[Clamav-users] BUILD_CLAMD_FALSE

I am not able to have clamd (and clamav-milter) built on BSD/OS 4.2 from 0.8 source, although everything else built and run without problem (after fiddling with integer type define). Found in clamd/Makefile the following with the obvious meaning that clamd not be built. BUILD_CLAMD_FALSE = BUILD

Re: [Clamav-users] Zip module failure

On Mon, 2004-11-22 at 14:54 -0500, Chris Gauch wrote: > I've had the exact same problems with ZIP MODULE FAILURE ERRORS appearing > intermittently throughout my clamd.log. The problems also began around that > same timeframe (approx. 2 weeks ago). I haven't done too much in terms of > debugging, e

Re: [Clamav-users] Zip module failure

On Tuesday 23 Nov 2004 09:03, Scott Ryan wrote: > I am also receiving the same error Clamav-0.80, ... RHEL3 > ...Zip module failure ERROR > > It also may be worth noting that I get the following errors as well. > > .MS CAB module failure ERROR > .omsa.net-2004.11.07.02.00.tar.gz: Inp

Re: [Clamav-users] BUILD_CLAMD_FALSE

On 11/23/04 09:20, David Wu wrote: I am not able to have clamd (and clamav-milter) built on BSD/OS 4.2 from 0.8 source, although everything else built and run without problem (after fiddling with integer type define). Found in clamd/Makefile the following with the obvious meaning that clamd not be

[Clamav-users] Virus report

Hello: Just for warn clamAv team about a new mail virus reported by "Hispasec - una-al-dÃa" : worm Anzae, Inzae, Pawur o Tasin wited in visual basic subject and body in spanish. subject examples: re:Amor verdadero re:Como el aire... re:Crees que puede ser verdad? re:Dejate de rollos y vivÃ!

Re: [Clamav-users] Virus report

Erick Lopez Carreon schrieb: Hello: Just for warn clamAv team about a new mail virus reported by "Hispasec - una-al-dÃa" : worm Anzae, Inzae, Pawur o Tasin wited in visual basic subject and body in spanish. Did you submit it at ? __

Re: [Clamav-users] Virus report

On Tue, 2004-11-23 at 17:44 +0100, Thomas Lamy wrote: > Erick Lopez Carreon schrieb: > > Hello: > > > > > > Just for warn clamAv team about a new mail virus reported by "Hispasec - > > una-al-dÃa" : > > > > > > worm Anzae, Inzae, Pawur o Tasin > > > > wited in visual basic subject and body in

Re: [Clamav-users] Clam SSL issues

On Fri, 19 Nov 2004, Tomasz Kojm wrote: > On Fri, 19 Nov 2004 00:00:12 -0600 (CST) > [EMAIL PROTECTED] wrote: > > > I'm doing. Everything else seems to be working fine though so I > > suspect the problem is elsewhere. A fresh look on this problem would > > certainly help though. Tomasz, any id

Re: [Clamav-users] Virus report

On Tue, 23 Nov 2004 10:48:10 -0600 Erick Lopez Carreon <[EMAIL PROTECTED]> wrote: > As soon as I have it. > > If before he has not been sent by anybody more We've received a sample but unfortunately at least I cannot analyse it at the moment because my windows box is broken (old hdd just went t

Re: [Clamav-users] Clam SSL issues

On Fri, 19 Nov 2004, Thomas Lamy wrote: > The includes are found, obviously. Your problem are the libraries. > Let's have a look: > # ldd /usr/lib/libclamav.so.1.0.4 > libbz2.so.1.0 => /usr/lib/libbz2.so.1.0 (0x40049000) > libgmp.so.3 => /usr/lib/libgmp.so.3 (0x40059000) > libcurl.so.3 => /usr/lib

Re: [Clamav-users] Virus report

Erick Lopez Carreon schrieb: On Tue, 2004-11-23 at 17:44 +0100, Thomas Lamy wrote: Erick Lopez Carreon schrieb: Hello: Just for warn clamAv team about a new mail virus reported by "Hispasec - una-al-dÃa" : worm Anzae, Inzae, Pawur o Tasin wited in visual basic subject and body in spanish. Did you s

[Clamav-users] sober

Greetings, I am still getting the w32.sober.I through my clam defense system. I keep my Exchange box behind Linux to keep it from getting hammered to much, but Norton on the Exchange box is catching this virus. It's really great to see how well Clam is working overall, and I was surprised to see

Re: [Clamav-users] sober

On Tue, 23 Nov 2004 11:28:18 -0800 pgomez <[EMAIL PROTECTED]> wrote: > Greetings, > I am still getting the w32.sober.I through my clam defense system. > I keep my Exchange box behind Linux to keep it from getting hammered > to much, but Norton on the Exchange box is catching this virus. > > It's

Re: [Clamav-users] sober

pgomez wrote: I am still getting the w32.sober.I through my clam defense system. I keep my Exchange box behind Linux to keep it from getting hammered to much, but Norton on the Exchange box is catching this virus. Hmm, is it *really* catching the virus? I'm getting lots of *emtpy* E-Mail attachment

[Clamav-users] --move function and file attributes. . .

When using the --move function with clamscan, the original infected files that are moved do not retain their original time/date attributes. If they did, it would certainly help me target when specific infections are taking place, and I imagine it would help others, too. I've read the documen

Re: [Clamav-users] --move function and file attributes. . .

On Tue, 23 Nov 2004 16:16:33 -0600 "Jim Smith" <[EMAIL PROTECTED]> wrote: > When using the --move function with clamscan, the original infected > files that are moved do not retain their original time/date > attributes. If they did, it would certainly help me target when > specific infections

Re: [Clamav-users] --move function and file attributes. . .

> Already fixed in CVS: > > Tue Nov 23 23:23:45 CET 2004 (tk) > - > * clamscan: --move: preserve original access and modification times > (requested by Tomasz Papszun); optimise Out of hopeful curiousity, will this also be the case for the upcoming

[Clamav-users] Zip file with a long filename inside

Hello clamav-users, This is my first post in here, and BTW, english is not my first language, so excuse me if i don't express in a good way O:) So... today i've been looking for some info about long filenames not detected by antivirus, but i didn't find any interesting (for my problem) info. I'v

Re: [Clamav-users] Zip module failure

On Nov 23, 2004, at 04:03, Scott Ryan wrote: On Mon, 2004-11-22 at 14:54 -0500, Chris Gauch wrote: I've had the exact same problems with ZIP MODULE FAILURE ERRORS appearing intermittently throughout my clamd.log. The problems also began around that same timeframe (approx. 2 weeks ago). I haven't

[Clamav-users] Performance issues on high volume mail server

Hiya, Running freebsd 5.3 + postfix + amavisd-new + clamav on an incoming MX server. Server does about 350k messages per day. Whenever the queue is largeish, say 40,000+ = mails can take 20mins just to get flushed out of the local mail spool. If I turn amavisd off (by commenting out the content_f

Re: [Clamav-users] Performance issues on high volume mail server

Just to elaborate a little, I'm not running Spam Assassin on this server and I have the SA code disabled in amavisd.conf. Cheers Gav On 24/11/04 11:48 AM, "Gavin Cato" <[EMAIL PROTECTED]> wrote: > Hiya, > > Running freebsd 5.3 + postfix + amavisd-new + clamav on an incoming MX > server. > >

[Clamav-users] Problems with Netsky and Beagle virus. We installed the clamAV mailter with sendmail

Hi all, We installed clamAV mailter with sendmail. However we still have problems with the Netsky and Baegle virus. The following lines are the steps we did to setup the ClamAV mailter with sendmail. Can anybody help us to fix this problem. TIA - Compiling procedure

[Clamav-users] Pblm with Clamscan on FC3

clamd and clamav-milter seem to be working OK, but I'm running into this after compiling clam from source for FC3: $ clamscan . LibClamAV Error: cl_loaddbdir(): Can't open directory Ù/lib/clamav ERROR: Unable to open file or directory --- SCAN SUMMARY --- Known viruses: 0 Scanned

[Clamav-users] Re:

On Tue, 23 Nov 2004 22:14:22 -0600, "Jon Dossey" <[EMAIL PROTECTED]> wrote: > >I'd check the path to your clamav database in either clamav.conf or clamd.conf >depending on your version of clamav. > >.Jon > > > The clamav directory is properly named in /etc/clamd.conf: # Path to the database di

Re: [Clamav-users] Problems with Netsky and Beagle virus. We installed the clamAV mailter with sendmail

On Wed, 24 Nov 2004, Ing. Mónico Briseño C. wrote: The following lines are the steps we did to setup the ClamAV mailter with sendmail. ./configure --enable-milter INPUT_MAIL_FILTER(`clmilter',`S=local:/var/run/clmilter.sock,F=,T=S:4m;R:4m' )dnl define(`confINPUT_MAIL_FILTERS', `clmilter') Re start

RE: [Clamav-users] Problems with Netsky and Beagle virus. We installedthe clamAV mailter with sendmail

What about running the following: clamd clamav-milter -lo /var/run/clmilter.sock And then do a ps -aux |grep clam And see if both are running. Evan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ing. Mónico Briseño C. Sent: Wednesday, November 24, 200

Re: [Clamav-users] Virus report

Tomasz Kojm wrote: On Tue, 23 Nov 2004 10:48:10 -0600 Erick Lopez Carreon <[EMAIL PROTECTED]> wrote: As soon as I have it. If before he has not been sent by anybody more We've received a sample but unfortunately at least I cannot analyse it at the moment because my windows box is broken (

[Clamav-users] Suspected.Zip - False positives!!

Hello people, All of a sudden, I am getting alot of mail being rejected because clamd found Suspected.Zip. I have created a zip file myself and sent it via my server and for sure it got rejected with the message that it contains a virus known as Suspected.Zip. I am suspecting some bad signature

Re: [Clamav-users] Suspected.Zip - False positives!!

On Wed, 24 Nov 2004, Odhiambo Washington wrote: All of a sudden, I am getting alot of mail being rejected because clamd found Suspected.Zip. I have created a zip file myself and sent it via my server and for sure it got rejected with the message that it contains a virus known as Suspected.Zip. I am

Re: [Clamav-users] Suspected.Zip - False positives!!

* Damian Menscher <[EMAIL PROTECTED]> [20041124 10:16]: wrote: > On Wed, 24 Nov 2004, Odhiambo Washington wrote: > > >All of a sudden, I am getting alot of mail being rejected because clamd > >found Suspected.Zip. > > > >I have created a zip file myself and sent it via my server and for sure > >it