[Clamav-users] Re: clamav-devel 20040213 for windows

> I tried my build on non-cygwin Win2k's, and they have MD5 verification > error too. > I still can't figure out why Ignasi Pratt's build has handle_exceptions > error though. Efectively I have no CYGWIN installed. I have not had time yet. All machines I tested had no CYGWIN installed. All crushed

Re: [Clamav-users] Error Message

On Monday 16 Feb 2004 4:37 am, Doug Hardie wrote: > Feb 15 19:14:18 <1.4> zoon clamav-milter: ClamAv: private data not NULL > What does the message mean and is > there a configuration parameter I need to alter to avoid it? This sounds like an error thrown by sendmail even though sendmail makes i

[Clamav-users] clamav-devel 20040216 for windows

aily.cvd [*] 10 [main] freshclam 1856 handle_exceptions: Exception: STATUS_ILLEGAL_INSTR UCTION 7543 [main] freshclam 1856 open_stackdumpfile: Dumping stack trace to freshcl am.exe.stackdump C:\clamav-devel-latest\bin>freshclam -V freshclam / ClamAV version devel-20040216 The same error i

Re: [Clamav-users] Re: clamav-devel 20040213 for windows

Ignasi Prat wrote: I tried my build on non-cygwin Win2k's, and they have MD5 verification error too. Efectively I have *no CYGWIN installed.* I have not had time yet. All machines I tested had no CYGWIN installed. All crushed with MD5. Just as I thought. ANyway, the developers seems to hav

Re: [Clamav-users] Clamscan -m segfault , possibly a big problem

On Sun, 15 Feb 2004 at 22:34:09 -0700, Starbane wrote: [...] > --- SCAN SUMMARY --- > Known viruses: 41374 ^ You've got some superfluous database files. There are only 20718 signatures currently. Maybe you've got old format database files left. You should remov

Re: [Clamav-users] SECURITY WARNING: NO SUPPORT FOR DIGITAL SIGNATURES

On Monday 16 February 2004 1:43 am, Muhamad Soleh Fajari wrote: > Peter Bonivart wrote: > > Mário Luis Ghoneim wrote: > >> What does it means? > > > > It means it can't check the digital signatures. It downloads the > > updates anyway but you can't be sure they have not been compromised. > > > >>

Re: [Clamav-users] clamav-devel 20040216 for windows

uffer size: 131072 bytes Time: 0.592 sec (0 m 0 s) C:\clamav-devel-latest>bin\clamscan -V clamscan / ClamAV version devel-20040216 This is on W2K, Sp4, no Cygwin. Again, have you tried it in other machines? Regards, Fajar A. Nugraha --- SF

Re: [Clamav-users] Segmentation fault clamav & clamav-milter

On Sun, 2004-02-15 at 21:47, Patrik wrote: > Running clamav and clamav-milter on linux: > ClamAV version devel-20040210, clamav-milter version 0.66m > We're having lots of mails out and in from server everyday but we're > not really able to trust clamd because it quits randomly. > clamd.log says: >

Re: [Clamav-users] Error Message

On Mon, 16 Feb 2004, Nigel Horne wrote: ; On Monday 16 Feb 2004 4:37 am, Doug Hardie wrote: ; ; > Feb 15 19:14:18 <1.4> zoon clamav-milter: ClamAv: private data not NULL ; > What does the message mean and is ; > there a configuration parameter I need to alter to avoid it? ; ; This sounds like a

[Clamav-users] Re: Clamscan -m segfault , possibly a big problem

Tomasz Papszun wrote: On Sun, 15 Feb 2004 at 22:34:09 -0700, Starbane wrote: [...] --- SCAN SUMMARY --- Known viruses: 41374 ^ You've got some superfluous database files. There are only 20718 signatures currently. Maybe you've got old format database files left.

Re: [Clamav-users] Re: Clamscan -m segfault , possibly a big problem

On Mon, 16 Feb 2004 at 3:10:48 -0700, Starbane wrote: > Tomasz Papszun wrote: > >On Sun, 15 Feb 2004 at 22:34:09 -0700, Starbane wrote: > >>--- SCAN SUMMARY --- > >>Known viruses: 41374 > > ^ > >You've got some superfluous database files. > >There are only 20718

[Clamav-users] Re: clamav-devel 20040216 for windows

> Seems I replied your previous post too early :) > Using your daily CVS's since last week. :D > >C:\clamav-devel-latest\bin>freshclam -v > >[snip] > > > >STATUS_ILLEGAL_INSTR > >UCTION > > 7543 [main] freshclam 1856 open_stackdumpfile: Dumping stack trace to > >freshcl > >am.exe.stackdump > >[s

[Clamav-users] Freshclam checks.

Hi, I'm running freshcam in daemon mode and cheking for updates 2 times at day. I have seen in the log file that it is doing the check every 2 hours istead of 2 times at day. I launch the daemon this way: /internet/ClamAV/bin/freshclam -d --checks=2 --quiet -l /internet/ClamAV/log/freshclam.log

[Clamav-users] help required with out of memory error

Hi, I've had spam assassin running with sendmail perfectly well for ages now. I then thought I'd add in clamav using the the defaults (if it isn't bust, don't fix it). Environment being run in is: Solaris 8 (intel) Sendmail 8.12.9 Spam Assassin 2.61 clamav 0.66 gcc 3.2.2 I have tried gcc 2.95 al

Re: [Clamav-users] Freshclam checks.

On Mon, 16 Feb 2004 at 13:38:27 +0100, Carles Xavier Munyoz Baldó wrote: > Hi, > I'm running freshcam in daemon mode and cheking for updates 2 times at day. > I have seen in the log file that it is doing the check every 2 hours istead of > 2 times at day. > > I launch the daemon this way: > /inte

Re: [Clamav-users] Freshclam checks.

On Mon, 16 Feb 2004 13:38:27 +0100 Carles Xavier Munyoz Baldó <[EMAIL PROTECTED]> wrote: > Hi, > I'm running freshcam in daemon mode and cheking for updates 2 times at > day. I have seen in the log file that it is doing the check every 2 > hours istead of 2 times at day. > > I launch the daemon t

Re: [Clamav-users] Freshclam checks.

On Mon, 16 Feb 2004, Tomasz Papszun wrote: > On Mon, 16 Feb 2004 at 13:38:27 +0100, Carles Xavier Munyoz Baldó wrote: > > Hi, > > I'm running freshcam in daemon mode and cheking for updates 2 times at day. > > I have seen in the log file that it is doing the check every 2 hours istead of > > 2 ti

Re: [Clamav-users] clamav-devel-20040215 : automake build error on Fedora Core 1

On Mon, 16 Feb 2004 13:24:55 +0700 "Fajar A. Nugraha" <[EMAIL PROTECTED]> wrote: > automake-1.6 --gnu Makefile > aclocal.m4:4200: version mismatch. This is Automake 1.6.3, but > aclocal.m4 aclocal.m4:4200: was generated for Automake 1.6.1. You > should recreate aclocal.m4:4200: aclocal.m4 with

[Clamav-users] Upgrading to ClamAV 0.67 from 0.65

I installed 0.65 on a RH9 system using the source install (as opposed to the RPM) and I now want to upgrade to 0.67 using the same method. What is the proper way to do this? Is there and uninstall/upgrade method for doing this? Or, do I just download it, un-tar the 0.67 files then run: $ ./con

[Clamav-users] Implementation Questions

I have installed ClamAV friday and have it successfully tagging viruses e-mail with a header, but am wondering how people have actually stoped the message that has a virus attached.   It seems to me like the easiest way would be to just not devilver any mail that has a header saying it has a

Re: [Clamav-users] Implementation Questions

On Monday 16 February 2004 3:27 pm, Spam wrote: > I have installed ClamAV friday and have it successfully tagging viruses > e-mail with a header, but am wondering how people have actually stoped the > message that has a virus attached. > > It seems to me like the easiest way would be to just not d

Re: [Clamav-users] Upgrading to ClamAV 0.67 from 0.65

On Mon, 16 Feb 2004, Craig Daters wrote: > I installed 0.65 on a RH9 system using the source install (as opposed > to the RPM) and I now want to upgrade to 0.67 using the same method. > What is the proper way to do this? Is there and uninstall/upgrade > method for doing this? > > Or, do I just do

Re: [Clamav-users] Implementation Questions

MailScanner at http://www.mailscanner.info does this quite nicely! It is easy to install and get up and running. I have installed ClamAV friday and have it successfully tagging viruses e-mail with a header, but am wondering how people have actually stoped the message that has a virus attached.

[Clamav-users] Re: help required with out of memory error

HELP! Just in case it was down to the version of clamAV I was running, I just upgraded to the latest version (0.67-1) and I get the same errors: ./testSendmailIn [EMAIL PROTECTED] Connecting to localhost.nomadsoft.co.uk. via relay... 421 4.0.0 out of memory: Not enough space >>> QUIT [EMAIL PR

Re: [Clamav-users] Implementation Questions

On Monday 16 February 2004 10:27, Spam wrote: > I have installed ClamAV friday and have it successfully tagging viruses > e-mail with a header, but am wondering how people have actually stoped the > message that has a virus attached. > > It seems to me like the easiest way would be to just not devi

Re: [Clamav-users] Upgrading to ClamAV 0.67 from 0.65

* Craig Daters <[EMAIL PROTECTED]> [20040216 18:37]: wrote: > I installed 0.65 on a RH9 system using the source install (as opposed > to the RPM) and I now want to upgrade to 0.67 using the same method. > What is the proper way to do this? Is there and uninstall/upgrade > met

Re: [Clamav-users] Upgrading to ClamAV 0.67 from 0.65

Thanks Jesper, I'll check it out. Here's what I do personally which seems to work great; I'm using Slackware Linux, and I build ClamAV from source. But, I don't want to just do "make install" as that leaves me with the responsabillity to manually clean out old versions by hand etc. So what I do i

[Clamav-users] Database initialize error

After installing ClamAV on OS X 1.3.2 (client with XTools), I am getting the following error when I try to run the application: [chadwick:/usr/local/bin] root# /usr/local/sbin/clamd LibClamAV debug: Loading databases from /var/clamav_db ERROR: Database initialization error. There is an empty dire

Re: [Clamav-users] Upgrading to ClamAV 0.67 from 0.65

> $ ./configure --sysconfdir=/etc I do the same, but I am particular about the options I pass to configure. What kind of options are you particular about? Should I be particular about them too? -- -- Craig Daters ([EMAIL PROTECTED]) Systems Administrator West Press Printing 1663 West Grant Road

Re: [Clamav-users] Database initialize error

On Monday 16 February 2004 4:46 pm, Chadwick Wachs wrote: > After installing ClamAV on OS X 1.3.2 (client with XTools), I am > getting the following error when I try to run the application: > > [chadwick:/usr/local/bin] root# /usr/local/sbin/clamd > LibClamAV debug: Loading databases from /var/cla

Re: [Clamav-users] Implementation Questions

On Mon, 2004-02-16 at 10:27, Spam wrote: > I have installed ClamAV friday and have it successfully tagging > viruses e-mail with a header, but am wondering how people have > actually stoped the message that has a virus attached. You want to run ClamAV at SMTP time and stop the virus before your sy

Re: [Clamav-users] Database initialize error

On Mon, 16 Feb 2004 at 9:46:48 -0700, Chadwick Wachs wrote: > After installing ClamAV on OS X 1.3.2 (client with XTools), I am > getting the following error when I try to run the application: > > [chadwick:/usr/local/bin] root# /usr/local/sbin/clamd > LibClamAV debug: Loading databases from /var

Re: [Clamav-users] Error Message

On Feb 16, 2004, at 00:34, Nigel Horne wrote: On Monday 16 Feb 2004 4:37 am, Doug Hardie wrote: Feb 15 19:14:18 <1.4> zoon clamav-milter: ClamAv: private data not NULL What does the message mean and is there a configuration parameter I need to alter to avoid it? This sounds like an error thrown

Re: [Clamav-users] Error Message

On Feb 16, 2004, at 01:52, Andy Fiddaman wrote: On Mon, 16 Feb 2004, Nigel Horne wrote: ; On Monday 16 Feb 2004 4:37 am, Doug Hardie wrote: ; ; > Feb 15 19:14:18 <1.4> zoon clamav-milter: ClamAv: private data not NULL ; > What does the message mean and is ; > there a configuration parameter I

[Clamav-users] Problem scanning ZIP archives with clamdscan and not clamscan

I've encounted this problem: clamscan will scan zip files and detect a virus. clamdscan will not. clamdscan part.1.body.zip /tmp/part.1.body.zip: OK --- SCAN SUMMARY --- Infected files: 0 clamscan part.1.body.zip --- SCAN SUMMARY --- part.1.body.zip: Worm.Gibe.F F

RE: [Clamav-users] Implementation Questions

Antony Stone wrote: > I run MailScanner http://www.mailscanner.info as a wrapper to ClamAV > and SpamAssassin (it can also handle many other A-V engines, and does > further tests & checks of its own), and I find this a very good > solution to handling email. I recently m

[Clamav-users] W32.Welchia.Worm

Hi, Everyone!       I've just read about this worm at Symantec site         Could this be considered a "well-intended" virus?!?!       OK, it does some damage. like installing a small web server and overwriting html files for a screwed up page       But after all, it does install

Re: [Clamav-users] Implementation Questions

On Monday, February 16, 2004 10:27 AM [EST], Spam <[EMAIL PROTECTED]> wrote: > I have installed ClamAV friday and have it successfully tagging viruses > e-mail with a header, but am wondering how people have actually stoped the > message that has a virus attached. > > It seems to me like the easie

Re: [Clamav-users] Re: clamav-devel 20040213 for windows

On Monday, February 16, 2004 4:15 AM [EST], Fajar A. Nugraha <[EMAIL PROTECTED]> wrote: > Just as I thought. ANyway, the developers seems to have fixed this by > adding O_BINARY (again) for Cygwin build only. > As usual, you can get my precompiled daily build on www.clamav.or.id. > Tested it earl

Re: [Clamav-users] W32.Welchia.Worm

There are a couple worms out there now that attempt to connect to infected machines of the particular virus/trojan its programmed to look for and try to remove it.   Welchia was a worm that caused more traffic than the offender or at least as much traffic making it as bad on internet traffic

[Clamav-users] feature request in virusdb ml

Hi, I would like to have information obout the severity/frequence of viruses add in the mailing list. It should be nice to know when a virus added is very dangerous and that an update is required urgently. At least add the information provided during submission about frequency of the virus. Th

[Clamav-users] freshclam update rate

I searched the archives, but didn't see an answer so pardon me if it's a FAQ. How often is it reasonable to call freshclam (either from cron or in daemon mode) to check for new virusdb updates? Obviously there's a tradeoff between detecting fast spreading viruses like MyDoom and overloading the db

[Clamav-users] Re: clamav-devel 20040213 for windows

> Date: Mon, 16 Feb 2004 16:15:58 +0700 > From: "Fajar A. Nugraha" <[EMAIL PROTECTED]> > Subject: Re: [Clamav-users] Re: clamav-devel 20040213 for windows > Just as I thought. ANyway, the developers seems to have fixed this by > adding O_BINARY (again) for Cygwin build only. > As usual, you can ge

Re: [Clamav-users] freshclam update rate

Bill Randle wrote the following on 02/16/2004 10:12 PM : I searched the archives, but didn't see an answer so pardon me if it's a FAQ. How often is it reasonable to call freshclam (either from cron or in daemon mode) to check for new virusdb updates? Obviously there's a tradeoff between detecting

Re: [Clamav-users] Re: clamav-devel 20040213 for windows

Brian Bruns wrote: BTW, the only reason why we are putting out our own build (not to compete with you obviously) Obviously :) My builds are mainly for testing purposes; thus it is based on daily CVS snapshot. is because we are trying to eventually release a 'quality assured' version of clamav

Re: [Clamav-users] Re: clamav-devel 20040213 for windows

Andrey Cherezov wrote: In this your clamav/Windows build there is fixed 'MD5 problem', but seems not fixed temporary file creation error in mbox.c: I probably should mention again that I don't modify the clamav source in any way; I simply build daily snapshots on many platforms. Three of them

Re: [Clamav-users] W32.Welchia.Worm

On Mon, 2004-02-16 at 14:49, Patricia Viana wrote: > OK, it does some damage. like installing a small web server > and overwriting html files for a screwed up page > > But after all, it does install some fixes and tries to remove the > worms MyDoom.A and MyDoom.B!! It's probably

[Clamav-users] TNEF?

Just curious... I have all these Outlook users who claim they need "TNEF" files to not be blocked anymore, does clamav directly un-encode them for scanning, or do I need to get a perl module or external executable? Thanks, Tommy PS: building this on Solaris is making me pull hair out.. more later

Re: [Clamav-users] freshclam update rate

On Mon, 2004-02-16 at 16:35, Lionel Bouton wrote: > Once an hour is fine, but if you use crontab please add a once randomly > chosen sleep between 0 and 3599 second before launching freshclam. > As lots of people using crontab put something like 0 * * * * ... The > database mirrors have huge peak

Re: [Clamav-users] Problems after freshclam

Hello, Have you fixed the Dazuko support yet? I have not seen any message in this list saying that it has been fixed. I just installed v0.66 today when I enabled ClamukoScanOnLine I get the following error message ERROR: Parse error at line 190: Unknown option ClamukoScanOnLine. ERROR: Can't ope

Re: [Clamav-users] freshclam update rate

On Mon, 2004-02-16 at 15:11, Luke Scharf wrote: > On Mon, 2004-02-16 at 16:35, Lionel Bouton wrote: > > Once an hour is fine, but if you use crontab please add a once randomly > > chosen sleep between 0 and 3599 second before launching freshclam. > > As lots of people using crontab put something l

Re: [Clamav-users] freshclam update rate

Luke Scharf said: > This does seem more polite than hitting it hard, right on the hour. > > -Luke > > -- > Luke Scharf, Systems Administrator > Virginia Tech Aerospace and Ocean Engineering If you use freshclam as a daemon, you don't have to worry about this as it randomizes it? -- Luke Comput

Re: [Clamav-users] feature request in virusdb ml

On Monday 16 February 2004 8:54 pm, Cedric Foll wrote: > Hi, > > I would like to have information obout the severity/frequence of viruses > add in the mailing list. > It should be nice to know when a virus added is very dangerous and that > an update is required urgently. At least add the informat

[Clamav-users] New user--- Frashclam error

Anyone have any ideas what I'm doing wrong?   C:\clamav-devel\bin>freshclamClamAV update process started at Mon Feb 16 20:00:41 2004Reading CVD header (main.cvd): OKmain.cvd is up to date (version: 19, sigs: 19987, f-level: 1, builder: ddm)Reading CVD header (daily.cvd): OKDownloading daily.

Re: [Clamav-users] W32.Welchia.Worm

On Mon, 2004-02-16 at 14:49, Patricia Viana wrote: > Could this be considered a "well-intended" virus?!?! I work for a school system with about 2000 computers on our network. Welchia Shut down our network for 4 days until we perfected a way to squash it. (Norton was no help at all BTW) Perso

[Clamav-users] Re: Re: making clamav on solaris {Scanned}

On Sun, 08 Feb 2004 15:34:01 +, Andy Fiddaman wrote: > Probably worth mentioning at this point that the 'whoami' utility isn't > standard in core solaris either, that needs the SUNWscpu (SunOS 4.x > compatibility utilities) - "who am i | awk '{print$1}'" does the same > though. > > Andy > >

Re: [Clamav-users] Re: Re: making clamav on solaris {Scanned}

As a caveat, sometimes the 'who am i' will return something more along the lines of: ! pts. such that the awk solution may or may not work... Might think to awk or cut the line, and then a sed to be sure to get just the username... Carl On Mon, 16 Feb 2004, Tommy McNeely wrote: >

[Clamav-users] Clamav false positive?

Firstly, I'd like to say thank you for such a useful utility. My question concerns scanning a Windows partition from a Linux partition on the same drive. Running Clamav 0.65-3 on Debian based Libranet, scanned a WinME partition and came up with the report that FunLove.4099 had been found in severa

Re: [Clamav-users] Upgrading to ClamAV 0.67 from 0.65

* Craig Daters <[EMAIL PROTECTED]> [20040216 21:11]: wrote: > > > $ ./configure --sysconfdir=/etc > > > >I do the same, but I am particular about the options I pass to > >configure. > > What kind of options are you particular about? Should I be particular &

[Clamav-users] Re: TNEF?

Tommy McNeely wrote: Just curious... I have all these Outlook users who claim they need "TNEF" files to not be blocked anymore, does clamav directly un-encode them for scanning, or do I need to get a perl module or external executable? Ask your Outlook users what they think the TNEF attachments do,

Re: [Clamav-users] Implementation Questions

Brian Bruns wrote: I use exim 4.30 with the exiscan/local_scan patches Hey, another thing we share in common! which integrate clamav directly into exim. Works like a charm Very true! It can reject virus right at SMTP time, AND with less CPU load than those perl-scanners too :) and stops a g

Re: [Clamav-users] New user--- Frashclam error

isp-lists [at] beachcomp.com wrote: Anyone have any ideas what I'm doing wrong? You're not doing anything wrong. It's a known problem with older ClamAV on Win32 machines without Cygwin. C:\*clamav-devel*\bin>freshclam I assume you're using Brian Burns' build from www.sosdg.org ? Newer CVS snaps

Re: [Clamav-users] freshclam update rate

Lucas Albers wrote the following on 02/17/2004 01:17 AM : Luke Scharf said: This does seem more polite than hitting it hard, right on the hour. -Luke -- Luke Scharf, Systems Administrator Virginia Tech Aerospace and Ocean Engineering If you use freshclam as a daemon, you don't have to w

[Clamav-users] clamdmail how with sendmail?

Hej there! Does someone know how to force to work clamdmail? I tries and somehow me this does not it go out. I nowhere can find something description! I would be grateful by means! I have already Clamav configured and installed and it acts ok. I installed also clamdmail but I do not know how to