Re: [clamav-users] ClamAV 1.2.1, 1.1.3, 1.0.4, 0.103.11 patch versions published

Thank you, Robert, I'm not sure how I managed to misread 1.0.3 for 0.103. My apologies. Kevin On Wed, Oct 25, 2023 at 5:15 PM Robert M. Stockmann via clamav-users < clamav-users@lists.clamav.net> wrote: > On Wed, 25 Oct 2023, Kevin O'Connor via clamav-users wrote: > > &g

Re: [clamav-users] ClamAV 1.2.1, 1.1.3, 1.0.4, 0.103.11 patch versions published

Hi Micah, I'm assuming that this is the report of an updated 0.103.11: $ /usr/sbin/clamd --version ClamAV 1.0.3/27072/Wed Oct 25 07:45:37 2023 Is that correct?.. it was difficult to tell from the links. Kevin On Wed, Oct 25, 2023 at 2:13 PM Micah Snyder (micasnyd) via clamav-users <

Re: [clamav-users] 0 length bytecode.cvd causing problems with clamav daemon

that was appropriate for the listserv. Thanks again Kevin On Tue, Feb 28, 2023 at 1:31 PM Micah Snyder (micasnyd) wrote: > The bytecode.cvd​ file is the original. > When there is an update, we publish two things: > >1. a bytecode.cdiff​ patch file that will update the older bytecode.

Re: [clamav-users] 0 length bytecode.cvd causing problems with clamav daemon

workaround as I need this running all the time. I don't know when our clients will drop files on us that need a scan. Thanks for looking at it. Kevin On Mon, Feb 27, 2023 at 1:11 PM Marc via clamav-users < clamav-users@lists.clamav.net> wrote: > i would suggest, to delete alle librari

Re: [clamav-users] 0 length bytecode.cvd causing problems with clamav daemon

Heh, good question. Just checked again, and it looks like that was a copy-paste error. There is only one PrivateMirror line. Kevin On Mon, Feb 27, 2023 at 12:02 PM newcomer01 via clamav-users < clamav-users@lists.clamav.net> wrote: > why you have set two times the "Priva

[clamav-users] 0 length bytecode.cvd causing problems with clamav daemon

discuss just the downloading of the file, not whether it is created on the local instance. Does anyone have any pointers? Thanks Kevin -- *Kevin O'Connor* Principal DevOps Engineer M: 617-834-1291 [image: email-footer-logos.jpg (1000×120)] STATEMENT OF CONFIDENTIALITY: The information

[clamav-users] Can't allocate memory ERROR

increase ram? fd[21]: Can't allocate memory ERROR Thanks, Kevin ___ DISCLAIMER:

Re: [clamav-users] [External] xlsm files

On 12/22/2020 6:08 PM, Joe Acquisto-j4 wrote: Joe, you might look at enabling the OLEVBMacro plugin and adding the KAM Ruleset,https://mcgrail.com/template/kam.cf_channel, which has rules to help combat these type of spam emails. Regards, KAM Kevin, I hesitate to ask here, but, you refer to

Re: [clamav-users] [External] xlsm files

On 12/22/2020 5:51 PM, Joe Acquisto-j4 wrote: Quite new to clamav. Using with Spamassassin on Linux and it appears to scan properly and detects EICAR as an attachment. For last several weeks have been getting SPAM with xlsm file attached, claiming to be invoice or payment receipt or whatever

Re: [clamav-users] [External] Re: ClamAV® blog: ClamAV 0.103.0 released!

Hi All, Just a note here that I was able to install the 0.103.0 release without problems on the same box I've been doing the rc testing.  I show that the logging is working to both syslog and freshclam.log simultaneously.  The daemon starts in a normal 58 seconds.  I've also seen it do the backgro

Re: [clamav-users] [External] Re: [SUSPECTED SPAM] Re: ClamAV 0.103.0 rc2

On 9/8/2020 6:40 PM, Micah Snyder (micasnyd) wrote: > Yeah it didn’t help with my centos 7 box either. :-/  For what it’s > worth, I had no issue building with CMake (installed using python3 > pip) on that machine. 😃  Of course that doesn’t help with verifying a > bugfix for our autotools build sys

Re: [clamav-users] [External] Re: [SUSPECTED SPAM] Re: ClamAV 0.103.0 rc2

gt; > Then retry autogen.sh > > Regards, > Micah > > -Original Message- > From: clamav-users On Behalf Of Kevin > A. McGrail via clamav-users > Sent: Tuesday, September 8, 2020 3:19 PM > To: clamav-users@lists.clamav.net > Cc: Kevin A. McGrail > Subject

Re: [clamav-users] [External] Re: [SUSPECTED SPAM] Re: ClamAV 0.103.0 rc2

On 9/8/2020 6:11 PM, Micah Snyder (micasnyd) via clamav-users wrote: > If you're interested, we found the cause of the freshclam SysLog issue. The > source ended up being an issue with our autotools build system and how we > link freshclam. > If any of you are willing to try this patch, it'd be n

Re: [clamav-users] [External] Re: ClamAV 0.103.0 rc2

On 9/3/2020 4:12 AM, Arjen de Korte via clamav-users wrote: > Citeren Arjen de Korte via clamav-users : > >> I seem to have missed the announcement of clamav-0.103.0-rc2. The >> problems I reported earlier with clamav-0.103.0-rc seem to be >> resolved now. All is well again. > > Correction: *almost

Re: [clamav-users] [External] ClamAV 0.103.0 rc2

On 9/2/2020 4:44 PM, Arjen de Korte via clamav-users wrote: > I seem to have missed the announcement of clamav-0.103.0-rc2. The > problems I reported earlier with clamav-0.103.0-rc seem to be resolved > now. All is well again. Same & Same! Regards, KAM _

Re: [clamav-users] [External] Re: ClamAV 0.103.0 release candidate - systemd service start fails

NOTE: I can't speak to systemd intricacies but I can relay this information Centos 6.6 & 6.10 (current) which is a current, in maintenance period OS systemd script worked for 0.102.4 and before. script at http://talonator.pccc.com/clamav/ systemd script does NOT work for 0.103.0-rc on either 6.6

Re: [clamav-users] [External] Re: [External] Re: ClamAV® blog: ClamAV 0.103.0 release candidate

On 8/20/2020 8:26 PM, G.W. Haywood via clamav-users wrote: > Your kernel is five years old and your compiler is vintage 2012.  I'd > almost be surprised if anything works.  I think you probably need to > do some upgrading but I'll take a closer look when I get a chance. > > The libcurl requirements

Re: [clamav-users] [External] RE: [External] Re: [External] Re: [External] Re: [External] ClamAV® blog: ClamAV 0.103.0 release candidate

On 8/20/2020 2:49 PM, Micah Snyder (micasnyd) wrote: > Re: the clamd startup issue, Kevin can you confirm if clamd behaves as > expected without using systemd or another service manager? I'll test with > system now on my machines. We don’t at present have any automated system

Re: [clamav-users] [External] Re: ClamAV® blog: ClamAV 0.103.0 release candidate

OFF-LIST, I'm sight impaired so that would be a needle in a haystack for me, sorry. On 8/20/2020 2:34 PM, G.W. Haywood via clamav-users wrote: > Hi there, > > On Thu, 20 Aug 2020, Kevin A. McGrail via clamav-users wrote: >> On 8/20/2020 9:13 AM, G.W. Haywood vi

Re: [clamav-users] [External] Re: [External] Re: [External] Re: [External] ClamAV® blog: ClamAV 0.103.0 release candidate

On 8/20/2020 9:13 AM, G.W. Haywood via clamav-users wrote: > ./configure > make > make check > > See what happens. Same behavior.  Clean untar ends in make[1]: Entering directory `/usr/src/clamav-0.103.0-rc/unit_tests' make  check_clamav check_clamd check_fpu_endian check_freshclam.sh check_sigto

Re: [clamav-users] [External] Re: [External] Re: [External] ClamAV® blog: ClamAV 0.103.0 release candidate

On 8/20/2020 5:14 AM, G.W. Haywood via clamav-users wrote: > You might want to try 'make check' before 'make install'. > > At least if the tests don't fail we'll know they need work. :) > Looks to fail badly at even starting the check: check_clamav_skip.c:4:20: error: clamav.h: No such file or dire

Re: [clamav-users] [External] RE: [External] ClamAV® blog: ClamAV 0.103.0 release candidate

2:46 PM, Micah Snyder (micasnyd) wrote: > > Hi Kevin, > >   > > Do I understand you correctly that clamd is hanging indefinitely? > > A few things that may help… > >   > > 1. Lets track this in a Bugzilla ticket: > https://bugzilla.clamav.net/enter_bug

Re: [clamav-users] [External] Re: [External] ClamAV® blog: ClamAV 0.103.0 release candidate

>> I tested the RC on a machine with 0.102.4 on it. > > Could you tell us what operating system you're using? CentOS 6 > >> I did the same configure line, make, make install and ldconfig -v and > > Please give the full, precise details.  ./configure --prefix=/usr/local/clamav --with-user=defang -

Re: [clamav-users] [External] ClamAV® blog: ClamAV 0.103.0 release candidate

* Fixed a bug wherein you could not build ClamAV with >> --enable-libclamav-only if curl was not installed on the system. >> >> * Various other bug fixes, improvements, and documentation >> improvements. >> >>   >> >> >>

Re: [clamav-users] [External] Re: Problems compiling 0.102.4 on OLD system

On 7/30/2020 8:17 PM, Micah Snyder (micasnyd) wrote: > It looks like the openat and unlinkat system calls were added to Linux in > kernel 2.6.16; library support was added to glibc in version 2.4. Hi Micah, thank you for that guidance.  It looks like this is too high a hill to fight.  Better to u

Re: [clamav-users] [External] Re: Problems compiling 0.102.4 on OLD system

On 7/17/2020 3:38 PM, Micah Snyder (micasnyd) via clamav-users wrote: > Kevin: Any chance you can upgrade those old systems? We try to support > roughly the last 2 LTS releases for major distros / operating systems but > don't have time to go out of our way to maintain compatibili

Re: [clamav-users] Remote Shutdown command

Hello, any update on this issue? From: Kevin Faber Sent: Thursday, July 16, 2020 1:30 PM To: clamav-users@lists.clamav.net Subject: Remote Shutdown command Hi, Is there a way to disable the remote shutdown command besides disabled the TCP port? It is being flagged as a security vulnerability

[clamav-users] Problems compiling 0.102.4 on OLD system

Hi, I have an old system I'm compiling. I have 0.102.3 working on it. Here's the config line: CC=/usr/local/gcc4.2.4/bin/gcc ./configure --prefix=/usr/local/clamav --with-user=defang --with-group=defang --enable-llvm=no --with-openssl=/usr/local/ssl --with-pcre=/usr/local/pcre2 --with-zlib=/usr/

[clamav-users] Remote Shutdown command

Hi, Is there a way to disable the remote shutdown command besides disabled the TCP port? It is being flagged as a security vulnerability. Thanks, Kevin Faber Engineer, Collaboration and Productivity team Team Ventech | HIDS kevin.fa...@ventechsolutions.com<mailto:kevin

Re: [clamav-users] [External] Re: ClamAV® blog: ClamAV 0.102.2 security patch released

On 2/6/2020 3:59 AM, G.W. Haywood via clamav-users wrote: > Hi there, > > On Wed, 5 Feb 2020, Michael Orlitzky via clamav-users wrote: >> On 2/5/20 12:29 PM, Joel Esler (jesler) via clamav-users wrote: >>> >>> ClamAV 0.102.2 is a security patch release to address the following >>> issues. >> >> Of

Re: [clamav-users] [External] Freshclam not working on freshly build source 0.102.1 on Debian 10

t; clamav-users@lists.clamav.net > https://lists.clamav.net/mailman/listinfo/clamav-users > > > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > > http://www.clamav.net/contact.html#ml -- *Kevin A. McGrail* CEO Emeritus Peregrine Computer Consulta

[clamav-users] clamav-0.101.1 scan limit

Hi, Is there any way to increase the 4gb scan/stream limit? Thanks, Kevin ___ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https

Re: [clamav-users] SOLVED Re: Fri Apr 12 08:46:13 2019 -> !Verification: Malformed database

Not so much old as hodge podge. But yes that seems to be similar and does recommend that the make should check for a zlib minimum version. Regards, KAM On April 18, 2019 3:37:25 PM EDT, "J.R. via clamav-users" wrote: >> Just an FYI thatclamav was linking to libz.so.1.1.4 and upgrading to >> li

[clamav-users] SOLVED Re: Fri Apr 12 08:46:13 2019 -> !Verification: Malformed database

that --with-zlib did not work correctly.  Was leading to errors about not being able to retrieve version errors so we updated the system library instead.  Could be an interwinining of other things like xml and bzip2 linking to the other version. Regards, KAM On 4/12/2019 8:52 AM, Kevin A. McGrail

[clamav-users] Fri Apr 12 08:46:13 2019 -> !Verification: Malformed database

.ldb version 25410 Date: Sat, 6 Apr 2019 06:37:31 -0400 From: Kevin A. McGrail To: clamav-users@lists.clamav.net On 4/5/2019 9:40 PM, David Shrimpton via clamav-users wrote: > This appears to be a different problem than the sigtool --list problem on > daily Thanks for the impres

Re: [clamav-users] Malformed pattern daily.ldb version 25410

On 4/5/2019 9:40 PM, David Shrimpton via clamav-users wrote: > This appears to be a different problem than the sigtool --list problem on > daily Thanks for the impressive list of debug ideas.  Whatever this is, it's a bug in clamav or an underlying library.  The machine with the issue is a hodgep

Re: [clamav-users] Malformed pattern daily.ldb version 25410

On 4/5/2019 12:16 PM, David Raynor wrote: > I can recreate that same issue with daily cvd 25410, using ClamAV > 0.100.1. That was the first 0.100.X I had handy to do a quick test. > The problem is something specific to sigtool and only the list-sigs > feature. It does not affect clamscan or clamd,

Re: [clamav-users] Clamav 0.101.1 dosn't compile on solaris anymore.

On 2/20/2019 12:39 PM, J.R. wrote: >> unixpackages.com uses gcc-3.4.6 and has clamav built, along with 20 >> dependency packages. >> Pointing it out because 'severely ancient' compilers aren't necessarily the >> issue here. > I know on the x86_64 platform, I think it started with the 0.100 there

Re: [clamav-users] We STILL cannot reliably get virus updates (since new mirrors)

On 7/11/2018 2:33 PM, Joel Esler (jesler) wrote: > It is very solid.  We are using *all* of their regions.  As a result > of this, we've been able to pin point that there are only a couple > countries, *in the world* that *don't* use ClamAV.  It's very impressive. Interesting.  Any chance you have

[clamav-users] Trouble compiling - Re: ClamAV 0.100.1 has been released!

On 7/9/2018 12:55 PM, Joel Esler (jesler) wrote: > https://blog.clamav.net/2018/07/clamav-01001-has-been-released.html   Hi All, Compiling is throwing an error in freshclam for me. make[2]: Entering directory `/usr/src/clamav-0.100.1/freshclam'   CC   output.o   CC   optparser.o   CC 

Re: [clamav-users] File that bombs my clamd. How to submit for review?

--- Begin Message --- On 5/15/2018 11:41 PM, Al Varnell via clamav-users wrote: > https://bugzilla.clamav.net Thanks.  I was afraid that would be public but I marked it as a security component. --- End Message --- ___ clam

[clamav-users] File that bombs my clamd. How to submit for review?

--- Begin Message --- Hi, I have a file that bombs my clamd pretty instantly.  I've attempted to narrow things down with debug, etc.  I don't believe it's a virus but if it crashes clamd, it could be used for DOS purposes.  How do I safely get this to a good actor to review? regards, KAM --- End

Re: [clamav-users] FW: ClamAV - Open Source License

The first sentence on the the "About" page on clamav.net, which is the first response when googling "clamAV license": "ClamAV ® is an open source (GPL) anti-virus engine" From: "Peggy Anstett" To: "clamav-users" Sent: Wednesday, November 29, 2017 12:57:33 PM Subject: [clamav-users] FW: C

Re: [clamav-users] ClamWin finds malware, ClamAV doesn't.

ding the engine limits as scanning oversized files can be dangerous. -Kevin On Tue, Jul 26, 2016 at 2:10 AM, Al Varnell wrote: > You might be able to re-compile the ClamAV source and configure it with > --maxfilesize=xxM, but the limit is there to prevent severe system damage > that can r

Re: [clamav-users] ClamWin finds malware, ClamAV doesn't.

additional information on clamscan options, refer to the clamscan manpage or use the the "--help" option. clamscan --help Finally, if you suspect that this may be a bug, please report the issue to https://bugzilla.clamav.net and supply the appropriate samples. -Kevin On Wed, Jul 20

Re: [clamav-users] LibClamAV warning, cli_pdf unimplemented filter DCTDECODE

uments is cli_pdf. In a nutshell, this warning occurs because ClamAV encountered a DCTDecode filter but does not have a implementation to decode that filter yet. It is possible but unlikely that associated document is malicious. -Kevin On Thu, May 19, 2016 at 12:43 AM, Rick Valenzuela wrote: > H

Re: [clamav-users] yara #match does not work with regex

o find all matches of the affected regex signature; yara signatures unfortunately do not have such an option at this time. -Kevin On Wed, Apr 13, 2016 at 7:27 PM, David Shrimpton wrote: > Using #match as a condition in a yara rule to > count the occurences of $match doesn't appear to >

Re: [clamav-users] Strange problem with custom Yara rule

Please refer to the bug report at: https://bugzilla.clamav.net/show_bug.cgi?id=11552 for the patch to resolve the issue. On Wed, Apr 13, 2016 at 1:32 PM, Kevin Lin wrote: > ClamAV, in order to optimize the AC algorithm execution, runs the filetype > signatures alongside the malware det

Re: [clamav-users] Strange problem with custom Yara rule

ClamAV, in order to optimize the AC algorithm execution, runs the filetype signatures alongside the malware detection signatures. ClamAV is set to immediately return after AC execution if a filetype signature detection occurs. This unfortunately causes the engine to skip PCRE signature execution.

Re: [clamav-users] Unscannable MS Office files?

It seems as if the xml parser ClamAV is has some parsing errors in regard to this document variant. You could submit a bug report at bugzilla.clamav.net; attaching a sample would also help. -Kevin On Fri, Apr 1, 2016 at 6:30 PM, David Shaw wrote: > Hello, > > I am using ClamAV 0.99 on

[clamav-users] clamav ignoring HTTPProxyServer/HTTPProxyPort in freshclam.conf?

7.1.0.AC122E0A.ping.clamav.net daily.21375.77.1.0.AC122E0A.ping.clamav.net daily.21375.77.1.0.AC122E0A.ping.clamav.net daily.21375.77.1.0.AC122E0A.ping.clamav.net Can someone explain what these lookups are for please? Thanks Kevin ___ Help us build a comprehe

[clamav-users] DNS queries to daily.xxxxx.xx.x.x.XXXXXXXX.ping.clamav.net

list archives, the manual, and the FAQ but haven't found an answer. Thanks Kevin Kretz ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml

Re: [clamav-users] some clamd.conf issues

It appears that the "PCREMaxFileSize" options is currently set to accept raw numbers and not sizes as indicated by the documentation. This is a minor bug in the current release of ClamAV 0.99. The work around would be to use "26214400" instead of "25M". -Kevin O

Re: [clamav-users] Heuristics.Phishing.Email.SpoofedDomain FP

It's not necessary to whitelist the heuristic. If you choose to, you can whitelist the domain which can be done using a .wdb signature. There is documentation on how to write an entry in the phishsigs_howto.pdf document. -Kevin On Tue, Aug 25, 2015 at 1:11 PM, Charles Swiger wrote: > O

Re: [clamav-users] Heuristics.Phishing.Email.SpoofedDomain FP

scan-precedence=yes" is set as well. Additionally, you can provide the false positive to http://www.clamav.net/report/report-fp.html. -Kevin On Tue, Aug 25, 2015 at 6:36 AM, Alex wrote: > Hi, > > I have an email with an apparent false-positive spoofed domain. How > can I determine

Re: [clamav-users] [SUSPECTED SPAM] Re: Calamav cannot scan tar file and gzip files?

natively support parsing HTTP messages. When I send a file to scan to clamd using curl, clamd fails to understand the message and sends back the message: UNKNOWN COMMAND -Kevin On Tue, Feb 17, 2015 at 1:23 PM, Noel Jones wrote: > On 2/17/2015 12:11 AM, Manoj Ramakrishnan wrote: > >

Re: [clamav-users] Unclear how to proceed after Windows install

;clamscan' is also a stand-alone scanner. For additional information for program usage, you can read the program's help message or query its manpage. -Kevin On Fri, Feb 13, 2015 at 1:13 PM, Jonathan Coles wrote: > I installed clamav-0.98.6-win32.msi on Windows. It added nothing to

Re: [clamav-users] Configure Options For Minimal Install

'clamscan' is an on-demand scanner. In regards to the blog post, have you tried running 'autoreconf' after your changes? I'm assuming the 'SUBDIRS' changes were to an autotools file. -Kevin On Wed, Jan 21, 2015 at 5:48 PM, Ed Christiansen MS wrote: > I

Re: [clamav-users] Locked freshclam.log error msg

at process is locking a freshclam.log. -Kevin On Mon, Sep 22, 2014 at 6:26 PM, David Cain wrote: > ERROR: Problem with internal logger (UpdateLogFile = > /var/log/clamav/freshclam.log). > ERROR: /var/log/clamav/freshclam.log is locked by ano

Re: [clamav-users] invalid icon entries?

most part. Regards, Kevin On Sat, Aug 9, 2014 at 2:45 PM, Tom wrote: > When I run clamscan (clamav-0.98.4-1.el6.rf.x86_64), I get this output: > > LibClamAV Warning: cli_scanicon: found 3 invalid icon entries of 3 total > LibClamAV Warning: cli_scanicon: found 3 invalid icon e

Re: [clamav-users] clamscan : correct syntax : exclude Directory

"/BTC" directory. For further information on clamscan options, you can refer to the clamscan man page or run *clamscan --help*. -Kevin On Thu, Jun 12, 2014 at 2:39 PM, ellanios82 wrote: > Hello List > > > my hope is to exclude from clamscan a Bitc

Re: [clamav-users] Tips for low memory systems

natures and, if JIT is desired with a smaller memory footprint in clamav, you can configure clamav with "--with-system-llvm" to use the system's native llvm. -Kevin On Tue, May 27, 2014 at 10:29 AM, Michael Heuberger < michael.heuber...@binarykitchen.com> wrote: > Hello ever

Re: [Clamav-users] clamav-milter 0.95.1 logging deficiencies

> > Kevin Clark wrote: > > Craig is correct - I would like clamav-milter to log clean files as > > well as infected ones much like it used to. > > Hi Kevin, > I think this is pretty pointless as that would basically duplicate any > line already in the logs. Tha

Re: [Clamav-users] clamav-milter 0.95.1 logging deficiencies

> > What am I missing? > > > > I believe Kevin is seeking an option similar to clamd's LogClean option > in clamav-milter. > > From clamd.conf: > > > > # Also log clean files. Useful in debugging but drastically increases > the > #

Re: [Clamav-users] clamav-milter 0.95.1 logging deficiencies

> > I'm following up on a previous post about logging to maillog: > > > > http://lurker.clamav.net/message/20090408.063308.16623e5a.en.html > > > > I am using Sendmail 8.13 on CentOS-4 but whereas previously with > 0.94.2 I would get a log entry in /var/log/maillog for every scanned > message I now

[Clamav-users] clamav-milter 0.95.1 logging deficiencies

I'm following up on a previous post about logging to maillog: http://lurker.clamav.net/message/20090408.063308.16623e5a.en.html I am using Sendmail 8.13 on CentOS-4 but whereas previously with 0.94.2 I would get a log entry in /var/log/maillog for every scanned message I now only get a log even

Re: [Clamav-users] Stopping Phish Success

Awsome! Kevin W. Gagel Network Administrator Local 5448 My blog: http://mail.cnc.bc.ca/blogs/gagel My shared files: http://mail.cnc.bc.ca/users/gagel --- Original message --- Subject: Re: [Clamav-users] Stopping Phish Success From: Nigel Horne To: ClamAV users ML Date: 21/01/2009 11:12 AM

Re: [Clamav-users] Stopping Phish Success

Is this information publicly viewable anywhere? Kevin W. Gagel Network Administrator Local 5448 My blog: http://mail.cnc.bc.ca/blogs/gagel My shared files: http://mail.cnc.bc.ca/users/gagel --- Original message --- Subject: [Clamav-users] Stopping Phish Success From: Nigel Horne To: ClamAV

Re: [Clamav-users] Stop it!

ave not seen Avast catch one yet. The only time I see McAfee catch them is about a week after a "new" virus appears and then the ones it catches are always the ones that slipped in before any vendor had updated. I am more "secure" BECAUSE of ClamAV. =

[Clamav-users] What's up with this?

dated notice? I see the -exp did I get the source to soon or something? = Kevin W. Gagel Network Administrator Information Technology Services (250) 562-2131 local 5448 My Blog: http://mail.cnc.bc.ca/blogs/gagel My File share: http://mail.cnc.bc.ca/users/

Re: [Clamav-users] Testers needed

On Nov 26, 2007, at 12:57 PM, Gerard wrote: >> > I know nothing about OS X, so I cannot test against it directly. I > use 'wget' > because I like it better than 'curl'. Strictly a personal > preference. I might > include an option to use 'curl' in place of 'wget' at some future > date. > >

Re: [Clamav-users] Testers needed

so I don't think it's critical if you don't care to support OS X. Regards, Kevin ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html

[Clamav-users] Virus definition file /var/lib/clamav/main.cvd is missing....

ssage ! I just changed the script to look for the new database and things are working just fine as the way they meant to be. Sorry again. Thanks anyways, Kevin On August 4, 2007 13:09:44 Kevin wrote: > I just upgraded clamav to the latest svn version an hour ago. Now, when I > run

[Clamav-users] Virus definition file /var/lib/clamav/main.cvd is missing....

tell me what am I doing wrong or what is going on ? Thanks for any help. Kevin ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] clamd suddenly starts dying

sages with powerpoint attachments in the queue? I noticed that was killing my clamd recently. I ended up disabling the OLE2 and we haven't had any issues since. HTH, Kevin ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Anyone solve the powerpoint issue yet?

On Jul 30, 2007, at 10:24 AM, Oliver Schwarz wrote: > kevin, > > i ran into the same problem with clamd, but was able to dig a bit > deeper and figuring out, that as soon as an attachement was encoded > in octet-stream clamd would run nuts. the logs showed it crashed, but > the

[Clamav-users] Anyone solve the powerpoint issue yet?

also notice that clamscan doesn't seem to have the same problem clamd does, but I haven't looked into that further yet since I needed to get my mail server up and running again. It may be a configuration difference that I didn't noti

Re: [Clamav-users] 0.91 - high load under solaris (and FreeBSD?)

I just had a report from one of my sysadmins of a similar problem under FreeBSD. The load was up around 40, almost all of it spent in interrupts, all caused by clamav. We were using the libmap.conf trick that had prevented bad behavior under 0.9. It's the first time the trouble has occurre

Re: [Clamav-users] Upgrade Version

amav.net >http://lurker.clamav.net/list/clamav-users.html > >___ >Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net >http://lurker.clamav.net/list/clamav-users.html = Kevin W. Gagel Net

Re: [Clamav-users] amavisd-new + clamAV ?

ciate for your suggestion and sharing. Kevin 2007/7/4, Chuck Swiger <[EMAIL PROTECTED]>: > > > When you restart amavisd, check /var/log/maillog and see whether it then > finds > the clamd socket as the primary virus scanner, rather than just clamscan. > > Double-check w

Re: [Clamav-users] Upgrade to 0.90.2

__ >Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net >http://lurker.clamav.net/list/clamav-users.html = Kevin W. Gagel Network Administrator Information Technology Services (250) 562-2131 local 448 My Blog: http://mail.cnc.bc.c

RE: [Clamav-users] Re: 0.90.1 freshclam error

that >>will cause >>the sun to expand to the point the earth is totally torched. >>Sure, it won't >>happen in our lifetime, but what about the children? >> >>Gary V > >OMG, what have I done. I must consult my ancient book of spells recovered >

RE: [Clamav-users] Upgrade to .90? - Update

, I feel for you. I use the source to install and un-install. I assume this is the reason I'm not having the problems some others have described. = Kevin W. Gagel Network Administrator Information Technology Services (250) 562-2131 local 448 My Blog: http://

Re: [Clamav-users] Upgrade to .90? - Update

for the hard work you put into this effort. = Kevin W. Gagel Network Administrator Information Technology Services (250) 562-2131 local 448 My Blog: http://mail.cnc.bc.ca/blogs/gagel --- The College of New Caledonia, Visi

Re: [Clamav-users] Upgrade to .90?

Kevin Way wrote: > Craig Green wrote: > >> Kevin Way wrote: >> >>> I had the same problems. FreeBSD/i386 6.2p1 and 6.2p0. Compiled >>> directly from the ports collection, without --experimental. >>> >>> As far as we could tell,

Re: [Clamav-users] Upgrade to .90?

Craig Green wrote: > > Kevin Way wrote: >> >> I had the same problems. FreeBSD/i386 6.2p1 and 6.2p0. Compiled >> directly from the ports collection, without --experimental. >> >> As far as we could tell, it just scanned slower and slower and then >> s

Re: [Clamav-users] Upgrade to .90?

md dies? I have not reverted back >> > > At least some basic information, eg. how you compiled ClamAV, did you use > --enable-experimental, platform details, etc. > > I had the same problems. FreeBSD/i386 6.2p1 and 6.2p0. Compiled directly from the ports collection, with

Re: [Clamav-users] Upgrade to .90?

Dennis Peterson wrote: >> So, its been a few days. How is everyone feeling about the new version? >> I've hesitated to upgrade just yet. I've seen alot of feedback indicating >> problems and very little about smooth and great upgrades. >> >> What's the general concensous - You can't upgrade fast en

[Clamav-users] Upgrade to .90?

r Stay where you are? ===== Kevin W. Gagel Network Administrator Information Technology Services (250) 562-2131 local 448 My Blog: http://mail.cnc.bc.ca/blogs/gagel --- The College of New Caledonia, Visit us at

Re: [Clamav-users] outbound scanning

you shouldn't block them if the reverse doesn't match. The RFC's state that a host MUST have a reverse DNS and allow for it to NOT match... = Kevin W. Gagel Network Administrator Information Technology Services (250) 562-2131 local 448

Re: [Clamav-users] Clamav-milter with Postfix

or postfix. Postfix already supports it through its generic access interface. I use that interface to call a simple script which launches clamc and then uvscan. It works extremely well for me. = Kevin W. Gagel Network Administrator Information Technology Services (250) 562-2131 local 448 My Blog: http

Re: [Clamav-users] Upgraded to ClamAV 0.90RC1.1 but still saying 0.88.4

right, I didn't. I'll have another go at it later today. Thanks for pointing that out. = Kevin W. Gagel Network Administrator Information Technology Services (250) 562-2131 local 448 My Blog: http://mail.cnc.bc.ca/blogs/gagel

Re: [Clamav-users] Upgraded to ClamAV 0.90RC1.1 but still saying 0.88.4

report because there is no info for me to give on it. I'll try again when 90 goes beyound RC1. ===== Kevin W. Gagel Network Administrator Information Technology Services (250) 562-2131 local 448 My Blog: h

Re: [Clamav-users] a little question

ature updates. > >Similarly, the clamav program checks for updates to itself >periodically... as far as I can tell, once clamav is installed... it >looks after itself... no human intervention required. :-) Except setting up freshclam to run at regular intervals. ===

Re: [Clamav-users] Bug with --remove??

Thanks guys, sorry for false alarm! ___ http://lurker.clamav.net/list/clamav-users.html

[Clamav-users] Bug with --remove??

Hi, I accidentally issued the following command where I mis-spelled remove: $ ./clamscan --remov /usr/home/projects/virus/ And it actually removed the file. I would expect either an error or the flag to be ignored. Is this a (minor) bug I shoud report? ClamAV 0.88.2 running on FreeBSD Kevin

Re: [Clamav-users] problem compiling PHP ClamaAV Lib 0.12a

HP exec clamscan with the remove flag on the file and then check if the file is still there, is it is it was clean and if not it was infected. Sound OK? Thanks, Kevin > > If you've experienced any issues with phpize then something isn't right. > > SEE: > http://www.daleenter

Re: [Clamav-users] problem compiling PHP ClamaAV Lib 0.12a

I just tried to compile phplibclamav http://trickie.org/code/phplibclamav.php and am getting the same errors. One thing I forgot, for both packages I got this error running phpize: aclocal: macro `AC_ADD_LIBPATH' defined in acinclude.m4 but never used aclocal: macro `AC_ADD_LIBRARY' defined in ac

Re: [Clamav-users] problem compiling PHP ClamaAV Lib 0.12a

sr/ho me/USERNAME/clamav-0.88.2 both give this error after a few lines: ./configure: 1156: Syntax error: word unexpected (expecting ")") I still have not got my php.ini edited, could that be the problem? I did not set the LDFLAGS as you sugested yesterday, is this still required? Thank

Re: [Clamav-users] problem compiling PHP ClamaAV Lib 0.12a

ib and got: configure: error: can not find sources in . or .. It cant seem to find the source files, should I point it to the clamAV source as I tried before? Thanks, KEvin ___ http://lurker.clamav.net/list/clamav-users.html

  1   2   3   >