Hi list,
I got this message after run freshclam,
[EMAIL PROTECTED] freshclam]# tail -10 /var/log/clam-update.log
SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES
main.cvd is up to date (version: 19, sigs: 19987, f-level: 1, builder: ddm)
daily.cvd updated (version: 128, sigs: 700, f-level: 1,
> What spec is the server, what volume of emails is it processing
(especially
> during the time when you get problems)
It's only one simple mail/web/dns server...
and what MTA are you using?
sendmail-8.11.6-1U60_4cl
tks,
Mário
>
> Regards,
>
> Antony.
>
> --
> There are only 10 types of people i
Hi List,
(first of all, forgive me this (possible) off topic)
I allways experiencing a truly hell, every day.. : (
Every day around 10:00am and 02:00pm my server go down because a lot of
process clamav, 11MB each, starting...
I just disable some options inner amavis to reduce the traffic
# No
ERROR: Error while reading md5 sum of database from clamav.elektrapro.com
ERROR: Can't get viruses2.md5 sum from clamav.elektrapro.com
Someone knows what's happened?
tks
Mário
---
This SF.net email is sponsored by: Perforce Software.
Perf
I used a Pentium 233MMX
[EMAIL PROTECTED] arquivos]# time /usr/local/bin/clamscan /etc/services
/etc/services: OK
--- SCAN SUMMARY ---
Known viruses: 29951
Scanned directories: 0
Scanned files: 1
Infected files: 0
Data scanned: 0.01 Mb
I/O buffer size: 131072 bytes
Time: 7.206 sec
Infected files: 1
>
> I would assume that any "Seriously broken Zip" contains a virus.
>
>
>
> Mário Luis Ghoneim wrote:
> >>It should handle the broken Mimail zips and classify them as "Seriously
> >
> > Broken Zip".
> >
> > [EM
>It should handle the broken Mimail zips and classify them as "Seriously
Broken Zip".
[EMAIL PROTECTED] clamav-devel-20031109]# /usr/local/bin/clamscan -V
clamscan / ClamAV version devel-20031110
[EMAIL PROTECTED] clamav-devel-20031109]# clamscan/clamscan
../clamav-0.60/photos.zip
../clamav-0.60/
> > It seems there's a problem with your amavis installation. The amavis
> > itself should unpack _all_ zip files.
I sent a zip file ( http://www.jcradios.com.br/virus/hello.zip ) and clamav
worked fine. This means that my amavis installation it's ok, or no yet :-|?
So, if I send this wrong zip f
>Yayi! You should use clamscan --disable-archive --unzip instead!
[EMAIL PROTECTED] clamav-devel-20031106]# /usr/local/bin/clamscan -V
clamscan / ClamAV version devel-20031107
[EMAIL PROTECTED] clamav-devel-20031106]#uname -mnr
ns2.pitansite.com.br 2.2.17-14cl i586
[EMAIL PROTECTED] clamav-devel
> [EMAIL PROTECTED] tmp]# clamscan -V
> clamscan / ClamAV version devel-20031107
> [EMAIL PROTECTED] tmp]# clamscan photos.zip
> Segmentation fault
I had the same result, so I turned back to the clamav 0.60
>Yayi! You should use clamscan --disable-archive --unzip instead!
[EMAIL PROTECTED] clam
> when you call clamscan from your email scanner add
>
> --disable-archive --unzip
>
> to the options.. It will find it then..
>
> -Keith
>
I edited /usr/bin/amavis
$output = `$clamscan --stdout -r -w --one-virus --disable-archive --unzip
$TEMPDIR/parts`;
But it doesn't work yet :(
More tips?
rsday, November 06, 2003 1:20 PM
Subject: Re: [Clamav-users] Virus not detected
> Mário Luis Ghoneim wrote:
>
> > Ok Tomasz,
> > I upgraded it clamav0.54 to 0.60
> >
> > /usr/local/bin/clamdscan -V
> > clamdscan / ClamAV version 0.60
> >
> > /usr/local/
> > On Wed, 05 Nov 2003 at 22:32:22 -0200, Mário Luis Ghoneim wrote:
> >
> >>This http://www.jcradios.com.br/virus/photus.zip file has in your inner
a
> >>virus.
> >
> >
> > It has indeed. But clamscan detects it:
> >
> > $ clamscan photos.zi
ted
> On Wed, 05 Nov 2003 at 22:32:22 -0200, Mário Luis Ghoneim wrote:
> >
> > This http://www.jcradios.com.br/virus/photus.zip file has in your inner
a
> > virus.
>
> It has indeed. But clamscan detects it:
>
> $ clamscan photos.zip
> photos.zip: Worm.Mimail.
TECTED]>
Sent: Wednesday, November 05, 2003 11:10 PM
Subject: Re: [Clamav-users] Virus not detected
> On Wed, 05 Nov 2003 at 22:32:22 -0200, Mário Luis Ghoneim wrote:
> >
> > This http://www.jcradios.com.br/virus/photus.zip file has in your inner
a
> > virus.
>
>
http://www.jcradios.com.br/virus/photos.zip
- Original Message -
From: "Mário Luis Ghoneim" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, November 05, 2003 10:32 PM
Subject: [Clamav-users] Virus not detected
> Hi,
>
> This http://www.j
Hi,
This http://www.jcradios.com.br/virus/photus.zip file has in your inner a
virus.
See it yourself.
I use
Conectiva Linux 6.0
ClamAV 0.54
Sendmail 8.11.6p2/8.11.1
[ ]'s
Mário
---
Certificado de ausência de vírus enviados.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version:
One suggestion:
Next time, put the archive on Net, and give us the only link to get it.
So, who wants to experience go there... ;-)
Mário.
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PR
Warning...
Run the Orcamento.exe.
It 'll intall the MsdosDll.exe
Mário
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
some program that says it is, or do you know it is
> from other info?
>
> Ted
>
> --On Friday, July 11, 2003 10:13 AM -0300 Mário Luis Ghoneim
> <[EMAIL PROTECTED]> wrote:
>
> >> Can you post the file on s
> Can you post the file on some URL so we can download it
It is here
http://jcradios.com.br/virusfile/
Mário.
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
> Did you give the "--mbox" option when scanning the file(s)?
> What version of clamav are you
How can I to do that?
I use clamav-0.54.
Tks.
Mário
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail:
Hi,
This file MsdosDll.exe was attached and it was infected with
Keylogger.Trojan
My clamav didn't get it.
Some idea?
--- SCAN SUMMARY ---
Known viruses: 8745
Scanned directories: 1
Scanned files: 2
Infected files: 1
Data scanned: 0.07 Mb
I/O buffer size: 131072 bytes
Time: 7.7
Hi,
Does has some way to send (reply automaticaly) the contamined e-mail to
addressee... somethig like warning to him about the sender attemp´s ?
tks.
Mário.
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional command
> Mário,
>
> Give us more information. What kind of MTA are you using ?
>
> Marcelo.
Hi Marcelo,
My MTA is Sendmail (8.11.6-1U60), this antivirus system
(Sendmail+Amavis+ClamAV) was working fine. But my HD server broke and I had
to do one new instalation. All the files were missing : (
So, I kn
Hi,
I´m with a big problem!!
There´s no pop or smtp activity, but there are a lot of process amavis and
clamscan, started!!!
It´s eat all my RAM and SWAP memory. It was crached the server!!!
I use clamAV 0.51 and kernel 2.2.17
Please, someone could help me
What´s happing?
Tks.
Mário
---
Hi,
Wich the diference between clamscam and clamd. What I mean the job work
without clamd, so I´ll need to start it?
tks.
Mário.
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Ok, ok,
I just got sucssesfull. It´s running fine.
I changed the owner some files and directory and recompiling the
amavis-perl-11.
Mário.
- Original Message -
From: "Mário Luis Ghoneim" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, January 30
I´m installing ClamAV 0.23 (it´s ok, I know there´s later version)
I ran the patch
After compilling amavis-per-11 with
./configure --enable-relay --enable-sendmail
Appears this:
** Configuration summary for amavis perl-11 2001-04-07:
Install amavis as: /usr/sbin/amavis
Configured
Hi, all
To me it´s working fine.
The message has been quarantined as:
/var/virusmails/virus-20030110-235229-4084
Here is the output of the scanner:
/var/amavis/amavis-10278748/parts/msg-4084-1.html: OK
/var/amavis/amavis-10278748/parts/msg-4084-2.exe: Lirva FOUND
Happy New Year
Mário.
-
and
others, clamavd, named etc...
This problem come after one mistake I did im my server... Before this all
worked fine.
I use clamAV 0.53 and Conectiva Linux 6.0 (like RH)
Could you help-me (us) again.
Tks in advance.
Mário Luis Ghoneim
- Original Message -
From: "Tomasz Kojm&quo
Me too,
Let´s wait.
Mario.
- Original Message -
From: "M. Edward Wilborne III" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, December 06, 2002 5:44 PM
Subject: Re: [clamav-users] virus detection of [EMAIL PROTECTED]
> Sorry to be a pest on the list... I went through the arch
Hi,
May I to delete the quarantined files from
/var/virusmails?
Tks.
Mário
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
> What versions of clamav and amavis-ng are you using ?
ClamAV 0.51 and amavis-ng.0.1.3.1
>Please try to disable the internal unarchiver with "--disable-archive"
option.
Please, where I find this option :-(
Tks.
Má
Forgive me if the question is not to this place :-(
Why my mqueue box always is a lot of e-mails waiting ?
I use Amavis NG with ClamAV,
I observed that although wasn´t smtp tarffic many amavis and clamav was
ranning...
Someone kows why? This fact eated all the RAM and swap memory
tks.
Mário
--
Try the amavis-ng-0.1.3
I got amavis-ng-0.1.4 but it didn´t work.
Mário Luis Ghoneim
- Original Message -
From: "Odhiambo Washington" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, October 16, 2002 8:27 AM
Subject: [users] OT: Amavis-ng install failur
36 matches
Mail list logo
