[Clamav-users] Update causing segmentation fault.

2004-07-16 Thread David Beveridge
Today I installed clam ver 0.72 on my new fc2 box and was having trouble getting the service to run. Then I tried updating to 0.74._x86_64 then I tried 0.73._x86_64 then I though I'd try an i386 version to see what happens.   When I installed the i386 version I could get the daemon to run bu

Fw: [Clamav-users] Update causing segmentation fault.

2004-07-16 Thread David Beveridge
Earlier I wrote:- > Today I installed clam ver 0.72 on my new fc2 box and was having trouble > getting the service to run. [...] > LibClamAV debug: Not suported signature type detected at line 15. Skipping. > Even though this error appears on the i386 version, exactly the same as it does on the x8

[Clamav-users] atak worm?

2004-07-16 Thread Tim B
I've done a sigtool -l | grep -i "atak" to see if there are sigs for the massmailing atak worm as reported by SARC/Sophos/McAfee ect ect. And do not see it detected by ClamAV. So then I checked the Alias database at rainingfrogs.co.uk and again didn't see it being cross referenced to a clamav

[Clamav-users] Bagle Varient

2004-07-16 Thread Vernon A. Fort
I have email messages that are being detected as Worm.Bagle.Gen-zippwd but when I unzip, clamav detects the binary as Bagle.AF. I cannot submit a sample because its already detected. If someone wants a few sample email messages, let me know where to send them. Vernon

Re: [Clamav-users] Bagle Varient

2004-07-16 Thread Tomasz Kojm
On Fri, 16 Jul 2004 08:39:16 -0500 "Vernon A. Fort" <[EMAIL PROTECTED]> wrote: > I have email messages that are being detected as Worm.Bagle.Gen-zippwd > > but when I unzip, clamav detects the binary as Bagle.AF. I cannot > submit a sample because its already detected. > > If someone wants a fe

Re: [Clamav-users] Bagle Varient

2004-07-16 Thread Christopher X. Candreva
On Fri, 16 Jul 2004, Vernon A. Fort wrote: > I have email messages that are being detected as Worm.Bagle.Gen-zippwd but > when I unzip, clamav detects the binary as Bagle.AF. I cannot submit a > sample because its already detected. Bagle.AF seems to be relatively new variant -- I received one

Re: [Clamav-users] Bagle Varient

2004-07-16 Thread Steve Lenti
On Fri, 16 Jul 2004 08:39:16 -0500, Vernon A. Fort <[EMAIL PROTECTED]> wrote: > I have email messages that are being detected as Worm.Bagle.Gen-zippwd > but when I unzip, clamav detects the binary as Bagle.AF. I cannot > submit a sample because its already detected. > > If someone wants a few sam

[Clamav-users] [Fwd: Cron nice -n 19 run-parts /etc/cron.hourly]

2004-07-16 Thread A.R.S. KA9QLQ Alvin Koffman
I ran freshclam after getting this email from cron and it said I'm up to date. Strange. ERROR: Can't get information about database.clamav.net host. ERROR: Connection with database.clamav.net (IP: ???) failed. ERROR: Can't get information about database.clamav.net host. ERROR: Connection with dat

Re: [Clamav-users] [Fwd: Cron nice -n 19 run-parts /etc/cron.hourly]

2004-07-16 Thread [EMAIL PROTECTED]
A.R.S. KA9QLQ Alvin Koffman said: > > I ran freshclam after getting this email from cron and it said I'm up to > date. Strange. > > ERROR: Can't get information about database.clamav.net host. > ERROR: Connection with database.clamav.net (IP: ???) failed. > ERROR: Can't get information about databa

Re: [Clamav-users] [Fwd: Cron nice -n 19 run-parts /etc/cron.hourly]

2004-07-16 Thread Antony Stone
On Friday 16 July 2004 8:35 pm, A.R.S. KA9QLQ Alvin Koffman wrote: > I ran freshclam after getting this email from cron and it said I'm up to > date. Strange. > > ERROR: Can't get information about database.clamav.net host. > ERROR: Connection with database.clamav.net (IP: ???) failed. > ERROR: Ca

[Clamav-users] core dump in clamscan 0.72

2004-07-16 Thread Pat Masterson
I recently upgraded to 0.72 and when running clamscan I get this: [EMAIL PROTECTED] [210]: clamscan -r -l /tmp/clamscan.log /ftp2 /ftp2/dtra_aas/dtra_aas/NWETI/db_guide/db_dh_damage/db_dh_damage.zip: OK /ftp2/dtra_aas/dtra_aas/ttdactd/lal41.txt: OK /ftp2/dtra_aas/dtra_aas/ttdactd/WAI46.zip: OK /

Re: [Clamav-users] [Fwd: Cron nice -n 19 run-parts /etc/cron.hourly]

2004-07-16 Thread A.R.S. KA9QLQ Alvin Koffman
[EMAIL PROTECTED] wrote: A.R.S. KA9QLQ Alvin Koffman said: I ran freshclam after getting this email from cron and it said I'm up to date. Strange. ERROR: Can't get information about database.clamav.net host. ERROR: Connection with database.clamav.net (IP: ???) failed. ERROR: Can't get informati

Re: [Clamav-users] [Fwd: Cron nice -n 19 run-parts /etc/cron.hourly]

2004-07-16 Thread A.R.S. KA9QLQ Alvin Koffman
Antony Stone wrote: On Friday 16 July 2004 8:35 pm, A.R.S. KA9QLQ Alvin Koffman wrote: I ran freshclam after getting this email from cron and it said I'm up to date. Strange. ERROR: Can't get information about database.clamav.net host. ERROR: Connection with database.clamav.net (IP: ???) failed

Re: [Clamav-users] Bagle Varient

2004-07-16 Thread Vernon A. Fort
Steve Lenti wrote: On Fri, 16 Jul 2004 08:39:16 -0500, Vernon A. Fort <[EMAIL PROTECTED]> wrote: I have email messages that are being detected as Worm.Bagle.Gen-zippwd but when I unzip, clamav detects the binary as Bagle.AF. I cannot submit a sample because its already detected. If someone want

[Clamav-users] (no subject)

2004-07-16 Thread atalalas
Mensagem automatica Estarei de férias no período de 19 a 23 de julho. Em caso de urgëncia, favor contatar: Wesley ([EMAIL PROTECTED]) ou Valeria ([EMAIL PROTECTED]) --- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java

[Clamav-users] (no subject)

2004-07-16 Thread atalalas
Mensagem automatica Estarei de férias no período de 19 a 23 de julho. Em caso de urgëncia, favor contatar: Wesley ([EMAIL PROTECTED]) ou Valeria ([EMAIL PROTECTED]) --- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java

Re: [Clamav-users] (no subject)

2004-07-16 Thread Rick Macdougall
Hi, Can we get him unsunscribed please. Yah yah, I'm top posting :) Regards, Rick [EMAIL PROTECTED] wrote: Mensagem automatica Estarei de férias no período de 19 a 23 de julho. Em caso de urgëncia, favor contatar: Wesley ([EMAIL PROTECTED]) ou Valeria ([EMAIL PROTECTED])

[Clamav-users] (no subject)

2004-07-16 Thread atalalas
Mensagem automatica Estarei de férias no período de 19 a 23 de julho. Em caso de urgëncia, favor contatar: Wesley ([EMAIL PROTECTED]) ou Valeria ([EMAIL PROTECTED]) --- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java

[Clamav-users] (no subject)

2004-07-16 Thread atalalas
Mensagem automatica Estarei de férias no período de 19 a 23 de julho. Em caso de urgëncia, favor contatar: Wesley ([EMAIL PROTECTED]) ou Valeria ([EMAIL PROTECTED]) --- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java

[Clamav-users] (no subject)

2004-07-16 Thread atalalas
Mensagem automatica Estarei de férias no período de 19 a 23 de julho. Em caso de urgëncia, favor contatar: Wesley ([EMAIL PROTECTED]) ou Valeria ([EMAIL PROTECTED]) --- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java

[Clamav-users] (no subject)

2004-07-16 Thread atalalas
Mensagem automatica Estarei de férias no período de 19 a 23 de julho. Em caso de urgëncia, favor contatar: Wesley ([EMAIL PROTECTED]) ou Valeria ([EMAIL PROTECTED]) --- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java

[Clamav-users] (no subject)

2004-07-16 Thread atalalas
Mensagem automatica Estarei de férias no período de 19 a 23 de julho. Em caso de urgëncia, favor contatar: Wesley ([EMAIL PROTECTED]) ou Valeria ([EMAIL PROTECTED]) --- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java

Re: [Clamav-users] [Fwd: Cron nice -n 19 run-parts/etc/cron.hourly]

2004-07-16 Thread [EMAIL PROTECTED]
A.R.S. KA9QLQ Alvin Koffman said: > > > Antony Stone wrote: > >>On Friday 16 July 2004 8:35 pm, A.R.S. KA9QLQ Alvin Koffman wrote: >> >> >> >>>I ran freshclam after getting this email from cron and it said I'm up to >>>date. Strange. >>> >>>ERROR: Can't get information about database.clamav.net hos

[Clamav-users] (no subject)

2004-07-16 Thread atalalas
Mensagem automatica Estarei de férias no período de 19 a 23 de julho. Em caso de urgëncia, favor contatar: Wesley ([EMAIL PROTECTED]) ou Valeria ([EMAIL PROTECTED]) --- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java

Re: [Clamav-users] [Fwd: Cron nice -n 19 run-parts/etc/cron.hourly]

2004-07-16 Thread A.R.S. KA9QLQ Alvin Koffman
Not sure. How would I go about checking? Alvin nmap -sUT -p 53 The result from "host a database.clamav.net" is only 395 bytes. It fits within a UDP packet. This looks more like a temporary lookup failure. I think your right because I haven't gotten one since. Thanks Alvin