Re: [Clamav-users] [clamav-users]CVD extractio failure URGENT !!!

2004-07-20 Thread deborah malka
--- Trog <[EMAIL PROTECTED]> a écrit : > On Mon, 2004-07-19 at 15:20, deborah malka wrote: > > HEllo, > > > > I'm new to clamav. I have the versio 0.73. I'm on > > Debian 3.0 > > I setted up clamav the first time, and when I tun > > clamd, it worked well. > > I stopped it , and when I wanted to re

[Clamav-users] Unusual clamav file in var/mail/

2004-07-20 Thread Richard Saddington
Hi, I am running a FreeBSD server with spamassassin and clamav 0.73 installed, and using procmail to filter mail delivered to local users. Any mail tagged by spamassassin or detected by clamav is delivered to a a spam mailbox. My procmail recipe is pretty much the standard installations and looks

[Clamav-users] [clamav-users]stats about clamav

2004-07-20 Thread deborah malka
Hello, I'm running clamav, with dansguardian and squid on one machine, and with p3scan and spamassassin on a second.(so without any MTA) I want to generate statistics about clamav : how many requests or mails infected ? Time to process a request, ... If it is possible, it would be grate if it can

Re: [Clamav-users] [clamav-users]stats about clamav

2004-07-20 Thread Daniel J McDonald
On Tue, 2004-07-20 at 07:16, deborah malka wrote: > I want to generate statistics about clamav : how many > requests or mails infected ? I'm using amavis-stats, which dumps that information into a set of rrd's, and makes very pretty graphs. -- Daniel J McDonald <[EMAIL PROTECTED]> Austin Ener

Re: [Clamav-users] [clamav-users]stats about clamav

2004-07-20 Thread deborah malka
Does it work without MTA ? Becaus I don't have mail server such as postfix, sendmail, ... --- Daniel J McDonald <[EMAIL PROTECTED]> a écrit : > On Tue, 2004-07-20 at 07:16, deborah malka wrote: > > > > I want to generate statistics about clamav : how > many > > requests or mails infected ? > >

[Clamav-users] ClamAV + P3Scan problem

2004-07-20 Thread Willem Kossen
Hi, I'm probably missing something simple, but I've got this problem: I'm running p3scan (which is a pop3 virusscanning proxy) with ClamAV 0.74. 1. i know clamav works because with mailscanner it works 2. i know clamd works because interactively i can scan files using clamd and get results but wi

Re: [Clamav-users] ClamAV + P3Scan problem

2004-07-20 Thread Trog
On Tue, 2004-07-20 at 14:46, Willem Kossen wrote: > I added clamav to the mail group. still it doesn't work and i can't > understand why > Did you enable AllowSupplementaryGroups in clamav.conf and then restart clamd as root? -trog signature.asc Description: This is a digitally signed message

Re: [Clamav-users] Unusual clamav file in var/mail/

2004-07-20 Thread Steve Lenti
On Tue, 20 Jul 2004 12:11:28 +0100, Richard Saddington <[EMAIL PROTECTED]> wrote: > Hi, > > I am running a FreeBSD server with spamassassin and clamav 0.73 > installed, and using procmail to filter mail delivered to local users. > Any mail tagged by spamassassin or detected by clamav is delivered

Re: [Clamav-users] [clamav-users]stats about clamav

2004-07-20 Thread Nigel Horne
> I want to generate statistics about clamav : how many > requests or mails infected ? As at http://cgi.bandsman.co.uk/cgi-bin/virus/display.pl? You'll see a link there to the script that generated the stats. -Nigel -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. IC

[Clamav-users] Re: it is posible to edit the virus intercepted msg?

2004-07-20 Thread Matias Lopez Bergero
Steven Stern wrote: On Thu, 15 Jul 2004 17:16:13 -0300, Matias Lopez Bergero <[EMAIL PROTECTED]> wrote: It is possible to edit the "virus intercepted" message?. [...] Look at the "-t" option in man clamav-milter. It lets you substitute a template. Unfortunately, the only variable that you can ins

[Clamav-users] ClamAV version 0.74 doesn't detect some viruses

2004-07-20 Thread Matias Lopez Bergero
Hello I haved installed clamav 0.74 on my email server, and I am using it with clamav-milter. Some of my users callme today to tould me that he was reciving viruses on his email acount. I said_ no way. But it's true. This is the virus: Worm.Bagle.AF.2 I test it agains the online scaner. Should

[Clamav-users] RE: Not finding W32.Beagle virus

2004-07-20 Thread Alex S Moore
On Solaris 9, a customer is getting mail with the W32.Beagle and clamav is not catching the virus. Norton is catching the virus on the desktop and identifies the virus name [EMAIL PROTECTED] Among other things, clamav.conf has StreamSaveToDisk, ScanOLE2, ScanMail, ScanArchive enabled. How can

Re: [Clamav-users] [clamav-users]stats about clamav

2004-07-20 Thread Bit Fuzzy
Nigel Horne wrote: > I want to generate statistics about clamav : how many > requests or mails infected ? As at http://cgi.bandsman.co.uk/cgi-bin/virus/display.pl? You'll see a link there to the script that generated the stats. -Nigel The download link seems to have been removed --

Re: [Clamav-users] ClamAV version 0.74 doesn't detect some viruses

2004-07-20 Thread Niek
Matias Lopez Bergero wrote: Hello I haved installed clamav 0.74 on my email server, and I am using it with clamav-milter. Some of my users callme today to tould me that he was reciving viruses on his email acount. I said_ no way. But it's true. This is the virus: Worm.Bagle.AF.2 I test it again

Re: [Clamav-users] ClamAV version 0.74 doesn't detect some viruses

2004-07-20 Thread Nigel Horne
Can you send me a sample of the email please? zipped with password 'virus'. -Nigel On Tuesday 20 Jul 2004 16:01, Matias Lopez Bergero wrote: > Hello > I haved installed clamav 0.74 on my email server, and I am using it with > clamav-milter. > > Some of my users callme today to tould me that he

Re: [Clamav-users] [clamav-users]stats about clamav

2004-07-20 Thread Nigel Horne
On Tuesday 20 Jul 2004 17:23, Bit Fuzzy wrote: > The download link seems to have been removed What download link? There never has been a download link, so I don't know why you say it's been removed. If you're after the software use the e-mail address at the top. -Nigel -- Nigel Horne. Arrang

Re: [Clamav-users] [clamav-users]stats about clamav

2004-07-20 Thread Bit Fuzzy
Nigel Horne wrote: On Tuesday 20 Jul 2004 17:23, Bit Fuzzy wrote: The download link seems to have been removed What download link? There never has been a download link, so I don't know why you say it's been removed. If you're after the software use the e-mail address a

[Clamav-users] Mail::ClamAV build problems

2004-07-20 Thread Bowie Bailey
Fedora Core 2 Perl 5.8.3 ClamAV 0.74 Mail-ClamAV-0.11 I am having problems getting Mail::ClamAV past the test stage. Make runs with no errors, but as soon as I run 'make test', I get the errors shown below. Can anyone give me a hand with this? $ make test PERL_DL_NONLAZY=1 /usr/bin/perl "-MExtU

[Clamav-users] Worm.Bagle.AG (or something) sending empty zip files?

2004-07-20 Thread henry j. mason
greetings clamav.users; i use clamav 0.70-4 on debian 3.0 stable/testing, with amavisd-new-20030616. one of my customers has been complaining of recieving what they claim are Worm.Bagle.AG emails, but when they forward them to me, they contain nothing but an

Re: [Clamav-users] RE: Not finding W32.Beagle virus

2004-07-20 Thread Tomasz Papszun
On Tue, 20 Jul 2004 at 11:21:21 -0500, Alex S Moore wrote: > On Solaris 9, a customer is getting mail with the W32.Beagle and clamav > is not catching the virus. Norton is catching the virus on the desktop > and identifies the virus name [EMAIL PROTECTED] > > Among other things, clamav.conf has

Re: [Clamav-users] Worm.Bagle.AG (or something) sending empty zip files?

2004-07-20 Thread Tomasz Papszun
On Tue, 20 Jul 2004 at 14:31:03 -0400, henry j. mason wrote: > greetings clamav.users; > > i use clamav 0.70-4 on debian 3.0 stable/testing, with > amavisd-new-20030616. one of my customers has been complaining > of recieving what they claim are Worm.Bagle.AG emails, but >

Re: [Clamav-users] Worm.Bagle.AG (or something) sending empty zip files?

2004-07-20 Thread Damian Menscher
On Tue, 20 Jul 2004, henry j. mason wrote: > clamav has been catching lots of Worm.Bagle.AG, ever since it > has appeared on the scene, and this is the first real report > i have of anything slipping by it. of course, since the zip > files in all cases so far have been actu

Re: [Clamav-users] Mail::ClamAV build problems

2004-07-20 Thread Steve Lenti
On Tue, 20 Jul 2004 14:23:29 -0400, Bowie Bailey <[EMAIL PROTECTED]> wrote: > Fedora Core 2 > Perl 5.8.3 > ClamAV 0.74 > Mail-ClamAV-0.11 > > I am having problems getting Mail::ClamAV past the test stage. Make runs > with no errors, but as soon as I run 'make test', I get the errors shown > below

[Clamav-users] Re: Worm.Bagle.AG (or something) sending empty zip files?

2004-07-20 Thread henry j. mason
Tomasz Papszun wrote: On Tue, 20 Jul 2004 at 14:31:03 -0400, henry j. mason wrote: ---snip--- has anyone else encountered this? i can easily see a poorly written virus sending out botched copies of itself. That's right. We got many samples of messages generated by Worm.Bagle.AF.2 co

[Clamav-users] libbz2?

2004-07-20 Thread A.R.S. KA9QLQ Alvin Koffman
Where can I get libbz2? Here's rom my atempt [EMAIL PROTECTED] Download]# [EMAIL PROTECTED] clam]# rpm -ivh *.rpm warning: clamav-0.74-1mdk.i586.rpm: V3 DSA signature: NOKEY, key ID d535d889 error: Failed dependencies: devel(libbz2) is needed by libclamav1-devel-0.74-1mdk devel(libgmp

RE: [Clamav-users] Mail::ClamAV build problems

2004-07-20 Thread Bowie Bailey
From: Steve Lenti [mailto:[EMAIL PROTECTED] > > On Tue, 20 Jul 2004 14:23:29 -0400, Bowie Bailey > <[EMAIL PROTECTED]> wrote: > > Fedora Core 2 > > Perl 5.8.3 > > ClamAV 0.74 > > Mail-ClamAV-0.11 > > > > I am having problems getting Mail::ClamAV past the test stage. Make runs > > with no errors

[Clamav-users] Re: ClamAV version 0.74 doesn't detect some viruses

2004-07-20 Thread Matias Lopez Bergero
Niek wrote: Matias Lopez Bergero wrote: Hello I haved installed clamav 0.74 on my email server, and I am using it with clamav-milter. Some of my users callme today to tould me that he was reciving viruses on his email acount. I said_ no way. But it's true. This is the virus: Worm.Bagle.AF.2 I t

Re: [Clamav-users] RE: Not finding W32.Beagle virus

2004-07-20 Thread Alex S Moore
On Tue, 2004-07-20 at 14:13, Tomasz Papszun wrote: > http://clamav.sourceforge.net/cgi-bin/sendvirus.cgi Thanks for the response Tomasz. I have some of these same messages as well, but I use mimedefang which broke the message apart and quarantined it. I cannot seem to put this one back together

Re: [Clamav-users] Re: Worm.Bagle.AG (or something) sending empty zip files?

2004-07-20 Thread Tomasz Kojm
On Tue, 20 Jul 2004 16:23:21 -0400 "henry j. mason" <[EMAIL PROTECTED]> wrote: > correctly in passing these messages, right? i can't > think of any reasonable way to stop them, as they > seem to follow the Bagle pattern of using many different > patterns for the message and

Re: [Clamav-users] libbz2?

2004-07-20 Thread Todd Lyons
A.R.S. KA9QLQ Alvin Koffman wanted us to know: >Where can I get libbz2? Here's rom my atempt > >[EMAIL PROTECTED] Download]# [EMAIL PROTECTED] clam]# rpm -ivh *.rpm >warning: clamav-0.74-1mdk.i586.rpm: V3 DSA signature: NOKEY, key ID d535d889 >error: Failed dependencies: > devel(libbz2) is n

Re: [Clamav-users] Mail::ClamAV build problems

2004-07-20 Thread Steve Lenti
On Tue, 20 Jul 2004 16:36:48 -0400, Bowie Bailey <[EMAIL PROTECTED]> wrote: > > > > It looks like it can't find clamav shared library. Is the location of > this > > library in your /etc/ld.so.conf? Also, try re-running ldconfig or add the > > path to your LD_LIBRARY_PATH environment variable. >

Re: [Clamav-users] Worm.Bagle.AG (or something) sending empty zip files?

2004-07-20 Thread Daniel J McDonald
On Tue, 2004-07-20 at 13:31, henry j. mason wrote: > greetings clamav.users; > > i use clamav 0.70-4 on debian 3.0 stable/testing, with > amavisd-new-20030616. one of my customers has been complaining > of recieving what they claim are Worm.Bagle.AG emails, but > when

Re: [Clamav-users] libbz2?

2004-07-20 Thread Steve Lenti
On Tue, 20 Jul 2004 15:35:32 -0500, A.R.S. KA9QLQ Alvin Koffman <[EMAIL PROTECTED]> wrote: > Where can I get libbz2? Here's rom my atempt > > [EMAIL PROTECTED] Download]# [EMAIL PROTECTED] clam]# rpm -ivh *.rpm > warning: clamav-0.74-1mdk.i586.rpm: V3 DSA signature: NOKEY, key ID d535d889 > error:

Re: [Clamav-users] Re: Worm.Bagle.AG (or something) sending empty zip files?

2004-07-20 Thread Everton da Silva Marques
> Just copy the attached file to DatabaseDirectory and tell clamd to > reload the database (killall -USR2 clamd) Just a side node, 'killall' can be dangerous under at least one system (Solaris). 'pkill' helps here. --- This SF.Net email is spon

Re: [Clamav-users] Re: Worm.Bagle.AG (or something) sending empty zip files?

2004-07-20 Thread Noel Jones
At 03:23 PM 7/20/04, henry j. mason wrote: Tomasz Papszun wrote: On Tue, 20 Jul 2004 at 14:31:03 -0400, henry j. mason wrote: ---snip--- has anyone else encountered this? i can easily see a poorly written virus sending out botched copies of itself. That's right. We got many samples

Re: [Clamav-users] libbz2?

2004-07-20 Thread Daniel J McDonald
On Tue, 2004-07-20 at 15:35, A.R.S. KA9QLQ Alvin Koffman wrote: > Where can I get libbz2? Here's rom my atempt > > [EMAIL PROTECTED] Download]# [EMAIL PROTECTED] clam]# rpm -ivh *.rpm > warning: clamav-0.74-1mdk.i586.rpm: V3 DSA signature: NOKEY, key ID d535d889 > error: Failed dependencies: >

Re: [Clamav-users] Re: Worm.Bagle.AG (or something) sending empty zip files?

2004-07-20 Thread Daniel J McDonald
On Tue, 2004-07-20 at 16:07, Tomasz Kojm wrote: > On Tue, 20 Jul 2004 16:23:21 -0400 > You can use this signature (the latest CVS version is required): Speaking of CVS versions - any idea when the next release of clam will be forthcoming? There are quite a few "latest CVS needed" signatures now.

Re: [Clamav-users] Re: ClamAV version 0.74 doesn't detect some viruses

2004-07-20 Thread Niek
Matias Lopez Bergero wrote: The clamav 0.70 version detects it. No need to post a message twice. It is highly advisable to update to clamav 0.74. Regards, Niek --- This SF.Net email is sponsored by BEA Weblogic Workshop FREE Java Enterprise J2EE d

Re: [Clamav-users] Re: Worm.Bagle.AG (or something) sending empty zip files?

2004-07-20 Thread Tomasz Kojm
On Tue, 20 Jul 2004 17:37:36 -0500 Daniel J McDonald <[EMAIL PROTECTED]> wrote: > On Tue, 2004-07-20 at 16:07, Tomasz Kojm wrote: > > On Tue, 20 Jul 2004 16:23:21 -0400 > > > You can use this signature (the latest CVS version is required): > > Speaking of CVS versions - any idea when the next re

Re: [Clamav-users] Re: ClamAV version 0.74 doesn't detect some viruses

2004-07-20 Thread List
> Matias Lopez Bergero wrote: > > > The clamav 0.70 version detects it. > > No need to post a message twice. > > It is highly advisable to update to clamav 0.74. [snipe] >>I haved installed clamav 0.74 on my email server, and I am using it with >>clamav-milter. He said that he installed 0.7

[Clamav-users] clamdscan (fails) vs. clamscan

2004-07-20 Thread clamav
I am not quite sure how to notify you guys of this responsibly outside of the mail list. Unfortunately, attempting to submit this via the virus submit channel says it is already recognized by clamav. clamscan --mbox picks up the virus and clamdscan --mbox does not. This is running 0.74 and clam

Re: [Clamav-users] libbz2?

2004-07-20 Thread A.R.S. KA9QLQ Alvin Koffman
Daniel J McDonald wrote: On Tue, 2004-07-20 at 15:35, A.R.S. KA9QLQ Alvin Koffman wrote: Where can I get libbz2? Here's rom my atempt [EMAIL PROTECTED] Download]# [EMAIL PROTECTED] clam]# rpm -ivh *.rpm warning: clamav-0.74-1mdk.i586.rpm: V3 DSA signature: NOKEY, key ID d535d889 error: Failed d

Re: [Clamav-users] clamdscan (fails) vs. clamscan

2004-07-20 Thread Tomasz Kojm
On Tue, 20 Jul 2004 18:22:39 -0700 (PDT) [EMAIL PROTECTED] wrote: > > I am not quite sure how to notify you guys of this responsibly outside > of the mail list. Unfortunately, attempting to submit this via the > virus submit channel says it is already recognized by clamav. > clamscan --mbox pic

Re: [Clamav-users] clamdscan (fails) vs. clamscan

2004-07-20 Thread Tomasz Papszun
On Tue, 20 Jul 2004 at 18:22:39 -0700, [EMAIL PROTECTED] wrote: > > I am not quite sure how to notify you guys of this responsibly outside of > the mail list. Unfortunately, attempting to submit this via the virus > submit channel says it is already recognized by clamav. clamscan --mbox > picks

[Clamav-users] Re: ApplescriptStudio GUI for ClamAV on OSX

2004-07-20 Thread Jonathan Trott
-Jonathan Trott wrote: - > I wrote a quick one a couple of weeks back in AppleScript Studio. It's > just a .app that contains the freshclam, clamscan, and libraries needed. > I'd be happy to send you the source code if you'd like to use any of it. I > tried to gauge the interest in fu

Re: [Clamav-users] clamdscan (fails) vs. clamscan

2004-07-20 Thread Stephen Gran
On Tue, Jul 20, 2004 at 06:22:39PM -0700, [EMAIL PROTECTED] said: > > I am not quite sure how to notify you guys of this responsibly outside of > the mail list. Unfortunately, attempting to submit this via the virus > submit channel says it is already recognized by clamav. clamscan --mbox > pick