[Clamav-users] Virus not found by local clamscan

2005-08-16 Thread oliverst
I am using the cygwin build of 0.86.2 (ClamAV devel-20050725/1023/Mon Aug 15 22:15:08 2005) from http://www.sosdg.org/clamav-win32/index.php and a virus in a file isn't recognised. I checked it with the Sophos scanner and it foudn the virus, so I thought it was missing in the database, but the s

Re: [Clamav-users] Virus not found by local clamscan

2005-08-16 Thread Gian Carlo
On Tue, Aug 16, 2005 at 11:53:35AM +0200, [EMAIL PROTECTED] wrote: > I am using the cygwin build of 0.86.2 (ClamAV devel-20050725 ... > I put the file online here: http://www.breaken.de/temp/Happy99.exe.virus Usually, they say it's not a good thing... Anyway, I downloaded your file. ;-) I still

Re: [Clamav-users] Virus not found by local clamscan

2005-08-16 Thread Gian Carlo
On Tue, Aug 16, 2005 at 11:53:35AM +0200, [EMAIL PROTECTED] wrote: > I put the file online here: Ops! Sorry for me too reporting the address. :-/ Bye, gc :-/ ___ http://lurker.clamav.net/list/clamav-users.html

AW: Re: [Clamav-users] Virus not found by local clamscan

2005-08-16 Thread oliverst
>Usually, they say it's not a good thing... Sorry, but I rather put it online then sending it into a mailing-list. >I still use old "ClamAV 0.84/1023/Mon Aug 15 22:15:08 2005" (Debian >Sarge) but it says: "Happy99.exe.virus: Trojan.Happy99.SKA FOUND". Hm...I guess the Online Scanner and the subm

[Clamav-users] (no subject)

2005-08-16 Thread Mark Coetser
Hi Ppl Running Debian 3.1, with the following versions sendmail 8.13.4-3 sendmail-base 8.13.4-3 sendmail-bin 8.13.4-3 sendmail-cf8.13.4-3 clamav-base 0.84-2.sarge.1 clamav-freshclam0.84-2.sarge.1 clamav-milter 0.84-2.sarge.1 libclamav1 0.84-2.sarge.1 send

Re: [Clamav-users] (no subject)

2005-08-16 Thread Nigel Horne
On Tue, 2005-08-16 at 11:59, Mark Coetser wrote: > Does anyone know where I can start looking ? CVS > > Thank you, -Nigel ___ http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] New virus/worm? mousebm.exe, eraseme_XXXXX.exe and svnlitup32.exe

2005-08-16 Thread Peter Kiem
Hi Thomas, I grabbed the latest McAfee SuperDAT and extracted it. I ran scan.exe from the command line like this: scan c:\ /all /sub /clean /log c:\vscan.log It reported no viruses. Every time I try to install McAfee on the machine, I get an error saying "The Windows Installer Service coul

Re: Re: [Clamav-users] Virus not found by local clamscan

2005-08-16 Thread Gian Carlo
On Tue, Aug 16, 2005 at 12:35:29PM +0200, [EMAIL PROTECTED] wrote: > >Usually, they say it's not a good thing... > > Sorry, but I rather put it online then sending it into a mailing-list. Forgive me: maybe I was too "purist". I realize there are better ways for a malicious person to get something

[Clamav-users] Re: clamav-milter & nscd problem

2005-08-16 Thread Apostolos Papayanakis
On Thu, 11 Aug 2005, Rene Berber wrote: > On Thu, 11 Aug 2005, Apostolos Papayanakis wrote: > > > On Wed, 10 Aug 2005, Apostolos Papayanakis wrote: > > > > > On Tue, 9 Aug 2005 James Kosin wrote: > > > > > > > Apostolos Papayanakis wrote: > > > > > > > > |Last month I started getting 10-20 ran

Re: [Clamav-users] Virus not found by local clamscan

2005-08-16 Thread Bart Silverstrim
On Aug 16, 2005, at 7:42 AM, Gian Carlo wrote: On Tue, Aug 16, 2005 at 12:35:29PM +0200, [EMAIL PROTECTED] wrote: Usually, they say it's not a good thing... Sorry, but I rather put it online then sending it into a mailing-list. Forgive me: maybe I was too "purist". I realize there are bett

[Clamav-users] Zotob - same as Worm.Mytob.CL?

2005-08-16 Thread Elizabeth Schwartz
Just wondering if anyone knew whether Worm.Mytob.CL is the same as the worm the media is calling Zotob(zotob.a or zotob.b) ? Circumstantial evidence points that way but I don't have any samples to play with. I've searched the usual sites with nothing conclusive either way... thanks Betsy _

Re: [Clamav-users] Re: New virus/worm? mousebm.exe, eraseme_XXXXX.exe and svnlitup32.exe

2005-08-16 Thread Steven Spence
René Berber wrote: Thomas Cameron wrote: [snip] Every time I try to install McAfee on the machine, I get an error saying "The Windows Installer Service could not be accessed. This can occur if you are running Windows in safe mode, or if the Windows installer is not correctly installed. Contac

Re: [Clamav-users] New virus/worm? mousebm.exe, eraseme_XXXXX.exeand svnlitup32.exe

2005-08-16 Thread Thomas Cameron
> Hi Thomas, > >> I grabbed the latest McAfee SuperDAT and extracted it. I ran scan.exe >> from the command line like this: >> >> scan c:\ /all /sub /clean /log c:\vscan.log >> >> It reported no viruses. >> >> Every time I try to install McAfee on the machine, I get an error saying >> "The Windows

Re: [Clamav-users] db.KE.clamav.net - where did it go?

2005-08-16 Thread Luca Gibelli
Hello Odhiambo Washington, > All my mail servers using db.KE.clamav.net just cannot find the host! > So my database cannot be updated at all. > It's going to be a hell changing all of them to use any other mirror, > so I would appreciate some help on this. > Is the mirror obsoleted for some reaso

Re: Re: [Clamav-users] Virus not found by local clamscan

2005-08-16 Thread Luca Gibelli
Hello [EMAIL PROTECTED], > >Usually, they say it's not a good thing... > > Sorry, but I rather put it online then sending it into a mailing-list. When you subscribed to this ml, you visited http://lists.clamav.net/mailman/listinfo/clamav-users for sure. Now, what part of: - - - Subscribe to th

Re: Re: Re: [Clamav-users] Virus not found by local clamscan

2005-08-16 Thread oliverst
>When you subscribed to this ml, you visited >href="http://lists.clamav.net/mailman/listinfo/clamav-users";>http://lists.clama >v.net/mailman/listinfo/clamav-users for sure. Now, >what part of: > >- - - >Subscribe to this ML if you need support for ClamAV. > >DO NOT SEND VIRUS SAMPLES HERE!!! NOT

Re: Re: Re: [Clamav-users] Virus not found by local clamscan

2005-08-16 Thread Rob MacGregor
On 16/08/05, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > > And the problem is, that the virus IS recognised by everything on the > clamav.net site, but NOT by the local copy of clamav running on my > machine...and I would appreciate some useful comments. Since I started to > look into clamav

[Clamav-users] Re: Permissions problems w/qmail, qmail-scanner, clamav

2005-08-16 Thread Gregory A. Cain
Tawee - thank you, thank you, THANK YOU! Greg http://www.gregorycain.net ___ http://lurker.clamav.net/list/clamav-users.html

[Clamav-users] Re: Virus not found by local clamscan

2005-08-16 Thread René Berber
[EMAIL PROTECTED] wrote: [snip] > And the problem is, that the virus IS recognised by everything on the > clamav.net site, but NOT by the local copy of clamav running on my > machine...and I would appreciate some useful comments. Since I started to > look into clamav it's been a pain in the ass

RE: Re: Re: [Clamav-users] Virus not found by local clamscan

2005-08-16 Thread Bowie Bailey
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > > And the problem is, that the virus IS recognised by everything on > the clamav.net site, but NOT by the local copy of clamav running on > my machine...and I would appreciate some useful comments. Ok... What version of Clam are you running? G

[Clamav-users] Re: AW: Re: Virus not found by local clamscan

2005-08-16 Thread René Berber
[EMAIL PROTECTED] wrote: > Hm...I guess the Online Scanner and the submission form both use a unix/linux > as well, so it seems like a win32/cygwin target problem, which was my first > thought. Wrong, it's not a Cygwin problem, look: $ clamscan -V ClamAV 0.86.2/1022/Mon Aug 15 05:03:07 2005 $

Re: [Clamav-users] (no subject)

2005-08-16 Thread Stephen Gran
On Tue, Aug 16, 2005 at 12:59:24PM +0200, Mark Coetser said: > Hi Ppl > > cat /etc/default/clamav-milter > OPTIONS="--max-children=2 -ol" Raise your max children to something reasonable - the setting of 2 is only really useful for systems that don't handle much mail. I also recommend upgrading y

Re: [Clamav-users] Zotob - same as Worm.Mytob.CL?

2005-08-16 Thread Diego d'Ambra
Elizabeth Schwartz wrote: Just wondering if anyone knew whether Worm.Mytob.CL is the same as the worm the media is calling Zotob(zotob.a or zotob.b) ? Circumstantial evidence points that way but I don't have any samples to play with. I've searched the usual sites with nothing conclusive either wa

Re: [Clamav-users] Virus not found by local clamscan

2005-08-16 Thread Luca Gibelli
Hello [EMAIL PROTECTED], > but NOT by the local copy of clamav running on my machine...and I would > appreciate some useful comments. Since I started to look into clamav it's > been a pain in the ass getting some help or finding some proper information > on known problems/bugs...digging throug

[Clamav-users] Re: clamav-users Digest, Vol 11, Issue 15 ***Attachment(s)Deleted****

2005-08-16 Thread Owen
Somewhat ironic :) 17/08/2005 2:01:35 AM : Mail from : ([EMAIL PROTECTED]) was infected with: Trojan.Downloader.FTP.Gen-4 FOUND Message was addressed to : clamav-users@lists.clamav.net This message was scanned by ClamAV antivirus for Windows. Although no virus was found the recipient should ex