Re: [Clamav-users] name that worm: agobot,gaobot,polybot

On Wed, 2004-05-19 at 12:54, Betsy Schwartz wrote: > Some PC's on our network have been flagged as having > "agobot,gaobot,polybot" (or a sasser variant), by the perimiter security > system. I have looked at Kevin's excellent database at > http://www.rainingfrogs.co.uk and don't see any matches

[Clamav-users] public key

Hi Where can I find public gpg-key for clamav sources? -- Korchmenuk Nickolay 20 May 2004 11:17:06 --- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g

Re: [Clamav-users] freshclam not restarting clamd

On Wed, 19 May 2004 20:52:38 -0400 Stephen Gran <[EMAIL PROTECTED]> wrote: > I thought I had asked upstream to take the freshclam.conf that ships > with the debs, but I can't find it in my mail boxes now. If any of > the developers happen to be paying attention, would you be interested > in a fre

Re: [Clamav-users] public key

On Thu, 20 May 2004 11:17:59 +0300 Korchmenuk Nickolay <[EMAIL PROTECTED]> wrote: > Hi > > Where can I find public gpg-key for clamav sources? http://www.ClamAV.net/gpg/tkojm.gpg -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http://www.ClamAV.net/gpg/tkojm.

[Clamav-users] milter question. -a FROM

Hi man clamav-milter gives --from=EMAIL option, but when I try to start milter it says "unknown option". What's wrong? -- Korchmenuk Nickolay 20 May 2004 12:51:08 --- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest

[Clamav-users] Why "Dead" ?

>Subject: [Clamav-announce] announcing ClamAV 0.71 >Dead ClamAV users, > >ClamAV 0.71 is ready for download. This release fixes all bugs found in >0.70 and introduces a few new features - the noteworthy changes include: Why dead ? ;-\ We are alive :-) -- Alex V. Kovirshin --

RE: [Clamav-users] Starting cland in openbsd 3.4

Title: Message     hello,   Do you use the package from www.fatbsd.com/openbsd ?? Do you have configured clamav.conf ? first, to run clamd maualy: #/usr/local/sbin/clamd to run clamd at boot time, add this to your /etc/rc.local   if [ -x /usr/local/sbin/clamd ]; then

[Clamav-users] clamav-milter, kill pid not working

Hello. I installed clamav 0.71. I start milter: /usr/sbin/clamav-milter --quiet \ --pidfile=/var/run/clamav/clamav-milter.pid \ inet:[EMAIL PROTECTED] I got in logs: May 20 18:54:36 spamd clamav-milter[8168]: clamd / ClamAV version 0.71, clamav-milter version 0.71 S

Re: [Clamav-users] clamav-milter, kill pid not working

On Thu, May 20, 2004 at 06:57:46PM +0400, Alex V. Kovirshin wrote: > Hello. > I installed clamav 0.71. > I start milter: > /usr/sbin/clamav-milter --quiet \ > --pidfile=/var/run/clamav/clamav-milter.pid \ > inet:[EMAIL PROTECTED] > I got in logs: > May 20 18:54:36 spamd clam

[Clamav-users] Question about performance with quarantine-dir

Hello. clamav-milter says: fprintf(stderr, "When using Localsocket in %s\nyou may improve performance if you use the --quarantine_dir option\n", cfgfile); Ok, it's good, but i don't need quarantine files at all. Well, i could make it this way: [snip] --- clamav-milter.c.orig2004-0

[Clamav-users] Question regarding virus detection

Hello, For the first time since installing clamav on our mail server over 6 months ago, we have had a virus get through. It was picked up on the users desktop by Symantec corporate AV as Netsky.P. I did some research and this is what i have found: First of all, i do not have the message in orig

Re: [Clamav-users] milter question. -a FROM

On Thursday 20 May 2004 10:52 am, Korchmenuk Nickolay wrote: > Hi > > man clamav-milter gives --from=EMAIL option, but when I try to start milter > it says "unknown option". What's wrong? Yes, I do know about this. The fix is trivial and I hope to upload to CVS ASAP. -Nigel -- Nigel Horne. Arra

Re: [Clamav-users] clamav-0.71 released

Damian Menscher wrote: Just getting the word out, since the lack of an announcement in here means most of us never find out about it. Tried compiling on Solaris 8 with gcc-3.3.3. Haven't had problems with compiles recently, but this one blows up: gcc -g -O2 -o clamscan output.o getopt.o memory.o cf

RE: [Clamav-users] Question regarding virus detection

> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Jim Maul > Sent: Thursday, May 20, 2004 12:20 PM > To: ClamAV Mailing List > Subject: [Clamav-users] Question regarding virus detection > > > Hello, > > For the first time since installing clamav on our m

Re: [Clamav-users] Question regarding virus detection

Jim Maul wrote: There is something that is causing clamav to not be able to detect this virus after the message has been bounced and now forwarded. Damaged bounces are not dangerous. Why bother making signatures for them when you don't make money showing how many viruses you detect? -- /Peter Bon

Re: [Clamav-users] Question regarding virus detection

On Thu, 2004-05-20 at 19:21, Peter Bonivart wrote: > Jim Maul wrote: > > There is something that is causing clamav to not be able to detect this > > virus after the message has been bounced and now forwarded. > > Damaged bounces are not dangerous. Why bother making signatures for them > when you

RE: [Clamav-users] Question regarding virus detection

> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Peter > Bonivart > Sent: Thursday, May 20, 2004 2:22 PM > To: [EMAIL PROTECTED] > Subject: Re: [Clamav-users] Question regarding virus detection > > > Jim Maul wrote: > > There is something that is causin

Re: [Clamav-users] Question regarding virus detection

On Thursday 20 May 2004 7:21 pm, Peter Bonivart wrote: > Jim Maul wrote: > > There is something that is causing clamav to not be able to detect this > > virus after the message has been bounced and now forwarded. > > Damaged bounces are not dangerous. Why bother making signatures for them > when y

Re: [Clamav-users] Question regarding virus detection

On Thursday 20 May 2004 7:50 pm, Jim Maul wrote: > > > There is something that is causing clamav to not be able to detect this > > > virus after the message has been bounced and now forwarded. > > > > Damaged bounces are not dangerous. Why bother making signatures for them > > when you don't make

RE: [Clamav-users] Question regarding virus detection

> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Antony > Stone > Sent: Thursday, May 20, 2004 3:23 PM > To: [EMAIL PROTECTED] > Subject: Re: [Clamav-users] Question regarding virus detection > > > On Thursday 20 May 2004 7:21 pm, Peter Bonivart wrote:

Re: [Clamav-users] clamav-0.71 released

clamav-users -- Amos wrote: gcc -g -O2 -o clamscan output.o getopt.o memory.o cfgparser.o clamscan.o options.o others.o manager.o treewalk.o -L/usr/local/lib -L/usr/soft/that/clamav-0.71/src/default/sparc_sun_solaris2.8/libclamav /usr/local/lib/libclamav.so -lz -lbz2 /usr/local/lib/libgmp.so -l

Re: [Clamav-users] clamav-0.71 released

clamav-users -- Amos wrote: Tried compiling on Solaris 8 with gcc-3.3.3. Haven't had problems with compiles recently, but this one blows up: gcc -g -O2 -o clamscan output.o getopt.o memory.o cfgparser.o clamscan.o options.o others.o manager.o treewalk.o -L/usr/local/lib -L/usr/soft/that/clamav-0

[Clamav-users] Best way to scan e-mails without milter?

I am running a linux mail server without the opportunity to install milter. I have noticed a few ways to run ClamAV without, like using Trashscan. This is however intended to be ran as single user and seems not to be a good idea since we do have some medium mail volumes and multiple users to take c

Re: [Clamav-users] Question regarding virus detection

On Thursday 20 May 2004 9:13 pm, Jim Maul wrote: > Exactly, and after some more playing around, i found that i dont even have > to remove ALL of those lines. I can leave them all in except the first > line which was "-Original Message-" > > If i remove that line, clamscan finds the virus

RE: [Clamav-users] Best way to scan e-mails without milter?

Kenneth Andresen wrote: > I am running a linux mail server without the opportunity to install > milter. I have noticed a few ways to run ClamAV without, like using > Trashscan. This is however intended to be ran as single user and seems > not to be a good idea since we do

[Clamav-users] Segfault but not dying?

I upgraded to 0.71 today and since I noticed a lot of changes on the mail parsing I re-enabled the "ScanMail" option (I use Exim + Exiscan, which demimes the messages for me so ScanMail is not a required option but I know is nice to have). It's run great for 4 hours and I just got this in the logs

RE: [Clamav-users] exiscan and clamav

-Original Message- Sent: Thursday, May 20, 2004 1:51 AM > The OP's problem is likely that he is asking clamd to listen on both a > Unix sockety and a TCPSocket, and it won't do that. Pick one, and start > clamd, and see if it runs. If not report back any useful log info. I removed Mail

[Clamav-users] OpenBSD port for clamav 0.71 released today

Hello to all of you, I have just released the OpenBSD 3.4/3.5 port for clamav 0.71. It is available at http://www.fatbsd.com/openbsd/clamav/ Old address (http://www.fatbsd.com/openbsd/) still works (but until when ? :-p). Many signifiant modifications have been made, Be careful when you update.

Re: [Clamav-users] ClamAV not scanning for viruses... Help please

Brian wrote: Hi all. Hoping someone can point me in the right direction with this issue. I have setup and configured (correctly I thought) ClamAV using cgpav with CommuniGate Pro on RedHat Enterprise Linux. When sending test emails containing the eicar.com virus, the messages aren't being scanned

[Clamav-users] Upgrade of Clamav breaks debian/exim/clamav

I poked around the archives but didn't find anything that looked like my problem... I'm running exim4 on a debian box. Installed spamassassin and clamav a couple of months ago, using the Tim Jackson howto. Worked pretty much as advertised. Freshclam started telling me I needed to upgrade. D