[Clamav-users] new threat: passworded zip files

2003-12-04 Thread jef moskot
I've heard of a new strategy for spreading viruses/worms. The victim receives a message with an attached passworded zip file. The password is included in the text of the message. Granted, we should hope that our users should be educated enough to not fall for this, but if we had educated users i

Re: [Clamav-users] new threat: passworded zip files

2003-12-04 Thread Antony Stone
On Thursday 04 December 2003 10:58 am, jef moskot wrote: > I've heard of a new strategy for spreading viruses/worms. The victim > receives a message with an attached passworded zip file. The password is > included in the text of the message. > > Granted, we should hope that our users should be e

Re: [Clamav-users] new threat: passworded zip files

2003-12-04 Thread Daniel Wiberg
On Thu, Dec 04, 2003 at 05:58:46AM -0500, jef moskot wrote: > I've heard of a new strategy for spreading viruses/worms. The victim > receives a message with an attached passworded zip file. The password is > included in the text of the message. > > Any ideas for how to handle this situation? Wo

Re: [Clamav-users] new threat: passworded zip files

2003-12-04 Thread Fisher
password-encrypted zip file, and when one is found, attempt decryption using each word in the body of the message it's attached to as the potential password. I would send the password printed in a .gif or .jpg file. Do not forget, e-mail scannig is only one part of the defense line against t

[Clamav-users] Re: new threat: passworded zip files

2003-12-04 Thread Joshua French
Anyone tested this against commercial products, that could provide another counter argument if they too have problems scanning under this condition. Even if McAfee and the likes can scan such a file, you then wonder who truly has control over privacy and what not. Christopher X. Candreva wrote

Re: [Clamav-users] new threat: passworded zip files

2003-12-04 Thread Tomasz Kojm
On Thu, 4 Dec 2003 05:58:46 -0500 (EST) jef moskot <[EMAIL PROTECTED]> wrote: > I've heard of a new strategy for spreading viruses/worms. The victim > receives a message with an attached passworded zip file. The password ClamAV can handle such attacks as well - if an archive seems to be clear i

Re: [Clamav-users] new threat: passworded zip files

2003-12-04 Thread Christopher X. Candreva
On Thu, 4 Dec 2003, jef moskot wrote: > I've heard of a new strategy for spreading viruses/worms. The victim > receives a message with an attached passworded zip file. The password is > included in the text of the message. Off-hand I don't see this being a large threat. You are counting on peop

[Clamav-users] ClamAV in the news: heise.de

2003-12-04 Thread Alex Pleiner
Hiya, ClamAV is in the news. Today heise.de published an article about web.de and there new use of ClamAV. That article (in German) can be found at: http://www.heise.de/newsticker/data/hob-04.12.03-000/ For all non-Germans of you I made a quick translation of the German text. Please, I do not sh

Re: [Clamav-users] ClamAV in the news: heise.de

2003-12-04 Thread Brian Bruns
How much you want to bet that they either #1 didn't bother to update the definitions #2 aren't telling people that they have some sort of connection or agreement with one of the big vendors? This like FUD to the extreme. I run ClamAV alone here and it has yet to let a single virus through. --

[Clamav-users] Clamav+MailScanner

2003-12-04 Thread Luciano
Hello I have a problem and I installed a MailScanner and the Clamav six time and the RH9, three. In the maillog, when MailScanner analyzes the message (a mail with eicar.com attached), it write Dec 4 17:25:13 mailx postfix/smtpd[5447]: connect from mailx.tecnoware.inf.br[192.168.10.199] Dec 4

[Clamav-users] clamdscan error

2003-12-04 Thread McKeever Chris
# clamdscan --version clamdscan / ClamAV version 0.65 ]# clamdscan connect(): No such file or directory ERROR: Can't connect to clamd. --- SCAN SUMMARY --- Infected files: 0 Time: 0.001 sec (0 m 0 s) any ideas? clamav.conf file? or permissions issues? -

Re: [Clamav-users] Clamav+MailScanner

2003-12-04 Thread Antony Stone
On Thursday 04 December 2003 7:29 pm, Luciano wrote: > Hello > > I have a problem and I installed a MailScanner and the Clamav six time and > the RH9, three. > > In the maillog, when MailScanner analyzes the message (a mail with > eicar.com attached), it write > > ***Dec 4 17:25:18 mailx MailScan

Re: [Clamav-users] missing viruses

2003-12-04 Thread Jason Haar
On Thu, 2003-12-04 at 15:55, McKeever Chris wrote: > thanks for your reply. Not sure I follow. wouldnt finding it signla a virus and > then the process that called clamd (in this case > qmialscanner) take the necessary actions? I think the original poster has been mis-quoted. I read it as: Vi

Re: [Clamav-users] ClamAV in the news: heise.de

2003-12-04 Thread Christoph Cordes
Hello Brian, Thursday, December 4, 2003, 8:31:11 PM, you wrote: BB> How much you want to bet that they either #1 didn't bother to update the BB> definitions #2 aren't telling people that they have some sort of connection BB> or agreement with one of the big vendors? This like FUD to the extreme.

Re: [Clamav-users] new threat: passworded zip files

2003-12-04 Thread Jonas Bardino
* Christopher X. Candreva <[EMAIL PROTECTED]> [Dec 04. 2003 15:50]: > On Thu, 4 Dec 2003, jef moskot wrote: > > > I've heard of a new strategy for spreading viruses/worms. The victim > > receives a message with an attached passworded zip file. The password is > > included in the text of the mess

Re: [Clamav-users] ClamAV in the news: heise.de

2003-12-04 Thread Thomas Lamy
Alex Pleiner wrote: Hiya, ClamAV is in the news. Today heise.de published an article about web.de and there new use of ClamAV. That article (in German) can be found at: http://www.heise.de/newsticker/data/hob-04.12.03-000/ For all non-Germans of you I made a quick translation of the German text.

Re: [Clamav-users] Clamav+MailScanner

2003-12-04 Thread Thomas Lamy
Antony Stone wrote: On Thursday 04 December 2003 7:29 pm, Luciano wrote: Hello I have a problem and I installed a MailScanner and the Clamav six time and the RH9, three. In the maillog, when MailScanner analyzes the message (a mail with eicar.com attached), it write ***Dec 4 17:25:18 mailx Mai

Re: [Clamav-users] ClamAV in the news: heise.de

2003-12-04 Thread Johannes Erdfelt
On Thu, Dec 04, 2003, Christoph Cordes <[EMAIL PROTECTED]> wrote: > Thursday, December 4, 2003, 8:31:11 PM, you wrote: > > BB> How much you want to bet that they either #1 didn't bother to update the > BB> definitions #2 aren't telling people that they have some sort of connection > BB> or agreeme

Re: [Clamav-users] ClamAV in the news: heise.de

2003-12-04 Thread Everton da Silva Marques
On Thu, Dec 04, 2003 at 09:16:35PM +0100, Christoph Cordes wrote: > > Oh - and of course there are viruses that can?t be recognized by clam > - tons of them, This statement suggests supporting statistics of real world viruses passing throught clam, versus other av packages...? -

Re: [Clamav-users] clamdscan error

2003-12-04 Thread Thomas Lamy
McKeever Chris wrote: # clamdscan --version clamdscan / ClamAV version 0.65 ]# clamdscan connect(): No such file or directory ERROR: Can't connect to clamd. --- SCAN SUMMARY --- Infected files: 0 Time: 0.001 sec (0 m 0 s) any ideas? clamav.conf file? or permissions issues? I sugge

Re: [Clamav-users] ClamAV in the news: heise.de

2003-12-04 Thread Thomas Lamy
Johannes Erdfelt wrote: On Thu, Dec 04, 2003, Christoph Cordes <[EMAIL PROTECTED]> wrote: Thursday, December 4, 2003, 8:31:11 PM, you wrote: BB> How much you want to bet that they either #1 didn't bother to update the BB> definitions #2 aren't telling people that they have some sort of connectio

Re: [Clamav-users] ClamAV in the news: heise.de

2003-12-04 Thread Johannes Erdfelt
On Thu, Dec 04, 2003, Thomas Lamy <[EMAIL PROTECTED]> wrote: > Johannes Erdfelt wrote: > > I'd argue that many of those viruses are insignificant. There are very > > clear parallels between these viruses and say smallpox. No one cares > > about it anymore because it's all but extinct. > > > > Who

Re: [Clamav-users] clamdscan error

2003-12-04 Thread McKeever Chris
On Thu, 04 Dec 2003 22:13 , Thomas Lamy <[EMAIL PROTECTED]> sent: >McKeever Chris wrote: > >> # clamdscan --version >> clamdscan / ClamAV version 0.65 >> >> >> ]# clamdscan >> connect(): No such file or directory >> ERROR: Can't connect to clamd. >> >> --- SCAN SUMMARY --- >>

Re: [Clamav-users] compile error during make

2003-12-04 Thread Internet Helpdesk
>From CVS today (devel-20031204) When compiling clam with --enable-milter I get this error: gcc -g -O2 -o clamav-milter clamav-milter.o ../clamd/cfgfile.o ../clamd/others.o ../clamscan/getopt.o -L/home/userx/clamav-devel/libclamav -L/usr/lib/libmil ter -lmilter -lpthread ../clamd/cfgfile.o:

Re: [Clamav-users] compile error during make

2003-12-04 Thread Thomas Lamy
Internet Helpdesk wrote: From CVS today (devel-20031204) When compiling clam with --enable-milter I get this error: gcc -g -O2 -o clamav-milter clamav-milter.o ../clamd/cfgfile.o ../clamd/others.o ../clamscan/getopt.o -L/home/userx/clamav-devel/libclamav -L/usr/lib/libmil ter -lmilter

Re: [Clamav-users] compile error during make

2003-12-04 Thread Internet Helpdesk
There is no LIBS variable in the Makefile Did you mean CLAMD_LIBS or LIBCLAMAV_LIBS? -Troy > From CVS today (devel-20031204) > > When compiling clam with --enable-milter I get this error: > > /home/userx/clamav-devel/clamd/cfgfile.c:108: undefined reference to > `cli_str

Re: [Clamav-users] compile error during make

2003-12-04 Thread Thomas Lamy
Internet Helpdesk wrote: There is no LIBS variable in the Makefile Did you mean CLAMD_LIBS or LIBCLAMAV_LIBS? -Troy From CVS today (devel-20031204) When compiling clam with --enable-milter I get this error: /home/userx/clamav-devel/clamd/cfgfile.c:108: undefined reference to `cli_strtok

Re: [Clamav-users] compile error during make

2003-12-04 Thread Internet Helpdesk
o LIBS variable in the Makefile Did you mean CLAMD_LIBS or LIBCLAMAV_LIBS? -Troy > From CVS today (devel-20031204) > > When compiling clam with --enable-milter I get this error: > > /home/userx/clamav-devel/clamd/cfgfile.c:108: undefined reference to > `cli_strtok' &