added to
> detect possible future
On Tuesday 06 April 2004 9:48 am, Graham Murray wrote:
> Fisher <[EMAIL PROTECTED]> writes:
> > Actually, it is usually happen the Clamav recognises the virii before
> > the other AV vendors so no well-known name was available. See the
> > archive for the more detailed answers, this question alrea
On Monday 05 April 2004 5:08 pm, Jim Maul wrote:
> > Hi,
> > I'm using Sendmail+ClamAv+ClamAV-milter (latest version in RPM format:
> > 0.70rc1) on my primary mailserver (traffic: 5-6000 mail everyday).
> > Behaviour is pretty good but sometime some viruses (of previously blocked
> > kind) go thro
On Sunday 04 April 2004 9:53 pm, Tomas Charvat wrote:
> well come on guys... did you check out link, whitch he posted?
> [something].pif was attachment
>
> you better check brain before asking sutch question
Hence my second posting sent 4 minutes after the first, once I'd discovered
that ClamAV
On Sunday 04 April 2004 7:18 pm, Antony Stone wrote:
> On Sunday 04 April 2004 2:34 am, Christopher X. Candreva wrote:
> > Received what looks like a brand new virus, not recognized by clam or
> > google.
>
> What makes you think it is a virus? What does it do? Was i
On Sunday 04 April 2004 2:34 am, Christopher X. Candreva wrote:
> Received what looks like a brand new virus, not recognized by clam or
> google.
What makes you think it is a virus? What does it do? Was it recognised by
any other A-V product?
Regards,
Antony.
--
I'm pink, therefore I'm S
On Saturday 03 April 2004 6:53 am, Muhammad Kashif Muneer wrote:
> I need to make a backup copy of each mail transfer
> through my mail server for future use.
Before you start doing that just because it's technically possible, I'd advise
you to make sure that it's legal for you to do it.
Certai
On Friday 02 April 2004 10:46 pm, Daniel J McDonald wrote:
> grep FOUND clamd.log | cut -d \ -f 2 | sort | uniq -c
>
> I'm sure someone could swap the final order for you...
grep FOUND clamd.log | cut -d \ -f 2 | sort | uniq -c | awk '{print $2,$1}'
Regards,
Antony.
--
In Heaven, the police
On Friday 02 April 2004 6:56 pm, Doc Schneider wrote:
> Tomasz Klim wrote:
> > This is a test message only. I'm sending it only to announce
> > my e-mail address to all infected e-mail clients, to provoke
> > them to send a copy of viruses. Don't be angry.
>
> Heck Thomasz if you want viruses I ha
On Thursday 01 April 2004 8:22 pm, Petr wrote:
> Bullshit. Setting 'F=' is absolute correct.
>
> You have error in sendmail.mc. Consult clamav-milter
> documentation for details.
>
> Petr
Please try to keep this mailing list polite, even if you disagree with
someone.
Thanks,
Antony.
--
If th
On Wednesday 31 March 2004 4:34 pm, Robert Blayzor wrote:
> On 3/31/04 9:51 AM, "Antony Stone" <[EMAIL PROTECTED]> wrote:
> > That's because none of those tests contains a virus - not even a pretend
> > one such as Eicar.
> >
> > Since there&#x
On Wednesday 31 March 2004 3:32 pm, Robert Blayzor wrote:
> Using clamav-devel-20040326
>
> Message file tests 21, 23, 24 and 25 from www.testvirus.org all make it
> through clamdscan w/ ScanMail.
That's because none of those tests contains a virus - not even a pretend one
such as Eicar.
Since
On Wednesday 31 March 2004 4:47 am, Eperez wrote:
> I have tons of email attachments being detected as Worm.Somefool.
> what is this?
It is an epidemic.
Antony.
--
"Note: Windows 98, Windows 98SE and Windows 95 are not affected by [MS
Blaster]. However, these products are no longer supported
On Tuesday 30 March 2004 5:27 pm, P.V.Anthony wrote:
> Hi,
>
> I have noticed it on my machine. But I have read somewhere that they clean
> the database and remove the duplicates.
> Maybe thats why it is smaller now.
Removing duplicates was done some time ago - several weeks IIRC.
And, once they
1 - 100 of 270 matches
Mail list logo
