Re: [Clamav-users] how to determine failure?

2004-03-31 Thread Ricardo Kleemann
> > and restarted clamd. Maybe clamd was leaking threads > > (I'm running 0.65)? > > 0.65 ? Good luck.. > Why do you say that? I've been using 0.65 with moderate traffic for quite some time, last night was the first time I had problems... I wasn't aware it's considered a bad release? Which is

[Clamav-users] how to determine failure?

2004-03-31 Thread Ricardo Kleemann
Hi, I run clamdscan from within a script and wanted to know if it is possible to detect any problem with clamd when running clamdscan? Last night clamd ran into a strange problem, I don't know what it was, but basically it seemed to be stuck and all instances of my script were basically "hung".

[Clamav-users] DOS ?

2004-02-10 Thread Ricardo Kleemann
Hi, I saw a couple of messages posted on the list about a DOS where clamav would die with a badly formatted uuencoded message. I'm sorry if I missed the rest of the thread, but I didn't seem to find any responses to it. I'm currently running 0.65 very successfully, I'm wondering if there's a fix

[Clamav-users] Are there any open source virus scanners for windows desktop?

2004-01-13 Thread Ricardo Kleemann
Hi, I use clamav on my linux server... But of course I want to protect my windows desktop against viruses and be able to scan my disks. Am I still stuck with having to pay Norton or whoever else for a windows scanner? Any open source alternatives? Thanks Ricardo --

[Clamav-users] clamdscan problem: Can't access the file ERROR

2004-01-13 Thread Ricardo Kleemann
Hi, I'm having a problem with clamdscan, this only happens when running clamdscan and not clamscan. I'm running clamav-0.65 on suse linux. I'm running it over a directory which has a couple of virus files. It works with clamscan, here's the output: clamscan /dev/shm/tmp/messages/mime/1517/ /de

[Clamav-users] detecting Swen vs. Worm.Gibe

2003-10-10 Thread Ricardo Kleemann
Hi all, I just noticed something strange... I have a virus file that McAffee VirusScan reports as Swen, and clamd reports as Worm.Gibe.F Do those have similar signatures? I wonder why that would be. Ricardo --- This SF.net email is sponsored

Re: [Clamav-users] Help with gzip attachments

2003-09-16 Thread Ricardo Kleemann
Hi Nigel, > > This is a test file I've sent out to a couple of you > > that passes undetected... I'm just trying to see if this > > issue has been resolved? > > Please send me a copy of the test file and I'll double > check. If this is a file you've already sent me, give me > an indication which

RE: [Clamav-users] Help with gzip attachments

2003-09-15 Thread Ricardo Kleemann
Hi, - Original Message Follows - > > Again, sorry for the top-posting. The indication I'm > > getting from Nigel is that clamav's support for email > > messages is limited and seems to only be valid for > mbox-formatted messages, is that a correct description? > > This is true for the mo

Re: [Clamav-users] clamav-20030829

2003-08-30 Thread Ricardo Kleemann
Hi Everyone, This snapshot is MUCH better! :-) It does catch a virus in a maildir file as well as that same maildir file gzip'ed. However, I do have a version which passes straight through. It should be the same file that I've sent to Nigel and Thomas (which if I'm not mistaken passed undetected

Re: [Clamav-users] Help with gzip attachments

2003-08-25 Thread Ricardo Kleemann
ge Follows - > On Sat, 23 Aug 2003 21:47:48 -0700 > "Ricardo Kleemann" <[EMAIL PROTECTED]> wrote: > > > Hi everyone, > > > > I have my system setup such that it uses ripmime to > > extract attachments from messages, then I run clamdscan >

[Clamav-users] Help with gzip attachments

2003-08-24 Thread Ricardo Kleemann
Hi everyone, I have my system setup such that it uses ripmime to extract attachments from messages, then I run clamdscan on the directory that contains the extracted attachments. That works quite well in most cases. However, I cannot get clamd to detect a virus which is contained in a gzip file.

Re: [Clamav-users] attaching a message file (rfc822) to a message goes by unnoticed

2003-08-24 Thread Ricardo Kleemann
containing the gzip file. Ricardo - Original Message Follows - > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On Friday 22 Aug 2003 4:10 pm, Ricardo Kleemann wrote: > > > I tried sending you a gzip attachment of the message > > file, and it got

Re: [Clamav-users] attaching a message file (rfc822) to a message goes by unnoticed

2003-08-22 Thread Ricardo Kleemann
Hi Nigel, I tried sending you a gzip attachment of the message file, and it got bounced back with a virus being detected ;-) So my question is, how do you process the messages? What can I be doing different that you can catch the virus, but my clamdscan won't? Thanks Ricardo - Original Me

[Clamav-users] attaching a message file (rfc822) to a message goes by unnoticed

2003-08-21 Thread Ricardo Kleemann
Hi, In testing clamd, I was able to get a virus through unnoticed. This is basically due to the fact that clamav doesn't process mime attachments very well and to make it work properly, it relies on other programs extracting mime attachments. Here's my setup: 1. I have a message file which has t

Re: [clamav-users] clamd init script?

2003-06-20 Thread Ricardo Kleemann
Thank you! - Original Message Follows - > I got this from the clamav-users previously. > > Ricardo Kleemann wrote: > > >Hi, > > > >Does anyone have a linux rc init script for c

Re: [clamav-users] clamd init script?

2003-06-20 Thread Ricardo Kleemann
Thank you! - Original Message Follows - > I got this from the clamav-users previously. > > Ricardo Kleemann wrote: > > >Hi, > > > >Does anyone have a linux rc init script for c

[clamav-users] clamd init script?

2003-06-20 Thread Ricardo Kleemann
Hi, Does anyone have a linux rc init script for clamd? Thanks Ricardo - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

[clamav-users] clamd init script?

2003-06-20 Thread Ricardo Kleemann
Hi, Does anyone have a linux rc init script for clamd? Thanks Ricardo - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Re: [clamav-users] Mime mails

2003-05-24 Thread Ricardo Kleemann
Whatever that means, uudecoding is not working. I have messages where the virus is inside a regular text message, in uuencoded content, and clamscan does not catch it. This message itself is not a mime message, but a simple example of clamscan needing the help of a decoder. I know there are othe