[Clamav-users] ClamAV 0.94.2 memory leak?

2008-12-06 Thread Tomi Hakala
Hello, clamd process on my Solaris 10 x86 box grows up to 2 GB just in few days, this seems a bit excessive for me. At first clamd was compiled in 32 bit mode with gcc but few days back I compiled it in 64 bit just to see if it had any effect, it did not. Anyone else seeing such behaviour? Here

[Clamav-users] MailFollowURLs option not working?

2008-04-01 Thread Tomi Hakala
Hello, Is MailFollowURLs option working for anyone? I'm testing it with 0.92.1 and 0.93rc1 (on Linux and on Solaris) and either one is not scanning URLs found from mails, anti-phishing code is detecting URLs just fine. Below is boolean options from my 0.92.1 config. LogTime yes LogSyslog yes

Re: [Clamav-users] How to disable single signature to avoid FP?

2006-02-28 Thread Tomi Hakala
Trog wrote: > It's unlikely to be a false positive. It's likely that the document has > not been cleaned correctly, and some virus code remains; it's probably > dormant however. Kaspersky is usually very good spotting these, in this case it didn't found anything though. ___

Re: [Clamav-users] How to disable single signature to avoid FP?

2006-02-27 Thread Tomi Hakala
Noel Jones wrote: > First unpack the *.cvd files (using sigtool --unpack) then edit the > resulting *db text files to remove the offending signatures. > > Next move all the *db files to some other directory. Tell clam to use > the new directory with the DatabaseDirectory directive in clamd.conf or

[Clamav-users] How to disable single signature to avoid FP?

2006-02-27 Thread Tomi Hakala
Hello, Is there a way to disable any single signature by hand? I'm asking this because of I think that I'm seeing false positives with XF.Sic.L but I cannot be certain as I don't have any of those FP files available. What makes me think of false positive is that I am running Kaspersky and Sophos