Re: [Clamav-users] Cron script has weird behavior

2004-03-13 Thread Tomasz Kojm
On Fri, 12 Mar 2004 20:40:13 -0500 Mailing List <[EMAIL PROTECTED]> wrote: > Nobody had an answer for me, so maybe you missed my post. So I'll > re-post... [...] > Keep in mind, that there are HUNDREDS of files before this, all in > /proc With the -i option, I should'nt get any output except inf

[Clamav-users] Errors with ScanOLE2

2004-03-13 Thread Odhiambo Washington
Running latest cvs code, with OLE2 support enabled in clamav.conf, I see these in clamd.log: Sat Mar 13 08:53:15 2004 -> /var/spool/exim/scan/1B222u-0003ra-Re/1B222u-0003ra-Re-1.doc: Unable to open file or directory. ERROR Sat Mar 13 08:54:08 2004 -> /var/spool/exim/scan/1B222u-0003ra-Re/1

[Clamav-users] Errors with ScanOLE2

2004-03-13 Thread Odhiambo Washington
Latest cvs code ... with OLE2 support enabled... Sat Mar 13 08:53:15 2004 -> /var/spool/exim/scan/1B222u-0003ra-Re/1B222u-0003ra-Re-1.doc: Unable to open file or directory. ERROR Sat Mar 13 08:54:08 2004 -> /var/spool/exim/scan/1B222u-0003ra-Re/1B222u-0003ra-Re-1.doc: Unable to open fi

Re: [Clamav-users] Errors with ScanOLE2

2004-03-13 Thread Fajar A. Nugraha
CAN SUMMARY --- Infected files: 0 Time: 0.922 sec (0 m 0 s) bash-2.03# clamd -V clamd / ClamAV version devel-20040313 and by sending mail, it's OK. No error occured. I use clean (non-virus infected) *.doc though. Is there something special about the .doc file

Re: [Clamav-users] Errors with ScanOLE2

2004-03-13 Thread Odhiambo Washington
* Fajar A. Nugraha <[EMAIL PROTECTED]> [20040313 15:01]: wrote: > Odhiambo Washington wrote: > > >Latest cvs code ... with OLE2 support enabled... > > > >Sat Mar 13 08:53:15 2004 -> > >/var/spool/exim/scan/1B222u-0003ra-Re/1B222u-0003ra-Re-1.doc: Unab

[Clamav-users] CPU usage with latest clamav

2004-03-13 Thread Turgut Kalfaoglu
Hi there. I use clamd on a Sun 5.8, recently upgraded to the latest-nightly-snapshot. However, I find that amavisd-new is waiting, and I notice that instead of using the usual 5% or so of the CPU, clamd is suddenly using 85% of the cpu, and apparently doing nothing. Any ideas how to prevent this,

[Clamav-users] freshclam error

2004-03-13 Thread Jason Lieurance
Hello, We're running clamav 0.65 on FreesBSD 4.7 and its been running well for over a year. When I set it up, I didn't run it as supervised. I wanted to run that way now so I followed the instructions in the docs on how to do it. It works but now when my cron job(sans the quotes): '/usr/local/bin

[Clamav-users] Clamav + Exim problem

2004-03-13 Thread Balzi Andrea
Hi All! we've problem with ClamAV with exim-4.30. We see into log of exim a time out of clamd. This problem block all inbount and outbounds mails. To check the virus into mail we use a unix-socket connection. To solve for a some days we need to stop and restart clamd daemon. We use the version 0.6

Re: [Clamav-users] Clamav + Exim problem

2004-03-13 Thread Tomasz Kojm
On Sat, 13 Mar 2004 19:55:47 +0100 "Balzi Andrea" <[EMAIL PROTECTED]> wrote: > Hi All! > > we've problem with ClamAV with exim-4.30. > We see into log of exim a time out of clamd. > This problem block all inbount and outbounds mails. > To check the virus into mail we use a unix-socket connection.

[Clamav-users] New varient of password compressed virus

2004-03-13 Thread Michael Torrie
In another escalation of the arms war, the latest variant of password-encrypted archive virus now distributes itself in an encrypted rar file, and the password is an attached bitmap to eliminate the possibility of using the password in the body of the message to open the archive in antivirus progra

Re: [Clamav-users] New varient of password compressed virus

2004-03-13 Thread Peter Bonivart
Michael Torrie wrote: In another escalation of the arms war, the latest variant of password-encrypted archive virus now distributes itself in an encrypted rar file, and the password is an attached bitmap to eliminate the possibility of using the password in the body of the message to open the archi

[Clamav-users] Re: Problem with clamav-daemon startup script : stop doesn't work !

2004-03-13 Thread Thomas CarriƩ
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thanks for your answer, it saved me a lot of time, I was starting to examine the source package to guess what was wrong with my config. Now I know that stop doesn't work so I stop clamd with kill and ps. This tip solved my socket file location probl

Re: [Clamav-users] New varient of password compressed virus

2004-03-13 Thread redragon
The problem, as with all old protocols, it is was built on trust. There are several implimentation changes to SMTP on the board but hard to say who the winner will be (if its any of those currently slated). Personally I like the idea of a total TLS mailing so that every server has to authenticate

Re: [Clamav-users] New varient of password compressed virus

2004-03-13 Thread clamav
On Sat, 13 Mar 2004, Peter Bonivart wrote: > > password-encrypted archive virus now distributes itself in an encrypted > > rar file, and the password is an attached bitmap to eliminate the > > possibility of using the password in the body of the message to open the > > archive in antivirus progra

[Clamav-users] new user to clamAV SpamAssassin

2004-03-13 Thread David le Blanc
Hi Everyone, I downloaded the ClamAV CVS source, enabled OLE2, built it all (first on redhat7.3 which needed strlcat et.al. to be defined) and finally on Redhat 9 (which compiled cleanly). So far, a complete success. I want this to co-exist with SpamAssassin (2.63) which I have installed as a M

Re: [Clamav-users] new user to clamAV SpamAssassin

2004-03-13 Thread clamav
> any 'exe' emailed to me from an unknown sender must be). Its probably > just a trojan :_) If you want to look at the suspicious message, its > in ftp://spam:[EMAIL PROTECTED]/unknown_mail.txt > It's the top of a upx'd binary. 423 bytes is far too small for a usable PE binary so it sounds li

[Clamav-users] clamd stops responding after log size exceeded

2004-03-13 Thread Ryan Thompson
Hi All, I'm using the following: clamd / ClamAV version devel-20040310 ClamAV version devel-20040310, clamav-milter version 0.67j FreeBSD 4.9-RELEASE-p3 though, I confirmed this problem was also present as far back (maybe farther) as 0.66 from a little over a month ago. What seems to be happeni

Re: [Clamav-users] Logfile

2004-03-13 Thread Ryan Thompson
Trog wrote to [EMAIL PROTECTED]: > On Fri, 2004-03-12 at 05:33, Odhiambo Washington wrote: > > I support the original poster. It would be a nice feature if it were > > done inside clamav itself, as he argued. > > Well, he's wrong :-) > > The UNIX philosophy is that each program should do all it ne