Re: [clamav-users] using clamdscan and clamd to do complete file system scan

El 30/04/15 a las 12:13, René Bellora escibió: El 30/04/15 a las 11:58, John McGowan escibió: # clamdscan /bin have you tried: clamdscan -v /bin ? sorry to answer to myself, "-v" makes no difference in this case but clamdscan is actually scanning, it just doesn't show fi

Re: [clamav-users] using clamdscan and clamd to do complete file system scan

El 30/04/15 a las 11:58, John McGowan escibió: # clamdscan /bin have you tried: clamdscan -v /bin ? it seems that normally only infected files are shown René ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq

Re: [clamav-users] using clamdscan and clamd to do complete file system scan

El 30/04/15 a las 11:58, John McGowan escibió: On Tue, Apr 28, 2015 at 8:17 PM, Al Varnell wrote: Quite the opposite is true. The default is to scan up to 15 directories deep. Questions such as these are most easily solved by reading the appropriate man, in this case clamdscan.1 which reads

Re: [clamav-users] Scan of RAR problem

El 29/04/15 a las 13:04, jose-marcio martins da cruz escibió: Hello, I'm getting different results when scanning a infected email message. On a Sparc Solaris 10 (32 bits compiled), clamdscan tels me that the message is infected : "Heuristics.Encrypted.RAR FOUND" Testing it on two 64 bits li

Re: [clamav-users] clamav 0.98.4 on Centos4

El 04/07/14 18:22, Greg Folkert escribió: FYI, CentOSv4 Support Ended Feb 2012. It is over 2 years out of date. The newest I've been able to get to work is 0.98.1 with Stock Stuff. Install/Compile a newer version of OpenSSL in /usr/local/openssl-(version)/ and point your ClamAV compile towards i

[clamav-users] clamav 0.98.4 on Centos4

hi! I'm trying to compile Clamav 0.98.4 in Centos4, and i get this: configure: error: Your OpenSSL installation is missing the X509_VERIFY_PARAM function. Please upgrade to a more recent version of OpenSSL. this is a server that I don't control (I would upgrade Centos otherwise), and I'm o

[clamav-users] LibClamAV Warning: fmap_unneed: unneed on a unlocked page LibClamAV Warning: fmap_unneed: unneed on a unlocked page

hi! scanning a samba share gives me this warning: LibClamAV Warning: fmap_unneed: unneed on a unlocked page LibClamAV Warning: fmap_unneed: unneed on a unlocked page does anyone know what does it mean? thanks in advance, René ___ Help us build

[clamav-users] libclamav warning

hi! i'm getting some warnings when scanning a directory: LibClamAV Warning: Bytcode 4 failed to run: Error during bytecode execution LibClamAV Warning: Bytecode run timed out in interpreter after 221135000 opcodes LibClamAV Warning: Bytcode 4 failed to run: Unknown error code what are these?

Re: [Clamav-users] ClamAV for Redhat Linux

> On 9/21/07, DBS Labs <[EMAIL PROTECTED]> wrote: > >> Is anyone using this software on a Redhat EL4 server and having success? I >> am having all types of problems. >> > > i'm using clam in Centos 4, and having success. I'm installing rpms from Dag repository regards, René ___

Re: [Clamav-users] Install clamav on CentOS 4.4

Gustavo Gouvea escribió: > Hi there, > has anyone instaled clamav on CentOS 4.4 before?? Any tips??? Which version > of Openssl do I need to use? Will I have to do it from the source code? By > now, Ive been using the rpm packages from Petr Kristof. > > try using the dag repository instead ___

Re: [Clamav-users] How to run clamscan for a list of files from a file?

Todd Lyons escribió: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, Nov 28, 2006 at 05:55:44PM -0300, René Bellora wrote: this could be circumvented with xargs: cd /tmp/clamscan find . -type f -print0 | xargs -0 clamscan If clamscan is complaining about a too long commandline

Re: [Clamav-users] How to run clamscan for a list of files from a file?

This sounded like a good idea, so I gave it a try. After spending a few hours to script the softlinks I got it to work for small file lists, but it still doesn't work for lots of files (~5000). When I run 'clamscan /tmp/clamscan/*' I get the following error: /usr/bin/clamscan: Argument l

Re: [Clamav-users] ClamScan --MBOX ok! ClamDScan --MBOX isn't!

Schwartz Consultores Associados / Suporte wrote: René Bellora wrote: clamscan and clamdscan have different options. If you have ScanMail option enabled, then: clamdscan mailbox_file is enough Thanks for your reply, René. The reason behind this question is that "Open WebMail"

Re: [Clamav-users] ClamScan --MBOX ok! ClamDScan --MBOX isn't!

Schwartz Consultores Associados / Suporte wrote: Hello there! My question is perhaps simple but I can't figure it out just by browsing the ClamAV docs. At command prompt, " clamscan --mbox " seems to work fine. However, " clamDscan --mbox " returns, "WARNING: Ignoring option -m (--mbox): pl

Re: [Clamav-users] Spam image/graphics sigs

Chris Burton wrote: I've been making "md5" style sigs out of all of the images from spam I've had over since around June 2005. They are available via http://www.msrbl.com/site/msrblimagesdownload if anyone else wants to give them a try. that's nice. My mix of spam doesn't quite match though

Re: [Clamav-users] What does this message mean?

Ken Goods wrote: Jun 16 10:17:46 gw-mail MailScanner[16315]: Virus and Content Scanning: Starting Jun 16 10:18:19 gw-mail MailScanner[16151]: Commercial scanner clamav timed out! Jun 16 10:18:19 gw-mail MailScanner[16151]: Virus Scanning: Denial Of Service attack detected! I did (as st

Re: [Clamav-users] ClamAv does not detect virus in dotfiles

Odhiambo Washington wrote: Could you please try this and see if the virus will be detected: formail -Y -s sendmail [EMAIL PROTECTED] < undetected NB: That way you will have sent the mail to yourself, hopefully. i tried, and it didnt reach my mailbox. The logs show the detection René

Re: [Clamav-users] ClamAv does not detect virus in dotfiles

Odhiambo Washington wrote: Could it be that when a virus is hidden in a file named .filename, then clamd cannot detect it? it works fine in here: # clamdscan undetected /tmp/undetected: Worm.Mydoom.I FOUND --- SCAN SUMMARY --- Infected files: 1 Time: 0.113 sec (0 m 0 s) # clamdsc

Re: [Clamav-users] ClamAV-20040805

> > > Tomasz Kojm wrote: > > > Dear users, > > > > the development version of ClamAV is mature enough to start using it > > instead of 0.7x stable releases. Please give it a try and report all > > bugs to [EMAIL PROTECTED] Thank you ! > > > > http://www.clamav.net/snapshot/clamav-20040805.

Re: [Clamav-users] [Fwd: memory hog in 0.72 and 0.73]

i found the offending email. It's a 134mb email. It contains a 100mb file. If i scan the file alone, memory consumption reaches 13mb. If i scan the raw email, the memory consumption reaches 360mb. Any suggestions besides disabling 'ScanMail'? regards, René --

Re: [Clamav-users] [Fwd: memory hog in 0.72 and 0.73]

Jeffrey Kroll wrote: I have yet to see this problem in our instance of Clamd running w/ tcpserver & spamassassin. Our current machine has been operating for a little over 3 months uptime w/ 1 GB ram and 65,000 msg's / day. if you're running for 3 months, you have a different version. I'm usin

[Clamav-users] [Fwd: memory hog in 0.72 and 0.73]

hi! is there some known memory hog in version 0.72? My clamd suddenly consumed all my free memory (about 200mb, when normally it peaks around 13mb). I upgraded to 0.73, and i'm in the same situation. I'm using FC1. I couldn't figure what's triggering this effect from the log, these are some li

Re: [Clamav-users] Re: Some viruses go through

Tomasz Papszun wrote: $ clamscan -m av-inet1.txt LibClamAV Warning: Multipart MIME message contains no boundary lines av-inet1.txt: Worm.SomeFool.P FOUND $ clamscan -V clamscan / ClamAV version devel-20040323 So it _is_ detected. I'd bet: you've got old version or misconfigured system. i had

Re: [Clamav-users] calling rbellora@tecnoaccion.com.ar

Internet Helpdesk wrote: We used to offer ASK here... until spammers started using spamcop's spamtrap accounts in their return address. Spamcop didn't care that the messages were confirmations request. They just blacklisted us without notification. -Troy mmm stupid spammers... :) What do you

Re: [Clamav-users] calling rbellora@tecnoaccion.com.ar

Tomasz Kojm wrote: On Fri, 13 Feb 2004 08:15:49 -0700 Craig Daters <[EMAIL PROTECTED]> wrote: ASK (Active Spam Killer) is so cool! I really like the idea of the Maybe it's cool for you but surely not for a sender who receives that auto spam. i think that would be almost solved just aut

Re: [Clamav-users] calling rbellora@tecnoaccion.com.ar

Antony Stone wrote: Doesn't that result in your mail server either attempting delivery to addresses which fail, or successfully delivering to innocent (forged) addresses, in response to most of the spam you get? yes it does. Regarding forged address, they receive hundreds of bounces anyway.

Re: [Clamav-users] calling rbellora@tecnoaccion.com.ar

Antony Stone wrote: On Friday 13 February 2004 2:45 pm, René Bellora wrote: Nigel Horne wrote: I just tried to reply to your mail but got this response. yes, i'm using ASK for spam protection. The meaning of the automatic response is: reply this email and you'll b

Re: [Clamav-users] calling rbellora@tecnoaccion.com.ar

Nigel Horne wrote: I just tried to reply to your mail but got this response. yes, i'm using ASK for spam protection. The meaning of the automatic response is: reply this email and you'll be added to rbellora's whitelist. I received your email anyway. I thought the response was also in engli

Re: [Clamav-users] clamscan --mbox doesn't detect a virus

Nigel Horne wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Monday 05 Jan 2004 6:12 pm, René Bellora wrote: Fedora Core 1 Same as me. I don't know what else to suggest. may be compare md5 hashes of the build directory? regards,

Re: [Clamav-users] clamscan --mbox doesn't detect a virus

Nigel Horne wrote: On Monday 05 Jan 2004 4:04 pm, René Bellora wrote: i did (and i had already), but it gives the same result... And clamscan does detect the virus once unpacked What operating system? It works for me on Linux. Fedora Core 1 regards, René

Re: [Clamav-users] clamscan doesn't detect virus in .zip

Tomasz Papszun wrote: And what about this? : clamscan --disable-archive --unzip -r videos.zip this one works # clamscan --disable-archive --unzip -r videos.zip Archive: /disco2/inflex/tmp/Binf_0604185219021/unpacked/videos.zip inflating: 2453.exe /tmp/aa54d2f0b16d273d/2453.e

Re: [Clamav-users] clamscan doesn't detect virus in .zip

Tomasz Papszun wrote: A blind shot: does it make a difference if you run 'clamscan -r videos.zip'?... it doesn't: # clamscan -r videos.zip videos.zip: OK --- SCAN SUMMARY --- Known viruses: 12013 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 0.01 MB I

Re: [Clamav-users] clamscan --mbox doesn't detect a virus

Nigel Horne wrote: I downloaded your file and got this: [EMAIL PROTECTED] tmp]$ clamscan --mbox 9675.0.mailpack.klez 9675.0.mailpack.klez: Exploit.IFrame.Gen FOUND - --- SCAN SUMMARY --- Known viruses: 9902 Scanned directories: 0 Scanned files: 1 Infected files: 1 Data scanned: 0.

[Clamav-users] clamscan doesn't detect virus in .zip

hi! i have this .zip: clamscan doesn't detect a virus in it, but it detects it once unpacked # clamscan --version clamscan / ClamAV version devel-20040103 # clamscan videos.zip videos.zip: OK --- SCAN SUMMARY --- Known viruses: 12013 Sca

[Clamav-users] clamscan --mbox doesn't detect a virus

hi! clamscan doesn't detect a virus in this email (using --mbox): it does detect it once unpacked # clamscan --version clamscan / ClamAV version devel-20040103 # clamscan --mbox mailpack mailpack: OK --- SCAN SUMMARY --- Known viruses

[Clamav-users] Re: weirdness in FC1

Tomasz Kojm wrote: On Mon, 29 Dec 2003 12:40:06 -0300 René Bellora <[EMAIL PROTECTED]> wrote: so, i went to report 'desde.exe', which i knew it was a Magistr variant, but the test-clamav web interface do detect it... Then, i do another 'freshclam -v', tried again, but

weirdness in FC1 (was: Re: [Clamav-users] clam devel-20031223 has mime decoding problems)

Nigel Horne wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tuesday 23 Dec 2003 4:10 pm, René Bellora wrote: hi! i upgraded from clam 0.65 to clam devel-20031223. After the upgrade, i checked some archived infected mails. I found the '--mbox' option miss some viruses

[Clamav-users] clam devel-20031223 has mime decoding problems

hi! i upgraded from clam 0.65 to clam devel-20031223. After the upgrade, i checked some archived infected mails. I found the '--mbox' option miss some viruses it used to catch. Once unpacked, clamscan detects the virus here is one sample (i couldn't say if it's always the same case, ther

Re: [Clamav-users] Nude links on www.clamav.org

Tomasz Papszun wrote: It's a pity that you didn't inform us about your intention of dropping clamav.org :-(( . We could register it for ClamAV. i have registered clamav.com.ar, if there is any use to it best regards, René --- This SF.net e

Re: [Clamav-users] nondetected virus

Tomasz Papszun wrote: On Mon, 17 Nov 2003 at 16:00:52 +0100, Thomas Lamy wrote: René Bellora wrote: hi! i've got an email containing a virus (TR.Happy99/SKA). Clamscan recognizes the virus, but 'clamscan --mbox' doesn't # clamscan --version clamscan / ClamAV ver

[Clamav-users] nondetected virus

hi! i've got an email containing a virus (TR.Happy99/SKA). Clamscan recognizes the virus, but 'clamscan --mbox' doesn't # clamscan --version clamscan / ClamAV version 0.65 # clamscan unpacked/Happy99.exe unpacked/Happy99.exe: TR.Happy99/SKA FOUND # clamscan --mbox mailpack LibClamAV Warning:

Re: [Clamav-users] Zip issues

Tomasz Kojm wrote: On Fri, 07 Nov 2003 11:38:47 -0300 René Bellora <[EMAIL PROTECTED]> wrote: downloaded, compiled and installed (Redhat 7.2): Redhat ? Which gcc version ? (try gcc --version) Best regards, Tomasz Kojm 2.96 i also tried in RH 6.2 (egcs-2.91.66) and RH 7.3 (2.96)

Re: [Clamav-users] Zip issues

Tomasz Kojm wrote: I wasn't able to reproduce Mimail zip errors but there are real chances the latest change in CVS will fix them. There's a snapshot available at: http://clamav.sf.net/snapshot/clamav-20031106-tk.tar.gz Please test it ASAP. Thank you. Best regards, Tomasz Kojm downloaded, com

Re: [Clamav-users] Virus not detected

Thomas Lamy wrote: It may be because 0.60 isn't stable (but marked so). Please grab the sources via CVS or use one of the snapshots. Only these contain all the fixes we mentioned. [EMAIL PROTECTED] tmp]# clamscan -V clamscan / ClamAV version devel-20031106 [EMAIL PROTECTED] tmp]# clamscan phot

[Clamav-users] clamscan chokes on this email

hi! live virus sample in: http://rana.dyndns.org/mbox.txt i'm using clamscan version 20030829, and when i do 'clamscan --mbox' on the aforementioned, i get: clamscan: message.c:739: decodeLine: Assertion `strlen(line) <= 76' failed. Aborted it seems that the encoding has one corrupt line

Re: [clamav-users] Invisible Virus

>What's the password? virus René - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: [clamav-users] clamscan segmentation violation

>what version are you using? Have you tried again with the latest snapshot. > >Please e-mail a copy of the mail message to me and I'll see if I can reproduce the problem. > >- -Nigel hi Nigel! i tried again, this time with clamav 20030705, and it's also producing the segfault. I'm attaching the .

Re: [clamav-users] clamscan segmentation violation

>I seem to remember you're using Solaris8, is is x86 or Sparc? Line 545 of the latest version of message.c is a comment, >what version are you using? Have you tried again with the latest snapshot. >Please e-mail a copy of the mail message to me and I'll see if I can reproduce the problem. I'm us

Re: [clamav-users] clamscan segmentation violation

i ran it through gdb, and this is the backtrace: #0 0x40025c77 in messageToBlob (m=0x86132f8) at message.c:545 #1 0x40024720 in insert (mainMessage=0x0, blobsIn=0x0, nBlobs=0, textIn=0x0, dir=0x860ed70 "/tmp/7e954d524eeddf1a", rfc821Table=0x860ed60, subtypeTable=0x860ed20) at mbox.c:705

Re: [clamav-users] clamscan segmentation violation

>it's me again! > >with the latest viruses.db all four virus emails are correctly detected, and >the segmentation violation disappeared i'm getting the segfault again. I copied the virus database, just in case regards, René -

Re: [clamav-users] clamscan segmentation violation

>i'm deploying clamscan in a RH9 box, i downloaded version 0.60, compiled >and installed, and i'm running freshclam periodically. Then i clamscanned my >virus archive. There were just four viruses not found, out of ~2200, three >of them were Fortnight.js. I sent those to [EMAIL PROTECTED] . >Bu

[clamav-users] clamscan segmentation violation

hi! i'm deploying clamscan in a RH9 box, i downloaded version 0.60, compiled and installed, and i'm running freshclam periodically. Then i clamscanned my virus archive. There were just four viruses not found, out of ~2200, three of them were Fortnight.js. I sent those to [EMAIL PROTECTED] . Bu

[clamav-users] unidentified viruses

hi! i've just downloaded and installed clamscan 0.54, and used it with latest viruses.db (nov 26, 7:33pm). My idea was to compare to Mcafee viruscan, which i have installed on a mailserver. So, i took a bunch of virus containing files (already extracted by inflex) to test. There were some virus fi