>>From /var/log/mail:
>
> Jun 30 03:38:28 diomedes clamav-milter[60071]: j5U0cN65081507:
> /var/tmp/clamav/msg.G8CVC4: HTML.Phishing.Bank-1 Intercepted virus
> from <[EMAIL PROTECTED]> to
> <[EMAIL PROTECTED]>
> Jun 30 03:38:28 diomedes clamav-milter[60071]: File quarantined as
> /var/tmp/clamav/05
gentoo-announce] [ GLSA 200506-23 ] Clam AntiVirus: Denial of Service
Vulnerability
Sorry if this has been discussed before:
I do not see anything on the ClamAV website indicating the status of this
potential DoS or whether is rectified or even no applicable. Can anyone shed
some light on this
* Scott Ryan <[EMAIL PROTECTED]> [20050630 11:34]: wrote:
> gentoo-announce] [ GLSA 200506-23 ] Clam AntiVirus: Denial of Service
> Vulnerability
>
> Sorry if this has been discussed before:
> I do not see anything on the ClamAV website indicating the status of this
>
Odhiambo Washington yazmış:
* Scott Ryan <[EMAIL PROTECTED]> [20050630 11:34]: wrote:
gentoo-announce] [ GLSA 200506-23 ] Clam AntiVirus: Denial of Service
Vulnerability
Sorry if this has been discussed before:
I do not see anything on the ClamAV website indicating the status o
* Mehmet Ekiz <[EMAIL PROTECTED]> [20050630 12:15]: wrote:
>
>
> Odhiambo Washington yazmış:
> >* Scott Ryan <[EMAIL PROTECTED]> [20050630 11:34]: wrote:
> >
> >>gentoo-announce] [ GLSA 200506-23 ] Clam AntiVirus: Denial of Service
> >>Vuln
Dear members,
During the last hours I have received several email containing the
W32/Mytob-Fam (Sophos name), which were not caught by Clam.
Can someone tell me why Clam is not detecting this virus?
Best Regards
___
Pedro Silva
IT - Instituto de
Hi,
at the last day's I have the following Mesage in my logfile:
... ClamAV-clamd: Can't send to socket /var/lib/clamav/clamd.sock: Transport
endpoint is not connected, retrying (1)
... ClamAV-clamd: Can't connect to UNIX socket /var/lib/clamav/clamd.sock:
Connection refused, retrying (2)
... C
Pedro Silva asked:
> Dear members,
>
> During the last hours I have received several email
> containing the W32/Mytob-Fam (Sophos name), which were not
> caught by Clam.
>
> Can someone tell me why Clam is not detecting this virus?
No idea, but you should submit samples to:
http://cgi.clam
On Wed, 2005-06-29 at 09:07 -0700, Dale Anderson wrote:
> I just updated my clamav to version 0.86.1/960
> I had to change the clamd.conf I was receiving when
> tring to start Clamd. StreamSaveToDisk not supported.
> So I alter the clamd.conf that came with the update
> version and now clamd dies
* Pedro Silva <[EMAIL PROTECTED]> [20050630 13:16]: wrote:
> Dear members,
>
>
>
> During the last hours I have received several email containing the
> W32/Mytob-Fam (Sophos name), which were not caught by Clam.
>
>
>
> Can someone tell me why Clam
rs] Question about Virus definitions
>
> * Pedro Silva <[EMAIL PROTECTED]> [20050630 13:16]: wrote:
> > Dear members,
> >
> >
> >
> > During the last hours I have received several email containing the
> > W32/Mytob-Fam (Sophos name), which were not c
Hi all.
I was running 0.86rc1 on a Solaris 9 box, when on Monday night, suddenly, it
stopped running. I looked in the log file, and found many instances of this:
LibClamAV Warning: j5S0vCAs024426:
/export/home/var/tmp/clamav-a125906f23a14050/msg.PsL6E1: No viruses detected
ERROR
LibClamAV War
Hi Brett,
It seems your server has reached the limit of open files:
LibClamAV Error: Can't create temporary file
/export/home/var/tmp/clamav-ae56442370c55c7c/textportion8sL6E1: Too many open files <--
It could be that it isn't closing the files Or there are to many programs
running.
Perheaps
Paul,
Additionally, you can create your own sig.
http://www.clamav.net/doc/0.86.1/signatures.pdf
Kevin
- Original Message -
From: "Randal, Phil" <[EMAIL PROTECTED]>
To: "ClamAV users ML"
Sent: Thursday, June 30, 2005 3:21 AM
Subject: RE: [Clamav-users] Question about Virus definiti
Pedro Silva wrote:
During the last hours I have received several email containing the
W32/Mytob-Fam (Sophos name), which were not caught by Clam.
Can someone tell me why Clam is not detecting this virus?
Mytob seems to mutate insanely fast. According to the clamav-virusdb
list, Clam seems to
On 6/30/05, Nigel Horne <[EMAIL PROTECTED]> wrote:
> >>From /var/log/mail:
> >
> > Jun 30 03:38:28 diomedes clamav-milter[60071]: j5U0cN65081507:
> > /var/tmp/clamav/msg.G8CVC4: HTML.Phishing.Bank-1 Intercepted virus
> > from <[EMAIL PROTECTED]> to
> > <[EMAIL PROTECTED]>
> > Jun 30 03:38:28 diomed
Hi all,
I got the newest signatures automatic and the last one from today
downloading manually:
Received signal: wake up
ClamAV update process started at Wed Jun 29 07:22:37 2005
main.cvd is up to date (version: 32, sigs: 34720, f-level: 5, builder:
tkojm)
daily.cvd updated (version: 960, si
Why do we have to recompile clamav all the time to get updates? I
thought that's what freshclam was for.
We were running clamav 0.86 with freshclam, and Worm.Mytob.FM was
making it past the filter. Compiling 0.86.1 fixed things, but I
don't really understand why. We generally like to test ne
Thomas Booms wrote:
Hi all,
I got the newest signatures automatic and the last one from today
downloading manually:
Received signal: wake up
ClamAV update process started at Wed Jun 29 07:22:37 2005
main.cvd is up to date (version: 32, sigs: 34720, f-level: 5, builder:
tkojm)
daily.cvd upda
Casey Allen Shobe wrote:
Why do we have to recompile clamav all the time to get updates? I
thought that's what freshclam was for.
Because something is broken? I've never had to to do that.
We were running clamav 0.86 with freshclam, and Worm.Mytob.FM was
making it past the filter. Compil
Jim Maul schrieb:
Thomas Booms wrote:
Hi all,
I got the newest signatures automatic and the last one from today
downloading manually:
Received signal: wake up
ClamAV update process started at Wed Jun 29 07:22:37 2005
main.cvd is up to date (version: 32, sigs: 34720, f-level: 5,
builder: t
On Thursday 30 Jun 2005 19:28, Panagiotis Christias wrote:
> On 6/30/05, Nigel Horne <[EMAIL PROTECTED]> wrote:
> > >>From /var/log/mail:
> > >
> > > Jun 30 03:38:28 diomedes clamav-milter[60071]: j5U0cN65081507:
> > > /var/tmp/clamav/msg.G8CVC4: HTML.Phishing.Bank-1 Intercepted virus
> > > from <[
Nigel Horne wanted us to know:
>> This is a feature request. The first line in the log carries a lot of
>> useful information, almost everything. Would it be possible to also
>> include the sender's IP address? It would save us a few lines of
>> scripting when analyzing the logs.
>Given the number
Todd Lyons wrote:
Nigel Horne wanted us to know:
This is a feature request. The first line in the log carries a lot of
useful information, almost everything. Would it be possible to also
include the sender's IP address? It would save us a few lines of
scripting when analyzing the logs.
On Thu, 30 Jun 2005, Nigel Horne wrote:
On Thursday 30 Jun 2005 19:28, Panagiotis Christias wrote:
From /var/log/mail:
Jun 30 03:38:28 diomedes clamav-milter[60071]: j5U0cN65081507:
/var/tmp/clamav/msg.G8CVC4: HTML.Phishing.Bank-1 Intercepted virus
from <[EMAIL PROTECTED]> to
<[EMAIL PROTECTED
On Thu, Jun 30, 2005 at 04:32:49PM +0200, Richard Pijnenburg said:
> Hi Brett,
>
> It seems your server has reached the limit of open files:
> LibClamAV Error: Can't create temporary file
> /export/home/var/tmp/clamav-ae56442370c55c7c/textportion8sL6E1: Too many
> open files <--
>
> It could be
26 matches
Mail list logo
