Hi all!
Using version devel-20031031 of clamav we observed that something seems to
be wrong with counter of known viruses after sending clamd a RELOAD command.
clamd log file says:
Mon Nov 3 09:02:58 2003 -> +++ Started at Mon Nov 3 09:02:58 2003
...
Mon Nov 3 09:02:58 2003 -> Reading database
Hi,
is it possible that trashscan tells you what virus
it found in the mail? (in the notification mail)
--Warning:
Message delivery wasn't performed.Reason: Our virus scanner detected
very suspicious code inthe attachme
canner
www.mailscanner.info
- End forwarded message -
Now the weird stuff: MailScanner has quarantined this file, so I scanned
it by hand:
bash-2.05# clamscan /var/spool/MailScanner/quarantine/20031103/hA3ABmS12759/photos.zip
/var/spool/MailScanner/quarantine/20031103/hA3ABmS12759/photos.zip
Found the W32/[EMAIL PROTECTED]
virus !!!
--
MailScanner
Email Virus Scanner
www.mailscanner.info
- End forwarded message -
Now the weird stuff: MailScanner has quarantined this file, so I scanned
it by hand:
bash-2.05# clamscan /var/spool/MailScanner/quarantine/20031103/hA3ABmS1
* Hellkeeper @ partynet.at :: Your Party Site! <[EMAIL PROTECTED]> [20031103 15:02]:
wrote:
> Hi,
>
> is it possible that trashscan tells you what virus it found in the mail? (in the
> notification mail)
Good question for [EMAIL PROTECTED]
ch
If this might help...
OS : FreeBSD 4.9-STABLE
clamd : ClamAV version devel-20031101
[EMAIL PROTECTED] `which clamd` clamd.core
GNU gdb 4.18 (FreeBSD)
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to cha
On Mon, 3 Nov 2003 12:51:28 +0100
David Jansen <[EMAIL PROTECTED]> wrote:
> I am running ClamAV and McAfee from MailScanner and lately I noticed
> that McAfee seems to intercept quite a number of viruses that ClamAV
> didn't detect. Freshclam has run, virus definitions seem to be
> up-to-date. Fur
On Mon, 3 Nov 2003 15:54:03 +0300
Odhiambo Washington <[EMAIL PROTECTED]> wrote:
> #0 0x28121bbc in kill () from /usr/lib/libc_r.so.4
> #1 0x2816fe6e in abort () from /usr/lib/libc_r.so.4
> #2 0x28149a37 in __assert () from /usr/lib/libc_r.so.4
> #3 0x2807ea38 in insert () from /usr/local/lib/
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello clamers,
I'm having some trouble getting my milter to work. When I tail my
messages file after starting Sendmail, I get the following error:
WARNING: Xclmilter: local socket name /var/run/clmilter.sock missing
If I enter:
service clamav-milter sta
Title: Message
Clam is made only to detect virures or it has the ability to clean
infected files?
regards
thiago.
* Tomasz Kojm <[EMAIL PROTECTED]> [20031103 18:45]: wrote:
> On Mon, 3 Nov 2003 15:54:03 +0300
> Odhiambo Washington <[EMAIL PROTECTED]> wrote:
>
> > #0 0x28121bbc in kill () from /usr/lib/libc_r.so.4
> > #1 0x2816fe6e in abort () from /usr/lib/libc_r.so.4
>
gt; Mimail.c virus:
>
> We detect all current Mimail variants. Something must be wrong with your
> clamav installation. You may submit the sample for analysis at out site.
No need:
bash-2.05# clamscan
/var/spool/MailScanner/quarantine/20031103/hA3ABmS12759/photos.zip
/var/spool/MailScanner/quar
On Monday 03 November 2003 4:16 pm, Thiago Lima wrote:
> Clam is made only to detect virures or it has the ability to clean
> infected files?
ClamAV detects and does not "clean".
Cleaning viruses from files is virtually pointless these days. It is very
seldom that there is anything usefu
On Monday 03 November 2003 2:20 pm, Tomasz Kojm wrote:
> On Mon, 3 Nov 2003 12:51:28 +0100
>
> David Jansen <[EMAIL PROTECTED]> wrote:
> > I am running ClamAV and McAfee from MailScanner and lately I noticed
> > that McAfee seems to intercept quite a number of viruses that ClamAV
> > didn't detect
On Mon, 3 Nov 2003 17:34:32 +0100
David Jansen <[EMAIL PROTECTED]> wrote:
> bash-2.05# clamscan
> /var/spool/MailScanner/quarantine/20031103/hA3ABmS12759/photos.zip
> /var/spool/MailScanner/quarantine/20031103/hA3ABmS12759/photos.zip:
> File size limit exceeded.
> /
On Mon, 3 Nov 2003 19:21:44 +0300
Odhiambo Washington <[EMAIL PROTECTED]> wrote:
> > Some assertion failed and program terminated. We can't help without
> > the problematic mail file :-((
>
> Cool :-((
> Must be one of "those" issues
Wash,
do you really need ScanMail with exiscan ? Well, ma
On Mon, 3 Nov 2003 16:54:56 +
Antony Stone <[EMAIL PROTECTED]> wrote:
> I've had a look at this sample and ClamAV is indeed detecting that the
> zip file contains Worm.Mimail.C, however clamscan also reports "File
> size limit exceeded", which confuses MailScanner and results in no
> virus bei
> #0 0x28121bbc in kill () from /usr/lib/libc_r.so.4
> #1 0x2816fe6e in abort () from /usr/lib/libc_r.so.4
> #2 0x28149a37 in __assert () from /usr/lib/libc_r.so.4
> #3 0x2807ea38 in insert () from /usr/local/lib/libclamav.so.1
That is useless without debugging symbol or the full message may h
On Mon, 3 Nov 2003, Tomasz Kojm wrote:
> On Mon, 3 Nov 2003 16:54:56 +
> Antony Stone <[EMAIL PROTECTED]> wrote:
>
> > I've had a look at this sample and ClamAV is indeed detecting that the
> > zip file contains Worm.Mimail.C, however clamscan also reports "File
> > size limit exceeded", which
I apologize for the delay in answering this; clamscan took over 2 weeks to
complete!! Dang it's slow.well I can't complain for a free program.
--- Gerardo Reynoso Cobos <[EMAIL PROTECTED]> wrote:
> Are you scanning the files locally on the same server or are you
> scanning files using sm
On Monday 03 November 2003 5:07 pm, Tomasz Kojm wrote:
> On Mon, 3 Nov 2003 16:54:56 +
>
> Antony Stone <[EMAIL PROTECTED]> wrote:
> > I've had a look at this sample and ClamAV is indeed detecting that the
> > zip file contains Worm.Mimail.C, however clamscan also reports "File
> > size limit
On Mon, 3 Nov 2003, Antony Stone wrote:
> On Monday 03 November 2003 5:07 pm, Tomasz Kojm wrote:
>
> > On Mon, 3 Nov 2003 16:54:56 +
> >
> > Antony Stone <[EMAIL PROTECTED]> wrote:
> > > I've had a look at this sample and ClamAV is indeed detecting that the
> > > zip file contains Worm.Mimail.
On Mon, 3 Nov 2003 10:56:33 -0800 (PST)
Chris de Vidal <[EMAIL PROTECTED]> wrote:
> I apologize for the delay in answering this; clamscan took over 2
> weeks to complete!! Dang it's slow.well I can't complain for
> a free program.
Are you using dazuko ?
Best regards,
Tomasz Kojm
--
--- Tomasz Kojm <[EMAIL PROTECTED]> wrote:
> On Mon, 3 Nov 2003 10:56:33 -0800 (PST)
> Chris de Vidal <[EMAIL PROTECTED]> wrote:
>
> > I apologize for the delay in answering this; clamscan took over 2
> > weeks to complete!! Dang it's slow.well I can't complain for
> > a free program.
>
> On Monday 03 November 2003 4:16 pm, Thiago Lima wrote:
>
> > Clam is made only to detect virures or it has the ability to clean
> > infected files?
>
> ClamAV detects and does not "clean".
>
> Cleaning viruses from files is virtually pointless these days. It is
very
> seldom that there is
--- Chris de Vidal <[EMAIL PROTECTED]> wrote:
> > > I apologize for the delay in answering this; clamscan took over 2
> > > weeks to complete!! Dang it's slow.well I can't complain for
> > > a free program.
> >
> > Are you using dazuko ?
>
> No, would that fix the ERROR: Can't open file?
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:clamav-users-
> [EMAIL PROTECTED] On Behalf Of Mark
> Sent: 3. november 2003 22:05
> To: [EMAIL PROTECTED]
> Subject: Re: [Clamav-users] Clean Viruses?
>
> If ClamAV will not be able to clean the system/file in the next
versions
> it's
>While Kaspersky is a wise choice you'll be doing many people a favour if
>you would submit samples to other av-products (including ClamAV).
Yes but it's not the way I like to go...
>> Just an idiot..sorry...
>Please keep the discussion on a civil level.
My fault, I'm sorry..
>> In my archive
Hello Mark,
M> Ok heremy 2 cents:
M> The sourcemashine is a LINUX which is infected and the target mashine is an
M> oBSD with compat_linux in the kernel.
M> So let's think about this situation..
yes, let´s start to think for a change
M> We will take the worst case: All copies of the file are i
On Monday 03 November 2003 10:42 pm, Mark wrote:
> Cleaning is one of the most needed functions I think.
Please can you explain why you think this?
I agree that ten years ago it was worthwhile removing the bootsector viruses
from floppies, or some of the .exe trojans which would add themselves
> Hello Mark,
>
> M> Ok heremy 2 cents:
>
> M> The sourcemashine is a LINUX which is infected and the target mashine
is an
> M> oBSD with compat_linux in the kernel.
> M> So let's think about this situation..
>
> yes, let´s start to think for a change
>
> M> We will take the worst case: All copies
On Mon, 3 Nov 2003 12:46:38 -0800 (PST)
Chris de Vidal <[EMAIL PROTECTED]> wrote:
> > Are you using dazuko ?
>
> No, would that fix the ERROR: Can't open file? Would that speed it
> up?
No, it will only make things slower.
Best regards,
Tomasz Kojm
--
oo. http://www.clama
On Mon, 03 Nov 2003 09:11:56 +0100
Dirk Kraemer <[EMAIL PROTECTED]> wrote:
> Hi all!
>
> Using version devel-20031031 of clamav we observed that something
> seems to be wrong with counter of known viruses after sending clamd a
> RELOAD command. clamd log file says:
Thank you - this is now fixed
On Mon, 3 Nov 2003 13:35:50 -0500 (EST)
Ed Phillips <[EMAIL PROTECTED]> wrote:
> clamscan detects the "broken on purpose" ZIP files and reports an
> error message (correctly), when you scan the ZIP file directly or when
> you scan the directory containing the broken ZIP file. clamd, however,
> ign
On Mon, 3 Nov 2003 17:34:32 +0100
David Jansen <[EMAIL PROTECTED]> wrote:
> No need:
> bash-2.05# clamscan
> /var/spool/MailScanner/quarantine/20031103/hA3ABmS12759/photos.zip
> /var/spool/MailScanner/quarantine/20031103/hA3ABmS12759/photos.zip:
> File size limit e
On Mon, 3 Nov 2003 22:05:02 +0100
"Mark" <[EMAIL PROTECTED]> wrote:
> The sourcemashine is a LINUX which is infected and the target mashine
> is an oBSD with compat_linux in the kernel.
> So let's think about this situation..
> We will take the worst case: All copies of the file are infected on
>
> On Monday 03 November 2003 10:42 pm, Mark wrote:
>
> > Cleaning is one of the most needed functions I think.
>
> Please can you explain why you think this?
>
> I agree that ten years ago it was worthwhile removing the bootsector
viruses
> from floppies, or some of the .exe trojans which would add
Hello Mark,
> Yes OK!
> But where is the sense in a police which told you "Hey someone robs your
> house" when they do nothing at all?
> And the only option is to shoot the robber?!
> I know it's hard but I know also it's possible.
> Not from today to tomorrow or from nov to dec. But maybe in 6 o
On Tuesday 04 November 2003 12:30 am, Mark wrote:
> My dad got an old mainboard (for AMD Athlon Thunderbird up to 1300c) which
> was infected with an bootsector virus.
A bootsector virus infects boot media (eg hard disks, floppy disks...), not
motherboards.
> And if you don't belive that Virii
On Tue, 4 Nov 2003, Tomasz Kojm wrote:
> On Mon, 3 Nov 2003 13:35:50 -0500 (EST)
> Ed Phillips <[EMAIL PROTECTED]> wrote:
>
> > clamscan detects the "broken on purpose" ZIP files and reports an
> > error message (correctly), when you scan the ZIP file directly or when
> > you scan the directory co
40 matches
Mail list logo
