.
/usr/lib64/libcurl.so.4.5.0: Unix.Trojan.Coinminer-9910195-0 FOUND
Jeff
___
clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com
Artifactory has, as part of its functionality, the ability to cache
remote (internet) data. Hey, let's use that to reduce the traffic to
database.clamav.net!
Artifactory is not technically what you'd consider an "HTTP caching
proxy" because each thing requiring caching has its own URL. That is, an
Not surprising, but FWIW this is happening on RHEL 7.9 as well.
On 12/17/2020 11:03 AM, Jeff Blaine via clamav-users wrote:
>
> Heads up that for us at least, on CentOS 7.9.2009 (Core) with the latest
> available RPMs (0.103.0), clamonacc is repeatedly terminating
>
> -bash-4.2$
Heads up that for us at least, on CentOS 7.9.2009 (Core) with the latest
available RPMs (0.103.0), clamonacc is repeatedly terminating
-bash-4.2$ sudo grep clam /var/log/yum.log
Dec 12 06:03:47 Updated: clamav-filesystem-0.103.0-1.el7.noarch
Dec 12 06:03:48 Updated: clamav-lib-0.103.0-1.el7.x86_6
Thu Sep 19 12:12:33 2019
main.cld: version 59, sigs: 4564902, built on Mon Nov 25 08:56:15 2019
Total number of signatures: 8884274
Thanks, Jeff
On 9/17/2020 6:21 PM, G.W. Haywood via clamav-users wrote:
Hi there,
On Thu, 17 Sep 2020, Jeff Koch wrote:
The freshclam logs show daily.cvd signat
Thanks.
The freshclam logs show daily.cvd signature file version 25930 is
installed but simscan: clamscan currently shows version 25920 being
used. How do I get clamscan to use the latest version downloaded?
version 25920 appears to be from September 4th.
Jeff
On 9/17/2020 1:31 PM, Alain
HI
Looking through our scanning logs we see what appears to be a signature
that looks like this
clamav: 0.102.4/m:59/d:25920
'0.102.4' refers to the clamav version but what does the rest mean -
m:59/d:25920 ?
Thanks, Jeff
___
cl
Hi,
I've read the mailing list threads about this enough to know where the
ClamAV developers seem to stand on this topic.. :(
It's pretty surprising that the defacto OSS enterprise AV solution for
Linux cannot be built with full features on a standard fully patched
EL7.7 box.
We discussed this t
d.net page for ClamAV and
file a bug report.
Thanks again,
Jeff
Footnotes:
1. clamd issues found in auditd log:
node=ub18test type=AVC msg=audit(1567542270.923:11512):
apparmor="DENIED" operation="capable" profile="/usr/sbin/clamd"
pid=54842 comm="clamd" ca
Forgot to mention: this is the "0.100.3" version as available via apt on
an otherwise stock Ubuntu 18 host.
On 9/3/2019 5:01 PM, Jeff Blaine via clamav-users wrote:
> Hello all,
>
> I'm experiencing something odd on Ubuntu 18.04. As far as I can tell I
> have done eve
nit
failed: Operation not permitted
Sep 3 16:33:50 ub18test clamd[55172]: ScanOnAccess: clamd must be
started by root
--Jeff
___
clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users
Help
clamconf. And no clamd, either.
I tried
Apt-get -y install clamav
But it didn’t find anything new to install.
So what obvious piece of instruction did I miss?
Thanks,
Jeff
___
clamav-users mailing list
clamav-users@lists.clamav.net
https
th...
:End
PAUSE
.
How do I tweak the code above so that the command below is used if a virus
is found:
.
SwithMail.exe /s /x "SwithMailSettings.xml"
.
If I use SwitchMail, I can have it use logs.txt as the body of the email
alert.
Thanks,
Jeff
-
particular directory, moves any infected files
to another directory and emails an alert if a virus is detected. The email
alert should contain info about the infected file(s) including the path.
Keeping fingers crossed :-)
Thanks,
Jeff
--
The last three updates did not have the error. Below is the last error I got:
--
ClamAV update process started at Wed Nov 08 13:13:12 2017
WARNING: DNS record is older than 3 hours.
WARNING: Invalid DNS reply. Falling back to HTTP mode.
securiteinfo.hdb is up to
:
raynman) ...
I visited the archives and found a post describing the same exact issue but
I did not find a post saying if the issue has been resolved. I also see
others are not getting this warning.
Is there something I can do on my end to fix this? I'm running ClamAV on
Windows.
Cheers,
I've been experiencing the same thing throughout the day (from aws
us-east-1), seems to be intermittent, at least for me. My HIDS has been
going crazy :) Looks OK right now, only a couple failures
$> host db.us.clamav.net | awk '/address/ { print $NF }' | xargs -L1 ping
-c 1
PING 155.98.64.87 (1
Just a user or not Al, thanks for the quick update!! Also thank you to the
folks that looked into this. I just rescanned everything i posted after
running freshclam and it checks out.
Thanks for the efforts!
On Wed, Nov 30, 2016 at 5:44 PM, Al Varnell wrote:
> And the signature appears to have
Thanks Joel and Al, hopefully my hashes, files and virustotal urls are
helpful.
Jeff
On Wed, Nov 30, 2016 at 10:21 AM, Joel Esler (jesler)
wrote:
> Gene,
>
> Al was simply asking, as he knows we may ask, and it helps us identify the
> file faster. Otherwise we have to search thro
/en/file/8f40782bb1d729eac8d47733e6b3fa2a6a1d708c43342fed7f997551491620ac/analysis/1480514926/
Jeff
On Wed, Nov 30, 2016 at 6:26 AM, Ralf Hildebrandt <
ralf.hildebra...@charite.de> wrote:
> * Ralf Hildebrandt :
> > * Al Varnell :
> > >
> > > On Wed, Nov 30, 2
ut knowing, have have a site user
download an infected file.
Thanks, happy to do anything i can.
Jeff
On Wed, Nov 23, 2016 at 12:11 PM, Jeff Dyke wrote:
> I also submitted an FP a few days ago. I'm not as much of a fan of
> whitelisting what could be a fairly serious exploit that i&#
I also submitted an FP a few days ago. I'm not as much of a fan of
whitelisting what could be a fairly serious exploit that i'd be allowing
people to download if it were valid. Hopefully it will be fixed up soon.
The documents i found it in are public, so if there is way to expedite the
process,
Thanks again i have done that now
On Mon, Nov 21, 2016 at 8:05 PM, Jeff Dyke wrote:
> I'm not sure that it is. But i can submit it, b/c i'm not sure that it is.
>
> Thanks
> Jeff
>
> On Mon, Nov 21, 2016 at 4:25 PM, Al Varnell wrote:
>
>> Suspected F
I'm not sure that it is. But i can submit it, b/c i'm not sure that it is.
Thanks
Jeff
On Mon, Nov 21, 2016 at 4:25 PM, Al Varnell wrote:
> Suspected False Positives should be submitted to <http://www.clamav.net/
> reports/fp>.
>
> -Al-
> ClamXav User
>
site, the only
scanner that found it was clamscan and it seems that they use a number of
big name scanners. (McAfee, Symantec, Kaspersky and many others)
Has anyone had any experience with clamscan detecting items like this that
other scanners don't?
Thanks.
Jeff
__
-clamav-to-listen-on-tcp-3310?newreg=0a11acb857d341e7b3b4a44aed83553e
https://answers.launchpad.net/ubuntu/+source/clamav/+question/357500
On Mon, Aug 29, 2016 at 10:01 AM, Jeff Dyke wrote:
> thats what i assumed/knew just checking. It may be something odd with
> this particular lxc con
.
On Mon, Aug 29, 2016 at 9:51 AM, Reindl Harald
wrote:
>
>
> Am 29.08.2016 um 15:34 schrieb Jeff Dyke:
>
>> our config locations for the .service files are in slightly different
>> areas, so do you mind saying what distro you're running
>>
>
> Fedora b
.08.2016 um 18:30 schrieb G.W. Haywood:
>
>> Hi there,
>>
>> On Sat, 27 Aug 2016, Jeff Dyke wrote:
>>
>> ... if i start clamd with
>>> sudo -u clamav /usr/sbin/clamd --config-file=/etc/clamav/clamd.conf
>>> it *will* bind to that address and por
oss
servers via HAProxy, which works great when they are properly started.
I'll try your suggestions and report back, i've been gone all weekend, so
sorry for the delay and thanks for you response.
On Sat, Aug 27, 2016 at 12:30 PM, G.W. Haywood
wrote:
> Hi there,
>
> On
i have the following in my config
TCPSocket 3310
and if i start clamd with
sudo -u clamav /usr/sbin/clamd --config-file=/etc/clamav/clamd.conf
it *will* bind to that address and port.
The following lines are in the log through a direct start:
Fri Aug 26 17:09:53 2016 -> TCP: Bound to [0.0.0.0]:33
ingle core. There is
> no way
> around the disk IO problem because it scans files. But - if you run it just
> after a system backup chances are good it will find many of the files it
> scans
> in cache. That helps reduce disk IO but bumps up CPU load.
>
> dp
>
>
> On 1/
I have rolled out clamd to a handful of Red Hat systems and they all seem
to have high CPU usage when clamdscan runs at 2am. The rest of the day,
clamd drops down to minimal usage. There isn't a lot of change on these
systems so I can't imagine it's finding much, but it really pegs the CPU's.
What
On Sep 2, 2010, at 12:40 PM, Oliver Schinagl wrote:
> Hello all,
>
> I've been stuffed with the old and known "(!!)ClamAV-clamd av-scanner
> FAILED: run_av error: Too many retries to talk to
> /var/run/clamav/clamd.sock (Can't connect to UNIX socket
> /var/run/clamav/clamd.sock: Permission denie
d out to be AutoWhitelist
growing eating up Hardrive space, eventually the OS had no room for
virtual memory.
see;
/var/clamav/.spamassassin/autowhitelist
-jeff
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
On Nov 26, 2008, at 10:25 AM, Jason Bertoch wrote:
> freshclam[29375]: Local version: 0.94.2 Recommended version: 0.94.1
is my math wrong or is the error message recommending the previous
version ?
___
Help us build a comprehensive ClamAV guide: visit
On Fri, Oct 31, 2008 at 5:11 PM, Török Edwin <[EMAIL PROTECTED]> wrote:
> meaning clamd won't be built either
>
> configure:13401: checking pthread.h usability
> configure:13418: gcc -c -g -O2 conftest.c >&5
> In file included from conftest.c:94:
> /usr/include/pthread.h:312:4: #error "Please comp
On Fri, Oct 31, 2008 at 11:53 AM, Allen, Geoff <[EMAIL PROTECTED]> wrote:
> This might be a long-shot, but has anyone compiled ClamAV (and
> specifically, clamav-milter) on Tru64 Unix? I'm trying, but can't get
> configure to generate a proper Makefile that will compile clamav-milter.
>
>
>
> I'd l
On Tue, Aug 12, 2008 at 07:57:57AM -0400, Charles Gregory wrote:
>
> I don't suppose anyone has a list of these available for a "whitelist" or
> "avoid greylisting"? Preferably a list of IP's not domains?
>
I been using the dnswl.org DNSWL.
___
Help us
Dennis, Chuck:
Thank you - this helps. I think I have it all working now.
I appreciate your help.
--Jeff
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
>> Message: 29
>> Date: Thu, 7 Aug 2008 21:50:52 -0700
>> From: Jeff Weinberger <[EMAIL PROTECTED]>
>> Subject: [Clamav-users] Using ClamAV with Dspam - how do I verify
>> it's
>> working?
>> To: clamav-users@lists.clamav.net
>>
> -
>
> Message: 29
> Date: Thu, 7 Aug 2008 21:50:52 -0700
> From: Jeff Weinberger <[EMAIL PROTECTED]>
> Subject: [Clamav-users] Using ClamAV with Dspam - how do I verify it's
> working?
> To: clamav-users@lists.clamav.
Hi:
Pardon me if this is obvious - I'm new to both Dspam and ClamAV.
I built Dspam with --enable-clamav, ensured that: dspam.conf has:
ClamAVPort 3310
ClamAVHost 127.0.0.1
and clamd.conf has:
TCPSocket 3310
TCPAddr 127.0.0.1
I see (from the headers) that mail messages coming in to m
On Dec 10, 2007 11:07 PM, Jeffrey Rice <[EMAIL PROTECTED]> wrote:
>
> Hello,
> Is there any way to reduce/control the memory use of clamd?
Dennis is right. But to answer your question, use "ulimit -m" in your
initscript for clamd .
___
Help us build a c
This seems like an issue to be settled between Xandros and SourceFire.
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
everything is just fine.
Hopefully I won't be back on Monday asking for more help with strace ;)
Thanks for the info and all the help!
-Jeff
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:clamav-users-
> [EMAIL PROTECTED] On Behalf Of Dennis Peterson
> Sent: Friday, September 28, 2007 12:11 PM
> To: ClamAV users ML
> Subject: Re: [Clamav-users] clamd stuck at 100% cpu usage
>
> Dennis Peterson
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:clamav-users-
> [EMAIL PROTECTED] On Behalf Of Dennis Peterson
> Sent: Friday, September 28, 2007 12:07 PM
> To: ClamAV users ML
> Subject: Re: [Clamav-users] clamd stuck at 100% cpu usage
>
> Jeff Thurston w
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:clamav-users-
> [EMAIL PROTECTED] On Behalf Of Chris Adams
> Sent: Friday, September 28, 2007 11:48 AM
> To: 'ClamAV users ML'
> Subject: Re: [Clamav-users] clamd stuck at 100% cpu usage
>
> Once
Im running clamav 91.2 (90.3 did the same thing).
After about an hour or so the clamd process gets stuck at 100%.
I've checked various logs for the cause and haven't found anything.
Clamav is being run by amavis-new 2.3 if that info is of any interest.
This is a recent problem, I ran 88.4 just f
On 9/4/07, mike caplin <[EMAIL PROTECTED]> wroteJeff,
>
> I just tried to build 0.91.2 on Tru64 and this old error cropped-up.
> Since DEC's cc has some C++ features, 'try' is a reserved word. Please
> change the name of the variable 'try' (I tested substituing 'tries' and
> the
> program compi
HP-UX 10.20 is ancient and hasn't been supported by HP in a very long time.
(It is of the same vintage as Linux 2.2 kernels, if not older).
Consequently, the header files probably don't conform to the current POSIX
standards that the ClamAV code is expecting.
__
isit http://wiki.clamav.net
> http://lurker.clamav.net/list/clamav-users.html
Turns out this may be an Amavis-new related issue, see below:
Jeff Thurston wrote:
>> -Original Message-
>> From: Bill Landry [mailto:[EMAIL PROTECTED]
>> Sent: Thursday, July 19, 2007 3:31 PM
>> To: Jeff
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:clamav-users-
> [EMAIL PROTECTED] On Behalf Of John Rudd
> Sent: Thursday, July 19, 2007 11:19 AM
> To: ClamAV users ML
> Subject: Re: [Clamav-users] Greeting Card virus
>
> Jeff Thurston wrote:
> >
> Jeff Thurston wrote:
> > I thought ClamAV was able to catch these "Greeting Cards from family
> > member", our domain keeps getting these emails in large quantities even
> > after upgrading to ClamAV 0.90.3 recently.
> >
> > Do I need to upgrade again
I thought ClamAV was able to catch these "Greeting Cards from family
member", our domain keeps getting these emails in large quantities even
after upgrading to ClamAV 0.90.3 recently.
Do I need to upgrade again to .91?? I'm hesitant to do this so soon as it
was a bit of a hassle going from 0.88.4
being
logged, only the first instance, and then the subsequent instances are not.
Apparently after 24hr period the next instance will be logged again however.
I have enabled LogVerbose in clamd.conf and still no change.
What am I missing??
Thank you for any assistance offered.
On Thu, Jul 12, 2007 at 01:16:52PM -0400, Jeff Wasilko wrote:
> Hi:
>
> I am having problems getting clamav-milter to start: When I start
> it it seems to load the fingerprint database, and then exit:
>
> Loaded ClamAV 0.91/3647/Thu Jul 12 12:13:27 2007
> ClamAV: Prot
Hi:
I am having problems getting clamav-milter to start: When I start
it it seems to load the fingerprint database, and then exit:
Loaded ClamAV 0.91/3647/Thu Jul 12 12:13:27 2007
ClamAV: Protecting against 161006 viruses
LibClamAV debug: Database loaded
LibClamAV debug: Stat()ing files in /local
When clamd is called in STREAM mode, is each STREAM handled by a
different thread (assuming a moderate load), like MULTISCAN?
Secondarily, does clamav-milter call clamd in STREAM mode?
thanks in advance
___
Help us build a comprehensive ClamAV guide
e has more some samples they can share, I'll take
whatever I can get.
Thanks a lot.
Jeff D
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
On 4/13/07, I wrote:
>
> [I tried asking this on the developer's mailing list, but posting is
> restricted there, so]
>
> I am looking to do some performance testing of ClamAV in various
> configurations on various hardware. I am wondering if you have a stash of
> email messages, with at l
that you use for your
own testing and if so, could I get a copy of it?
Btw, I'll be happy to share my results. I have to write up a presentation on
what I find.
Thanks in advance for any pointers.
Jeff D
___
Help us build a comprehensive ClamAV gu
Tru64 UNIX
Programmer's Guide, online here -
<
http://h30097.www3.hp.com/docs/base_doc/DOCUMENTATION/V51B_HTML/ARH9VDTE/TITLE.HTM
Jeff D
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
EC/Compaq compiler. Long term, it
should be fixed in the configure script to properly define it for Tru64.
Note, the above pertains to Tru64 UNIX V5.1A and later. I don't have access
to anything older at the moment to check the situation on the older releases
(though in all probability
Haven't built it, but it looks like either a function prototype
problem, or perhaps a required include file is not included correctly.
I don't have access to a Tru64 system just this moment, but I might be
able to get to one tomorrow.
On 2/6/07, mike caplin <[EMAIL PROTECTED]> wrote:
I am trying
On 8/28/06, Nigel Horne <[EMAIL PROTECTED]> wrote:
Repeating advice already given here: the engine in 0.88 is *old*. If
performance is
an issue upgrade to the code in CVS.
How long before the current CVS code base becomes the "stable"
On 8/10/06, Dave Richardson <[EMAIL PROTECTED]> wrote:
YOUR CFLAGS will be different for your architecture, of course, but I
presume something can be gained by either i) optimizing for your
specific architecture, or using the '-pipe' or '-fomit-frame-pointer'
bits. I don't know compiler behav
ey would be a sever performance hit if they were
triggered often enough.
But, Stephen is right; strace output and data from other debugging
tools would be most helpful. Are you up to date on glibc patches on
your box?
Jeff D
___
http://lurker.clamav.net/
On 5/2/06, Robert Isaac <[EMAIL PROTECTED]> wrote:
/usr/lib/libclamav.so.1 is a symbolic link to /usr/lib/libclamav.so.1.0.17
/usr/local/lib/libclamav.so.1 is a symbolic link to
/usr/local/lib/libclamav.so.1.0.17
Hmm. That seems ok, although I don't know why there are copies of this
stuff in b
Are either of the libclamav.so.1 files symbolic links? If so, are they
pointing to non-existent files now after the upgrade? If so, fix them.
Jeff D
___
http://lurker.clamav.net/list/clamav-users.html
I found this discussion on the Samba mailing list from about 4 1/2
years ago that includes discussion about "socklen_t" and the
getpeername() API -
http://lists.samba.org/archive/rsync/2001-August/000047.html
Jeff D
___
http://lurker.clama
th the DEC/Compaq C
compiler, but it's possible mixing gcc in the environment might
perturb this.
Jeff D
___
http://lurker.clamav.net/list/clamav-users.html
building with -D_XOPEN_SOURCE_EXTENDED now (specified in
CFLAGS), message.c will now also need to #include > .
You'll have to modify the source file.
This is turning into a slippery slope really quickly. Let's back up
once again. Can you somehow s
OS version released in 1996.
Note that on current versions of HP-UX (11i v1 & v2, aka 11.11 and
11.23), that -D flag is not necessary to add to "CFLAGS". I don't know
about 11.0; I haven't found a system to look at yet.
Jeff D
___
http://lurker.clamav.net/list/clamav-users.html
ly. In real
code such as ClamAV, h_error is defined in system header files as an
external variable or a function.
That test is perfectly ok for testing how many arguments
gethostbyname_r() takes, however.
Jeff D
___
http://lurker.clamav.net/list/clamav-users.html
assumption. I see checks
in configure for gethostbyname variants, but nothing looking for
"h_error" support explicitly.
Jeff D
___
http://lurker.clamav.net/list/clamav-users.html
#ifdef _XOPEN_SOURCE EXTENDED
>
> extern int h_errno;
>
> #endif
>
Try adding "-D_XOPEN_SOURCE EXTENDED" to your CFLAGS.
Jeff D
___
http://lurker.clamav.net/list/clamav-users.html
T is
defined at compile time. (On 11.11, it is right at the end of the
file).
What do the definitions for "h_errno" look like on 10.20?
Jeff D
___
http://lurker.clamav.net/list/clamav-users.html
s for the shared libraries
though.
Jeff D
___
http://lurker.clamav.net/list/clamav-users.html
rted 10.20 in
more than 3 years. I have access to lots of HP-UX machines, but no
10.20 machines.
Jeff D
On 2/7/06, Kaplan, Andrew H. <[EMAIL PROTECTED]> wrote:
> Hi there --
>
>
>
> I mounted an NFS directory that has a newer version of gcc/ I then mounted
> tthe
&
Andrew,
Let's step back a minute have you ever been able to compile
ANY version of ClamAV on your 10.20 machine? Or, is this your first
attempt?
It does not look like ClamAV is one of the packages that
hpux.connect.org.uk has ported.
J
On 2/1/06, Krištof Petr <[EMAIL PROTECTED]> wrote:
>
> Mitre? Are not these boys same as Mitre "security experts" from Clifford
> Stoll's
> book CUCKOO'S EGG?
>
Mitre is a major US DoD contractor.
___
http://lurker.clamav.net/list/clamav-users.html
On 12/23/05, Dale Walsh <[EMAIL PROTECTED]> wrote:
>
> Please elaborate because as the subject states "virus detected using
> clamscan but not with Mail::ClamAV perl module". leads one to believe
> that the thread is about failure to detect virii with software.
>
[sorry about that last messge... f
On 12/23/05, Dale Walsh <[EMAIL PROTECTED]> wrote:
>
> Please elaborate because as the subject states "virus detected using
> clamscan but not with Mail::ClamAV perl module". leads one to believe
> that the thread is about failure to detect virii with software.
>
> -- Dale
Dale,
_
running (unless you're
> sure which binary you'll be running:) you need to give the full path.
Ged is correct.
Type
# which clamscan
at your shell prompt and it will tell you where in your $PATH it is
finding the executable.
Jeff D
___
http://lurker.clamav.net/list/clamav-users.html
Does anyone have or know where to find a Debian Sarge .deb for Clamassassin?
Thanks in advance,
Jeff D
___
http://lurker.clamav.net/list/clamav-users.html
file the daemon will listen on.
# Default: disabled
LocalSocket /var/run/clamavd/clamd
I thought that was the default..
Jeff
pgp3SiKpxH2gS.pgp
Description: PGP signature
___
http://lurker.clamav.net/list/clamav-users.html
le to compare
this one to. And the new one appears to be part of the full virus.
Thanks for the reply.
-Jeff
On 5/10/05 3:34 PM, "Tomasz Kojm" <[EMAIL PROTECTED]> wrote:
> On Tue, 10 May 2005 23:29:50 +0100
> Matt Fretwell <[EMAIL PROTECTED]> wrote:
>
>
and none of them pick it up.
-Jeff
On 5/10/05 3:08 PM, "Jeff Ramsey" <[EMAIL PROTECTED]> wrote:
> A colleague just asked me if I'd seen any new variants of Sober as of today.
>
> He has received a message that has the following subject "Wet girls" an
e a
virus? If you want, I can forward you the attachment, but he forwarded it to
me, so the original header info is not included in the copy I have. The raw
source of the message was submitted to the clamav.net submission form.
--
Jeff Ramsey
MIS Administrator
Tubafor Mill, Inc.
___
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Nigel Horne
Sent: Monday, 2 May 2005 4:47 PM
To: ClamAV users ML
Subject: Re: [Clamav-users] Re: Clamav Loops infinitely
On Monday 02 May 2005 06:45, Jeff Parson wrote:
> Clam AV was installed from
PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of René Berber
Sent: Monday, 2 May 2005 1:03 PM
To: clamav-users@lists.clamav.net
Subject: [Clamav-users] Re: Clamav Loops infinitely
Jeff Parson wrote:
> OK 0.84 is out but we are still having the same problem SME still goes
> int a loop.
Cou
infinitely
On Friday 15 Apr 2005 20:31, René Berber wrote:
> Jeff Parson wrote:
> > We are Running SME Server 6.0.1.01 and Clamav 0.83. We have a loop
> > problem after upgrading clamav from 0.82 and 0.83. The problem is,
that
> > some thing causes the clamscan program to loop i
by Harald Villemoes back in February and there were
little or no replies. Can anybody help us with this issue
Jeff Parson
Grampians Community Health Centre
STAWELL Vic 3380
PH (03) 5358 3700
Fax (03) 5358 4113
Email [EMAIL PROTECTED
ve specified the following ...
My god man, look about 5-6 lines down in the conf file. You obviously wasn't
paying attention.
Jeff
pgpnFqKo8iZkn.pgp
Description: PGP signature
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
will be disabled !
8<---
When I do a 'rpm -qa | grep gmp', I get:
libgmp3-4.1.2-4mdk
Any idea on how to correct this warning?
Regards
-Jeff
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Any idea on when version 8.1 for Mandrake 10.0 will be available?
Regards,
-Jeff
-Original Message-
From: John [mailto:[EMAIL PROTECTED]
Sent: Friday, January 28, 2005 1:33 PM
To: clamav-users@lists.clamav.net
Subject: [Clamav-users] freshclam complaining
Hi all,
I running Debian
On Tuesday 30 November 2004 10:25 am, Jeff Grossman wrote:
> I am running clamd and freshclam as a daemon. When freshclam updates
> the virus database, does it restart clamd so it see the new database, or
> do I have to manually do that?
freshclam.conf:
# Send the RELOAD command
I am running clamd and freshclam as a daemon. When freshclam updates
the virus database, does it restart clamd so it see the new database, or
do I have to manually do that?
Thanks,
Jeff
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav
s not the same every time. Is there a way I can set
clamav-milter to rewrite the "FROM" header, so that I can whitelist the
virus messages, or is there a way clamav-milter can send me a "virus
warning" like clamav / amavis-new used to?
--
Jeff Ramsey
MIS Administrator
Tubaf
1 - 100 of 177 matches
Mail list logo
