Re: [Clamav-users] Clamav and FreeBSD 5.1

2003-10-09 Thread W.D. McKinney
On Wed, 2003-10-08 at 11:10, Robert Burtelow wrote: > Hello all, > > I've been banging my head against the desk for the past two days trying to figure > this one out. I'm running FreeBSD 5.1-RELEASE with qmail/qmail-scanner/clamav. > Whenever messages are sent to the server, I am getting a 451

[Clamav-users] exit status 2 ?

2003-10-03 Thread W.D. McKinney
We had a problem the other day and had to re-compile perl. Now we see this problem : clam_scanner: corrupt or unknown clamd scanner error or memory/resource/perms problem - exit status 2 Due I need to re-install ClamAV also? Dee --- This s

RE: [Clamav-users] RE: UPDATE81.exe getting thru

2003-09-20 Thread W.D. McKinney
On Sat, 2003-09-20 at 16:40, Diego d'Ambra wrote: > > The current standpoint of the team maintaining the DB is to include > signatures that also detect damaged viruses. These signatures are often > used to detect e-mails that somehow "lost" the damaging part. This is to > prevent users from getti

Re: [Clamav-users] RE: UPDATE81.exe getting thru

2003-09-20 Thread W.D. McKinney
We host e-mail for schools, business's, etc. It's not feasible to enforce blocking .exe's and keep customers. Simple economics. Support costs are an issue and it's a small trade off in this incident to go blocking the gif route. Dee On Sat, 2003-09-20 at 09:16, Thomas Lamy wrote: > Antony Stone

Re: [Clamav-users] RE: UPDATE81.exe getting thru

2003-09-19 Thread W.D. McKinney
On Fri, 2003-09-19 at 13:51, Jesse Guardiani wrote: > Kevin Hanser wrote: > > > Yes, I received a couple of these this morning, one with an attachment > > called Update53.exe, and another w/an attachment called Install932.exe. > > > > I'm assuming this is the new "Swen" virus I have recently hear

[Clamav-users] UPDATE81.exe getting thru

2003-09-19 Thread W.D. McKinney
Is anyone else seeing this happen ? Dee -- W.D.McKinney (Dee) | Affordable E-Mail and Internet Solutions Alaska Wireless Systems | for Schools, Libraries, Clinics & Business' http://www.akwireless.net | Call 1-907-349-4308

[Clamav-users] Latest Virus Threats

2003-09-17 Thread W.D. McKinney
I looked at Symantec tonight, as I haven't in awhile. Saw the list at http://securityresponse.symantec.com/avcenter/vinfodb.html#threat_list and I am wondering how many of these are ones that get sent into the good folks adding db to clamav ? Is Symantec listing more than necessary to keep sales up

Re: [Clamav-users] a few damaged viri still making it through...

2003-09-02 Thread W.D. McKinney
Interesting Daniel. I see hundreds of e-mails hitting a single account on our server that are passing as normail e-mail through our qmail-scanner/SA/clamav setup. IE.: Return-Path: <[EMAIL PROTECTED]> Delivered-To: [EMAIL PROTECTED] Received: (qmail 16021 invoked by uid 1009); 2 Sep 2003 02:24:58

Re: [Clamav-users] FOO.EXE

2003-08-16 Thread W.D. McKinney
has worked excellent. It may have been in a small window of time On Sat, 2003-08-16 at 08:41, Antony Stone wrote: > On Saturday 16 August 2003 4:57 pm, W.D. McKinney wrote: > > > Here I am looking at manual. > > Using my clamav tools I find. > > > > webmail:/ho

[Clamav-users] FOO.EXE

2003-08-16 Thread W.D. McKinney
Here I am looking at manual. Using my clamav tools I find. --- SCAN SUMMARY --- Known viruses: 9317 Scanned directories: 1 Scanned files: 33 Infected files: 0 Data scanned: 27.98 Mb I/O buffer size: 131072 bytes Time: 14.597 sec (0 m 14 s) webmail:/home/dee# clamscan viri viri/mess

[Clamav-users] message.zip ?

2003-08-16 Thread W.D. McKinney
Hi, One of our customers recieved a message that had a .zip attachment and looks suspect. Anyone here here what to take a look at at it ? Dee -- W.D.McKinney (Dee) Alaska Wireless Systems 11310 Lillan Lane, Anchorage, AK 99515-2914 Direct (907)349-4308 -=- http://www.akwireless.net --

Re: [Clamav-users] MSBlast

2003-08-14 Thread W.D. McKinney
Thanks a bunch. Dee On Tue, 2003-08-12 at 19:15, Nicholas Chua wrote: > W.D. McKinney wrote: > > Is the MSBlast worm in clamav db2 yet ? > > http://clamav.elektrapro.com/cgi-bin/sendvirus.cgi does not show it ? > > If i am not wrong, it is been detec

[Clamav-users] MSBlast

2003-08-14 Thread W.D. McKinney
Is the MSBlast worm in clamav db2 yet ? http://clamav.elektrapro.com/cgi-bin/sendvirus.cgi does not show it ? Dee --- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are avai

[Clamav-users] Set-up Help needed

2003-08-04 Thread W.D. McKinney
I have a mail server running qmail 1.03. I also use qmail-scanner and SA with clamav. I noticed that I have not seen any copies of warnings of virus packed e-mails. So a quick check od syslog has : Aug 4 09:25:34 webmail spamc[1810]: connection attempt to spamd aborted after 3 retries Aug 4 09:2

Re: [clamav-users] Problem in using /usr/bin/freshclam --quiet -l/var/log/clam-update.log]

2003-06-27 Thread W.D. McKinney
Hi Brian, Thanks :-) I deleted both and wala, freshclam did the update with issue. Nice. Dee On Tue, 2003-06-24 at 15:02, Brian May wrote: > unlink = delete > > make sure you are either root or the owner of the file you wish to remove > > Brian > > - Original Messag

[clamav-users] Problem in using /usr/bin/freshclam --quiet -l /var/log/clam-update.log]

2003-06-24 Thread W.D. McKinney
Hello, I am new to clamav but just had this error show up in the last couple days. Any idea or directions to 'unlink viruses.db2 file ? Thanks -Forwarded Message- > From: Cron Daemon <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Subject: Cron <[EMAIL PROTECTED]>/usr/bin/freshclam --