Thiago,
On Wed, 24 Sep 2003 11:40:57 -0300
Ronan Lucio <[EMAIL PROTECTED]> wrote:
> Thiago,
>
> When a new virus that fake the sender address is created,
> you should add it to the list, too.
Just one more thing:
Pay attention that different viruses can have differente
names
Thiago,
When a new virus that fake the sender address is created,
you should add it to the list, too.
[]s
Ronan
On Wed, 24 Sep 2003 11:10:18 -0300
"Thiago Lima " <[EMAIL PROTECTED]> wrote:
>
>
> I'm using clam + amavis-new in my postfix mail system and I'm
> very happy with it. It's a v
I also could detect that ClamAV is catching Gibe
virus since Sep/19:
2003-09-18 (Exploit.IFrame.Gen) = 17
2003-09-18 (JS.FortNight.2) = 3
2003-09-18 (Joke.Schmilz) = 2
2003-09-18 (Trojan.Dropper.C) = 48
2003-09-18 (W32/Magistr.A) = 1
2003-09-18 (W97M/[EMAIL PROTECTED]) = 1
2003-09-18 (Worm.BugBear
Tomasz,
> Just to make sure: please zip it with password "virus" and send it to my
> address in the sig below.
Sorry, it was my mistake.
As Antony said. The files had 0 Kb of size.
So, it's supposed to not contain virus.
BTW, I don't know why do these files have size 0 Kb, since
ClamAV don't re
Tomasz,
> Oh, no, please don't do it.
>
> ClamAV has the signature for Swen (it's alias of Gibe.F) for a couple of
> days yet.
So, I think it should not be working properly because I received
some viruses today morning and the viruses database is updated
2 times a day.
Ronan
Hello,
I'm receiving many messages with a attached file saying
that is from Microsoft Corporation.
I think it should be the Swen virus.
Should I send these files to someone to analyse it and
make the vaccine?
Ronan
---
This sf.net email is sp
Kevin,
> I guessing (from its name) that you could use this tool...
> http://sageshome.net/oss/mbox2mdir.php
> to extract all the messages to seperate files, which you could then scan
> with clamscan.
For all I have understood about the question I think it
don't solve his problem.
mbox2mdir shou
#wrong that could be happen. #
# #
# by Ronan Lucio #
#
Christian,
> There seems to be another morph of this, I see a few BugBear.B still
> get trough the clamav tests and being caught by the amavis test like:
So do I. And I have these virus saved here, if there is
a way to sent the virus for analyse, please, tell me.
Ronan
-
Tomasz,
I'm sorry. Please, forget the previous message.
I don't know how the virus passed throught the
anti-virus, but, when I tryed to send you, the
anti-virus blocked the message.
May by it was in the mail queue before I update
the database.
Ronan
On Thu, 5 Jun 2003 18:11:32 -
Tomasz,
On Thu, 5 Jun 2003 17:16:46 +0200 (CEST)
Tomasz Kojm <[EMAIL PROTECTED]> wrote:
> > Hello,
> >
> > I often receiving this virus, today and my viruses.db
> > is updated.
>
> No, your database isn't up to date.
Thank you very much, after I update the viruses database,
it started detecti
Hello,
I received an mail with Sobig.C virus.
Why could be wrong to ClamAV don't detect it?
I have ClamAV-0.54 and freshclam returns me OK.
It seems that clamav is updated.
My server has detected no virus Palyh ou Sobig:
2003Jun2-Exploit.IFrame 1
2003Jun2-Exploit.IFrame.HTML 46
2003Jun2-VBS/Hap
Douglas,
The script that I posted isn't to count how many
viruses ClamAV protect against.
It's to say how many infected files/e-mails were detected
by the anti-virus per day.
Ronan
On Fri, 30 May 2003 12:05:14 -0400
Douglas J Hunley <[EMAIL PROTECTED]> wrote:
> -BEGIN PGP SIGNED MESSAGE---
I forgot to say that the virus stattitics will be write
in the file /var/log/virus_stat.log
Ronan
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
TION: Use it for your own risk. Don't responsabilize me for anything#
#wrong that could be happen. #
#
Hello,
I'd like to make a report about the viruses catched by ClamAV.
So, to do this I tried to read the clamav log file and create
a txt file with the results, but, when I remove the clamd log
file, ClamAV don't create it againg. ClamAV only create a new
log file when I restart it.
So, If I want
Dave,
> Try running clamd and amavisd-new as the
> same user to narrow down the problem.
Thank you very much. It's working fine, now.
Ronan
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PRO
Dave,
On Mon, 5 May 2003 13:37:54 -0400
David Vasil <[EMAIL PROTECTED]> wrote:
> On Mon, May 05, 2003 at 02:23:14PM -0300, Ronan Lucio <[EMAIL PROTECTED]> wrote:
> > Mon May 5 11:29:41 2003 -> Unix socket file /tmp/clamd
> >
> > Does anyone know what coul
Hi All,
I'm trying to install Postfix-2.0.6 + Amavisd-new-20021227.p2
+ ClamAV-0.54 in a FreeBSD-4.8-STABLE box.
When I make a test logging via telnet on port 10024,
it gives me an error from the Anti-virus:
-
May 5 11:06:17 salseiros.melim.com.br amavisd[94246]: (94
Odhiambo,
> There is no problem at all even when people have shell access.
> Simply do
>
> chmod 1777 /usr/tmp
>
> This way anyone can write their own files to tmp but cannot
> interfere with the other person's files.
>
> It is safe.
Thank you very much for the help. It's clarified my mind
an
Odhiambo,
I'm sorry by my english... let's try again... hehehe
> > Well, I did it now to the server works fine but,
> > I don't know it it's a good to leave the server
> > working this way, even no one having access to
> > the server via shell.
>
> I do not understand your last statement, but my
Hello (cyber) friends,
Thank you very much for the answers.
I think it should solve my problem.
PS: It's time to reinstall the server.
Ronan
On Wed, 2 Apr 2003 14:58:29 +0200
DEFFONTAINES Vincent <[EMAIL PROTECTED]> wrote:
> > Hello,
> >
> > I have seeing some messages like this on mail serv
Hello,
I have seeing some messages like this on mail server:
Apr 2 07:50:10 salseiros /kernel: pid 52213 (clamscan), uid 13929 on /: file system
full
Apr 2 07:50:12 salseiros /kernel: pid 52213 (clamscan), uid 13929: exited on signal
11 (core dumped)
Well, it looks me that ClamAV are creatin
Thank you very much Tomasz,
It seems working fine to me, too.
Ronan
On Thu, 9 Jan 2003 13:07:43 +0100
Tomasz Kojm <[EMAIL PROTECTED]> wrote:
> On Thu, Jan 09, 2003 at 09:02:01AM +0100, Tomasz Kojm wrote:
> > On Wed, Jan 08, 2003 at 06:19:27PM -0600, Johan Kuuse wrote:
> > > This means that the
Hello,
I have a FreeBSD box with Postfix-1.1.11 + Amavisd-new-20020517
+ ClamAV-0.54, working fine.
The eicar attach is being blocked but, today, I start receiveing
a new virus (Lirva) that the ClamAV isn't catching.
I have already executed freshclam but this virus is still
passing through the m
Chris,
I'm sorry for not understand something in the Unix world, yet.
> The code I supplied does fallback to clamscan if clamd fails.
>
> You should NOT specify a value for $clamscan in amavisd.conf - if you do
> clamscan will always be called, not just if clamd fails.
>
> Either define $clam_
Chris,
Please, clearify just this point to me
> Basically, I had the code below in my virus_scan() routine. It was then
> necessary to set ONE of $clamd_sockname (set to path to unix socket),
> $clamd (set to anything you like - will use INET socket), OR $clamscan
> (path to clamscan - uses clams
Chris,
Very good your answer. Thank you very very much.
Do you use FreeBSD, too?
If so, did you upgrade Perl to 5.8?
Amavisd-new is still in version 20020517 in FreeBSD
ports tree.
I've tried to install Amavisd-20021116 but I didn't
get to make it work yet because the incompatibility
of some per
Tomasz,
Thank you very much for your answer.
So, I'll wait for the next release because I'm running
FreeBSD-4.6-STABLE.
Thank's,
Ronan
On Fri, 29 Nov 2002 10:06:57 +0100
Tomasz Kojm <[EMAIL PROTECTED]> wrote:
> On Thu, Nov 28, 2002 at 04:00:08PM -0500, Ed Phillips wrote:
> >
> > How would you
Ok Ken,
Thank you very much for the tip.
> clamd is amazingly fast, but it's VERY experimental. You don't want to
> run it right now.
Ronan
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PR
Hello,
I have amavisd-new-20020517 + clamav-0.54 working quite well
with clamscan.
To do so, I needed to added some lines given from Mark Martinec.
Now, I'm trying to get a better performance with clamd,
I just executed clamd, changed the words clamscan to clamdscan
in amavisd file, but it didn'
I found out what was wrong... the line Example in
clamd.conf file must be commented.
Ronan
On Thu, 28 Nov 2002 15:22:53 -0200
Ronan Lucio <[EMAIL PROTECTED]> wrote:
> Hello,
>
> I installed ClamAV-0.54 today, copied the /usr/local/etc/clamav.conf-dist
> file to /usr/local/et
Hello,
I installed ClamAV-0.54 today, copied the /usr/local/etc/clamav.conf-dist
file to /usr/local/etc/clamav.conf, but when I execute clamd, it returns
me an error.
# clamd
ERROR: Please edit the example config file /usr/local/etc/clamav.conf.
ERROR: Can't parse the config file /usr/local/etc/c
33 matches
Mail list logo
