[Clamav-users] Signature for W32.Mimail.A@mm available?

2003-08-04 Thread John Birkhead
Hi, Looks like the above worm is making it's way around and we have received a few copies already. Any idea when the virus db will be updated to detect this? Thanks, John Birkhead --- This SF.Net email sponsored by: Free pre-built

Re: [Clamav-users] Signature for W32.Mimail.A@mm available?

2003-08-04 Thread Daniel J McDonald
On Mon, 2003-08-04 at 09:24, John Birkhead wrote: > Hi, > Looks like the above worm is making it's way around and we have > received a few copies already. Any idea when the virus db will be updated to > detect this? It was released on Friday - it's listed as Trojan.Dropper.C I've picked up a

Re: [Clamav-users] Signature for W32.Mimail.A@mm available?

2003-08-04 Thread Support ePaxsys/FRWS
I thought they updated late last week, our versions of the DB catch it as: Report: message.zip contains Trojan.Dropper.C And we have caught about 30 since late last night using ClamAV. Is there another version its not catching yet? Uh oh... JPP At 07:24 AM 8/4/03 -0700, you wrote: Hi, L

Re: [Clamav-users] Signature for W32.Mimail.A@mm available?

2003-08-04 Thread Tomasz Papszun
On Mon, 04 Aug 2003 at 7:24:02 -0700, John Birkhead wrote: > Hi, > Looks like the above worm is making it's way around and we have > received a few copies already. Any idea when the virus db will be updated to > detect this? > > Thanks, > John Birkhead Are you sure that these copies were

RE: [Clamav-users] Signature for W32.Mimail.A@mm available?

2003-08-04 Thread John Birkhead
Thanks for the clarification! I'm a ClamAV newbie and I'm not sure how to map virus names across different vendors. :-) Mm. I have seen this virus reported being received in the last several days by our mail gateway but I didn't know that this was [EMAIL PROTECTED] (as named by Symantec). Th

Re: [Clamav-users] Signature for W32.Mimail.A@mm available?

2003-08-04 Thread Brett Simpson
I noticed it was added to the database on Aug 1st at 13:20 (see link below). I'm running clamav-20030320 and it's filtering out that virus ok. http://sourceforge.net/mailarchive/forum.php?thread_id=2886216&forum_id=34654 Brett >>> [EMAIL PROTECTED] 08/04/03 10:24AM >>> Hi, Looks like th

RE: [Clamav-users] Signature for W32.Mimail.A@mm available?

2003-08-04 Thread John Birkhead
Hi, I cron a Freshclam every hour and my log reports that the update you mention was executed. I am also seeing occasional reports of the Trojan.Dropper.C virus being detected. I will investigate the Symantec report I received from our Exchange server and see if I can work out a timeline.

Re: [Clamav-users] Signature for W32.Mimail.A@mm available?

2003-08-04 Thread Tomasz Papszun
On Mon, 04 Aug 2003 at 7:46:36 -0700, John Birkhead wrote: > Thanks for the clarification! > > I'm a ClamAV newbie and I'm not sure how to map virus names across different > vendors. :-) Probably nobody is sure ;-) . As far as I can see, vendors sometimes invent completely different names for vi

RE: [Clamav-users] Signature for W32.Mimail.A@mm available?

2003-08-04 Thread Spicer, Kevin
John Birkhead wrote: > Hi, > Looks like the above worm is making it's way around and we have > received a few copies already. Any idea when the virus db will be > updated to detect this? I'm finding that it is already being detected as Trojan.Dropper.C BMRB International http://www.bmrb.

Re: [Clamav-users] Signature for W32.Mimail.A@mm available?

2003-08-04 Thread Tomasz Kojm
On Mon, 04 Aug 2003 08:39:30 -0600 Support ePaxsys/FRWS <[EMAIL PROTECTED]> wrote: > I thought they updated late last week, our versions of the DB catch it as: > Report: message.zip contains Trojan.Dropper.C > > And we have caught about 30 since late last night using ClamAV. Is there > another v

Re: [Clamav-users] Signature for W32.Mimail.A@mm available?

2003-08-04 Thread Support ePaxsys/FRWS
Sorry if I mislead - but we are using the latest and greatest Clam AntiVirus 'system' version 0.60 with MailScanner and sendmail. I 'assume' that this is up-to-date and working fine. It is catching that virus just fine. JPP At 05:16 PM 8/4/03 +0200, you wrote: On Mon, 04 Aug 2003 08:39:30 -060

[Clamav-users] Set-up Help needed

2003-08-04 Thread W.D. McKinney
I have a mail server running qmail 1.03. I also use qmail-scanner and SA with clamav. I noticed that I have not seen any copies of warnings of virus packed e-mails. So a quick check od syslog has : Aug 4 09:25:34 webmail spamc[1810]: connection attempt to spamd aborted after 3 retries Aug 4 09:2

Re: [Clamav-users] Set-up Help needed

2003-08-04 Thread Hermes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 obviously, for some reason your spamd is not running, try to start it up in the foreground, and see if it gives you any error messages. PJ > I have a mail server running qmail 1.03. I also use qmail-scanner > and SA with clamav. I noticed that I have

[Clamav-users] Compiling on one machine to run on another...

2003-08-04 Thread Andy
Hi, Just downloaded v0.60, already running 0.24. I run ClamAV on a lower spec. machine which has no GCC on it, so I compile on another machine. I've done this in the past where I compile on one machine, copy over to the other and then do a make install without issue. However, can't get this to w

[Clamav-users] Compiling on one machine to run on another...

2003-08-04 Thread Andy
Hi, Just downloaded v0.60, already running 0.24. I run ClamAV on a lower spec. machine which has no GCC on it, so I compile on another machine. I've done this in the past where I compile on one machine, copy over to the other and then do a make install without issue. However, can't get this to w

Re: [Clamav-users] Compiling on one machine to run on another...

2003-08-04 Thread Ed Phillips
On Mon, 4 Aug 2003, Andy wrote: > Hi, > > Just downloaded v0.60, already running 0.24. I run ClamAV on a lower > spec. machine which has no GCC on it, so I compile on another machine. > I've done this in the past where I compile on one machine, copy over to > the other and then do a make install

Re: [Clamav-users] Compiling on one machine to run on another...

2003-08-04 Thread Tomasz Kojm
On Mon, 04 Aug 2003 19:40:13 +0100 Andy <[EMAIL PROTECTED]> wrote: > Hi, > > Just downloaded v0.60, already running 0.24. I run ClamAV on a lower Please do not use 0.24. > spec. machine which has no GCC on it, so I compile on another machine. I wonder how it is possible to run 0.24 with an ol

Re: [Clamav-users] Compiling on one machine to run on another...

2003-08-04 Thread Andy
OK, so it doesn't run that fast on the machine, but it's only checking incoming mail so it has as long as it takes... There is no problem with the ./configure on the build machine. The build runs fine on the i686 machine, the problem is trying to do a 'make install' on the i586 machine :- [EM

Re: [Clamav-users] Compiling on one machine to run on another...

2003-08-04 Thread Tomasz Kojm
On Mon, 04 Aug 2003 22:19:26 +0100 Andy <[EMAIL PROTECTED]> wrote: > OK, so it doesn't run that fast on the machine, but it's only checking > incoming mail so it has as long as it takes... > > There is no problem with the ./configure on the build machine. The > build runs fine on the i686 mach

[Clamav-users] Re: clamav site has moved

2003-08-04 Thread Leandro GuimarĂ£es Faria Corsetti Dutra
Em Thu, 31 Jul 2003 15:46:08 +0200, Luca Gibelli escreveu: > You can still reach clamav website through http://www.clamav.net, > http://clamav.elektrapro.com and http://www.clamav.com. The Support link is broken... -- _ Leandro GuimarĂ£es Faria Corsetti Dutra +41 (21) 648 11 34 /