[Clamav-users] Don't Understand

2004-04-05 Thread Rémi Goyard
Hi everybody, I'm trying to install Clamav for mail viruses scanning susing Postfix and Amavisd-new. But when i run clamd, ther's no errors, but if just after i want to verify the execution of the clamav daemon whith clamdscan this return : connect(): Connection refused ERROR: Can'

Re: [Clamav-users] Spam/Virus stats using mrtg

2004-04-05 Thread Korchmenuk Nickolay
On Sat, 3 Apr 2004 03:21:05 +0200 (CEST) Jakub Jankowski <[EMAIL PROTECTED]> wrote: > On 2004-04-02, Antony Stone wrote: > > >On Friday 02 April 2004 10:46 pm, Daniel J McDonald wrote: > > > >> grep FOUND clamd.log | cut -d \ -f 2 | sort | uniq -c > > > >grep FOUND clamd.log | cut -d \ -f 2 | s

Re: [Clamav-users] Don't Understand

2004-04-05 Thread Trog
On Mon, 2004-04-05 at 08:44, Rémi Goyard wrote: > > It seems to mean that clamd is not running, but i don't understand why. > Can anyone help me please ? It probably means you haven't configured the clamav.conf file correctly. Have a look in the clamd.log and /var/log/messages files. -tr

[Clamav-users] Re: Don't Understand

2004-04-05 Thread Rémi GOYARD
Thanks i had a look in my clam.log and i've got this line : ERROR: Socket file /usr/local/sbin/clamd exists. Either remove it, or configure a different one. if i remove this file /usr/local/sbin/clamd and i try to launch again clamd i've got this : clamd bash: /usr/local/

Re: [Clamav-users] Re: Don't Understand

2004-04-05 Thread Tomasz Papszun
Please don't top-post. On Mon, 05 Apr 2004 at 11:09:31 +0200, Rémi GOYARD wrote: > > Thanks i had a look in my clam.log and i've got this line : >ERROR: Socket file /usr/local/sbin/clamd exists. Either remove it, or > configure a different one. You can't set the program itself as a socke

[Clamav-users] ClamWin Antivirus 0.21 Released

2004-04-05 Thread Alex Cherney
ClamWin Antivirus provides Graphical User Interface to Clam Antivirus scanning engine. It allows to select and scan a folder or file, configure settings and update virus databases. It also includes a Windows Taskbar tray icon. ClamWin also features a context menu handler for Windows Explorer wh

Re: [Clamav-users] Re: Don't Understand

2004-04-05 Thread Scott Call
The program is not the socket. You must specify a socket like: LocalSocket /tmp/clamd in clamav.conf -s On Mon, 5 Apr 2004, Rémi_GOYARD wrote: > > Thanks i had a look in my clam.log and i've got this line : >ERROR: Socket file /usr/local/sbin/clamd exists. Either remove it, or > conf

Re: [Clamav-users] Re: Don't Understand

2004-04-05 Thread B. van Ouwerkerk
At 11:09 05-04-2004 +0200, you wrote: Thanks i had a look in my clam.log and i've got this line : ERROR: Socket file /usr/local/sbin/clamd exists. Either remove it, or configure a different one. if i remove this file /usr/local/sbin/clamd and i try to launch again clamd i've got this :

[Clamav-users] Trojan.Dropper.JS.Mimail.B ?

2004-04-05 Thread Keith Murphy
I'm suddenly seeing a buttload of these. When was this added? Can't find it in the daily updates. Most, but not all of these, are in folk's browser caches. McAfee and AVG don't detect them. --- This SF.Net email is sponsored by: IBM Linux

[Clamav-users] Some messages go through unscanned

2004-04-05 Thread Mimmus
Hi, I'm using Sendmail+ClamAv+ClamAV-milter (latest version in RPM format: 0.70rc1) on my primary mailserver (traffic: 5-6000 mail everyday). Behaviour is pretty good but sometime some viruses (of previously blocked kind) go through (then they are catched by Trend InterScan VirusWall antivirus on t

[Clamav-users] Some viruses go through

2004-04-05 Thread Mimmus
Hi, I'm using Sendmail+ClamAv+ClamAV-milter (latest version in RPM format: 0.70rc1) on my primary mailserver (traffic: 5-6000 mail everyday). Behaviour is pretty good but sometime some viruses (of previously blocked kind) go through (then they are catched by Trend InterScan VirusWall antivirus on t

Re: [Clamav-users] Trojan.Dropper.JS.Mimail.B ?

2004-04-05 Thread Tomasz Papszun
On Mon, 05 Apr 2004 at 8:54:02 -0500, Keith Murphy wrote: > I'm suddenly seeing a buttload of these. When was this added? Can't > find it in the daily updates. > > Most, but not all of these, are in folk's browser caches. McAfee and > AVG don't detect them. There: From: Denis De Messemacke

[Clamav-users] clamd exited on signal 6

2004-04-05 Thread Mipam
Hi, Im facing this problem: kernel: pid 567 (clamd), uid 1006: exited on signal 6 And clamd dies. There is nothing usefull in the clamd.log: +++ Started at Mon Apr 5 13:23:48 2004 Log file size limited to 2097152 bytes. Verbose logging activated. Running as user clamav (UID 1006, GID 1007) Rea

Re: [Clamav-users] Segmentation fault in clamav-0.70rc-1

2004-04-05 Thread jamie
On Thu, 1 Apr 2004, Todd Lyons wrote: > On Wed, 2004-03-31 at 21:14, jamie wrote: > > > > > > You probably saw some of my issues. I'm using RH 9.0 as well and have > > > problems with spamd SegFaulting. I personally think it's pthread > > > related, but have zero data to back it up. On my sy

Re: [Clamav-users] Some viruses go through

2004-04-05 Thread Antony Stone
On Monday 05 April 2004 5:08 pm, Jim Maul wrote: > > Hi, > > I'm using Sendmail+ClamAv+ClamAV-milter (latest version in RPM format: > > 0.70rc1) on my primary mailserver (traffic: 5-6000 mail everyday). > > Behaviour is pretty good but sometime some viruses (of previously blocked > > kind) go thro

Re: [Clamav-users] Some viruses go through

2004-04-05 Thread Tomasz Kojm
On Mon, 5 Apr 2004 16:13:53 +0200 "Mimmus" <[EMAIL PROTECTED]> wrote: > Hi, > I'm using Sendmail+ClamAv+ClamAV-milter (latest version in RPM format: > 0.70rc1) on my primary mailserver (traffic: 5-6000 mail everyday). > Behaviour is pretty good but sometime some viruses (of previously > blocked ki

Re: [Clamav-users] clamd exited on signal 6

2004-04-05 Thread Tomasz Kojm
On Mon, 5 Apr 2004 16:25:57 +0200 (MET DST) Mipam <[EMAIL PROTECTED]> wrote: > Hi, > > Im facing this problem: > > kernel: pid 567 (clamd), uid 1006: exited on signal 6 Probably some assertion failed and the process received SIGABRT. Try update to the latest CVS version. -- oo.

[Clamav-users] syslog facility

2004-04-05 Thread rosander
Can anyone comment if clamd support setting specific syslog facilities and if so how I would set it in the conf file? I paroused the documentation but nothing poped out at me except the switch to enable output to syslog. Thanks Ross Anderson -

Re: [Clamav-users] syslog facility

2004-04-05 Thread Doug Hardie
On Apr 5, 2004, at 15:56, rosander wrote: Can anyone comment if clamd support setting specific syslog facilities and if so how I would set it in the conf file? I paroused the documentation but nothing poped out at me except the switch to enable output to syslog. The facility is hard coded to LO

RE: [Clamav-users] Some viruses go through

2004-04-05 Thread Jim Maul
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Mimmus > Sent: Monday, April 05, 2004 10:14 AM > To: [EMAIL PROTECTED] > Subject: [Clamav-users] Some viruses go through > > > Hi, > I'm using Sendmail+ClamAv+ClamAV-milter (latest version in RPM format:

[Clamav-users] Virus Names

2004-04-05 Thread Erick Perez - Vision Media
Question: If Worm.SomeFool is Netsky, then why is not labeled as netsky? Also, is there a way to make an alias in the virus database so my users can see netsky instead of Worm.Somefool? Basically that's because the users keep complaning about the virus names that cannot be found anywhere else (lik