[Clamav-users] Problem detecting Worm.Mydoom.I with strange Mime_base64

2004-07-22 Thread Marc Berenschot
Hello all, I am currently receiving e-mails with incorrect Mime_base64 encoding. Spamassassin adds the MIME_BASE64_ILLEGAL tag and if I cat the mailbox part of the mime looks like this (only showing the last part of the mail): Qa6y+0PJZh4KsJU2CmwBOgpqIZgKgwFICoAZNQqAGT4Kp gU4CnQJmwoBAjUKcA lQCrBV

[Clamav-users] Problem with CVS?

2004-07-22 Thread Shane Wise
Running slackware 8.1sendmail version is 8.13.0 All has been running fine with clamav-milter .73we downloaded the CVS yesterday morning(showed version devel-20040721)...in order to catch some of the newer bugs that said the cvs was required... All went fine until we left for the day.

Re: [Clamav-users] Problem with CVS?

2004-07-22 Thread Fajar A. Nugraha
is better that stable versions. However, since 0.74 I too experince some problems, ranging from core dumps, memory leak, to dying clamd. Clamav's devel team has been very helpful though. As I don't use clamav-milter, the latest CVS (devel-20040722) seems to work fine for me (I use ex

Re: [Clamav-users] Problem detecting Worm.Mydoom.I with strange Mime_base64

2004-07-22 Thread Nigel Horne
On Thursday 22 Jul 2004 13:38, Marc Berenschot wrote: > Hello all, > > I am currently receiving e-mails with incorrect Mime_base64 encoding. > Spamassassin adds the MIME_BASE64_ILLEGAL tag and if I cat the mailbox > part of the mime looks like this (only showing the last part of the > mail): >

Re: [Clamav-users] Problem with CVS?

2004-07-22 Thread Nigel Horne
On Thursday 22 Jul 2004 13:51, Shane Wise wrote: > Running slackware 8.1sendmail version is 8.13.0 > > All has been running fine with clamav-milter .73we downloaded the > CVS yesterday morning(showed version devel-20040721)...in order to > catch some of the newer bugs that said the c

Re: [Clamav-users] Problem with CVS?

2004-07-22 Thread Shane Wise
Here are the options we send it... /usr/local/sbin/clamav-milter -loCHP -p [EMAIL PROTECTED] local:/var/run/clamav/clmilter.sock What options are you giving to clamav-milter? -Nigel -- Nigel Horne. Arranger, Composer, Typesetter. NJH Music, Barnsley, UK. ICQ#20252325 [EMAIL PROTECTED] http://www

[Clamav-users] Re: Problem detecting Worm.Mydoom.I with strange Mime_base64

2004-07-22 Thread Jesse Guardiani
Nigel Horne wrote: > On Thursday 22 Jul 2004 13:38, Marc Berenschot wrote: >> Hello all, >> >> I am currently receiving e-mails with incorrect Mime_base64 encoding. >> Spamassassin adds the MIME_BASE64_ILLEGAL tag and if I cat the mailbox >> part of the mime looks like this (only showing the last

Re: [Clamav-users] Problem with CVS?

2004-07-22 Thread Nigel Horne
On Thursday 22 Jul 2004 17:15, Shane Wise wrote: > Here are the options we send it... > /usr/local/sbin/clamav-milter -loCHP -p [EMAIL PROTECTED] > local:/var/run/clamav/clmilter.sock > > What options are you giving to clamav-milter? That all looks fine. Is everything else working (clamd and cl

[Clamav-users] clamd scanning pipe not working in CVS

2004-07-22 Thread Christopher X. Candreva
Before anyone starts installing CVS for the Mydoom fix -- Yesterday and Today's CVS seems to be very broken, at least under Solaris 8. It wont' scan a pipe -- clamdscan - , nor milter, nor my own perl program that does an open and a ping -- all time out. The only thing that works is clamdsca

Re: [Clamav-users] Re: Problem detecting Worm.Mydoom.I with strange Mime_base64

2004-07-22 Thread Nigel Horne
On Thursday 22 Jul 2004 17:45, Jesse Guardiani wrote: > In my opinion a bug that major should warrant a new release, if only 0.74a > or 0.74.1. Asking people to update to CVS to fix a serious bug doesn't make > sense. Tomasz and I are already in discussions about this... -- Nigel Horne. Arrange

Re: [Clamav-users] Problem detecting Worm.Mydoom.I with strange Mime_base64

2004-07-22 Thread Marc Berenschot
On 22-jul-04, at 17:32, Nigel Horne wrote: On Thursday 22 Jul 2004 13:38, Marc Berenschot wrote: Hello all, I am currently receiving e-mails with incorrect Mime_base64 encoding. From the ChangeLog: Tue Jul 20 15:38:03 BST 2004 (njh) -- * libclamav: Some MyDoom.I

[Clamav-users] Gettin a return code from clamdscan in a script

2004-07-22 Thread Kevin W. Gagel
I'm having trouble getting a return code from clamdscan or clamscan in a script. I can only get a return code from a command line. I'm using the eicar string to simulate a virus in a message and the output always shows that its found but checking the $? after does not have a value when I run it in

Re: [Clamav-users] Gettin a return code from clamdscan in a script

2004-07-22 Thread Kevin Spicer
On Thu, 2004-07-22 at 22:01, Kevin W. Gagel wrote: > I'm confused because the docs say it will return a "1" which it does if I run > them from the command line, just not in a script. Perhaps you could post your script? Are you using the same shell in your script as you use at the command line, som

Re: [Clamav-users] Gettin a return code from clamdscan in a script

2004-07-22 Thread Kevin W. Gagel
- Original Message Follows - Date: Thu, 22 Jul 2004 22:27:23 +0100 > On Thu, 2004-07-22 at 22:01, Kevin W. Gagel wrote: > > I'm confused because the docs say it will return a "1" which it does if I > > run them from the command line, just not in a script. > > Perhaps you could post your s

[Clamav-users] Re: Re: trouble installing on OS X 10.2.6

2004-07-22 Thread Emrys Hughes
Doesn't seem to make any difference, generates the same errors From: Guillaume Arcas <[EMAIL PROTECTED]> Re: trouble installing on OS X 10.2.6 2004-07-21 01:12 Emrys Hughes a dit : > Hi > > I"m having trouble installing clamav-0.74 on Darwin. > I have tried with earlier versions of

[Clamav-users] [Clamav] [OpenBSD] port for 0.75

2004-07-22 Thread Jerome Loyet
Hello to all, The port for clamav 0.75 has been made and is available for download at http://www.fatbsd.com/openbsd/clamav/ Only the version for OpenBSD 3.4 and 3.5 has been made. But I've test the port on a 3.3 generic server and it works. So 3 release for this version!! Thanks for you feedback

[Clamav-users] Re: [Clamav-announce] announcing ClamAV 0.75

2004-07-22 Thread Tristan Griffiths
13800 ? S10:03 0:00 /usr/sbin/clamd -c /etc/clamav/clamav.conf Version clamav-devel-20040722: clamav 15100 0.0 9.1 5848 4476 ?S10:21 0:00 /usr/sbin/clamd -c /etc/clamav/clamav.conf Nice ;-) --- This SF.Net ema

Re: [Clamav-users] announcing ClamAV 0.75

2004-07-22 Thread Tristan Griffiths
13800 ? S10:03 0:00 /usr/sbin/clamd -c /etc/clamav/clamav.conf Version clamav-devel-20040722: clamav 15100 0.0 9.1 5848 4476 ?S10:21 0:00 /usr/sbin/clamd -c /etc/clamav/clamav.conf Nice ;-) --- This SF.Net ema

[Clamav-users] Anyone heard about Oyster being faster than ClamAV?

2004-07-22 Thread Jason Haar
FYI http://www.fsl.cs.sunysb.edu/docs/avfs-security04/index.html They apparently have used ClamAV to base their "Oyster" AV on, and claim that it runs >4 times faster as a result. One thing that I see immediately would be if clamd could cache a checksum of a scanned file, so that if it sees tha

[Clamav-users] Virus HOSTS.Noconnt.A (Detect By: AVG)

2004-07-22 Thread Me Its
Hi, I had run almost any antivirus that I ran across to clean my network system, including ClamAV, but the problem is that, when ever my windows client logon to the network (using samba as PDC) all the client's hosts files will be appended so that it can't update the antivirus. The only antivirus

[Clamav-users] clamdscan change from 0.74 to 0.75 with procmail call?

2004-07-22 Thread Rob Mangiafico
Upgraded tonight on our development box to clamav 0.75. After upgrading getting a lot of: ERROR: ScanStream: accept timeout. (Never received these errors on previous versions) Calling clamdscan from procmail with: :0 * multipart { VIRUS=`/usr/local/bin/clamdscan --disable-summary --stdout -` :

[Clamav-users] Loading clamd before service starts

2004-07-22 Thread sarky
Hello all How do i load clamd before the service clamav-milter start in RH? Sorted out the service but i can not figure out in which init file i should put clamd, rc.local starts after i think. SArky --- This SF.Net email is sponsored by BEA