Re: [Clamav-users] Announcing ClamAV 0.94.1 RC1

2008-10-17 Thread René Berber
Török Edwin wrote: > Scanning test/.split works here: Thanks, I'm probably hitting an obscure system bug... > What OS/compiler are you using? ...in unsupported Cygwin. Almost everything else seems to work, exceptions being 'clamscan --debug', and the programs used to check the build. I'll che

Re: [Clamav-users] Announcing ClamAV 0.94.1 RC1

2008-10-17 Thread John Rudd
Tomasz Kojm wrote: > On Thu, 16 Oct 2008 17:41:50 -0700 > John Rudd <[EMAIL PROTECTED]> wrote: > >> Do you have any thoughts about how we can get the stats to you, so that >> you can use them, without bypassing our mechanism for ensuring >> consistent and safe updating of our virus signatures? >

Re: [Clamav-users] Announcing ClamAV 0.94.1 RC1

2008-10-17 Thread christian
On Thu, Oct 16, 2008 at 09:11:16PM -0500, René Berber wrote: > Has anyone seen a problem testing with the contents of test/.split? > > In particular 'clamscan test/.split/split.clam.exe.htmlaa' just holds > the CPU at 100% for a long time... I've killed it on two runs. no problem here: test/.sp

Re: [Clamav-users] Announcing ClamAV 0.94.1 RC1

2008-10-17 Thread Walter Bürger
Compiles cleanly on OpenBSD 4.3 Release i386 on AMD Opteron Best regards, Walter. signature.asc Description: OpenPGP digital signature ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

[Clamav-users] False positive

2008-10-17 Thread Matthew Newton
Hi, We've got a user whose files are being detected as "Worm.Mydoom.M.log". These ones all happen to be PDF files saved from Word 2007. There is an example at the following URL: http://www.le.ac.uk/its/mcn4/clamav/incorrect_mydoom_detect.pdf I submitted the file via the clamav web page a few day

Re: [Clamav-users] False positive

2008-10-17 Thread Steve Basford
> Hi, > > We've got a user whose files are being detected as > "Worm.Mydoom.M.log". These ones all happen to be PDF files saved > from Word 2007. I know this doesn't help... but...looks like that name is a "special" hard coded name: special.c: int cli_check_mydoom_log(int desc, const char **vir

Re: [Clamav-users] False positive

2008-10-17 Thread Tomasz Kojm
On Fri, 17 Oct 2008 11:14:20 +0100 Matthew Newton <[EMAIL PROTECTED]> wrote: > Hi, > > We've got a user whose files are being detected as > "Worm.Mydoom.M.log". These ones all happen to be PDF files saved > from Word 2007. > > There is an example at the following URL: > http://www.le.ac.uk/its/m

Re: [Clamav-users] announcing ClamAV 0.94.1rc1

2008-10-17 Thread aCaB
[EMAIL PROTECTED] wrote: > gcc 4.0.1 caused configuration failure with PR bug 28045 Just a FYI... Apple has released a new Xcode pack with a working gcc. It's a bit annoying as it requires to register on apple developers site and to download a whole dvd image but it works perfectly with -O2 -aCa

Re: [Clamav-users] False positive

2008-10-17 Thread Matthew Newton
Hi, Thanks both for the useful info. On Fri, Oct 17, 2008 at 11:54:52AM +0100, Steve Basford wrote: > I know this doesn't help... but...looks like that name is a "special" hard > coded name: On Fri, Oct 17, 2008 at 01:32:38PM +0200, Tomasz Kojm wrote: > as a temporary solution you can run the fo

Re: [Clamav-users] False positive

2008-10-17 Thread Tomasz Kojm
On Fri, 17 Oct 2008 15:53:08 +0100 Matthew Newton <[EMAIL PROTECTED]> wrote: > That's great, thanks - all test files I have now scan OK. > > Does the above alter much else in the scanning? No, it doesn't. -- oo. Tomasz Kojm <[EMAIL PROTECTED]> (\/)\. http:/

Re: [Clamav-users] False positive

2008-10-17 Thread Matthew Newton
On Fri, Oct 17, 2008 at 05:23:06PM +0200, Tomasz Kojm wrote: > On Fri, 17 Oct 2008 15:53:08 +0100 > Matthew Newton <[EMAIL PROTECTED]> wrote: > > > That's great, thanks - all test files I have now scan OK. > > > > Does the above alter much else in the scanning? > > No, it doesn't. Excellent, th

Re: [Clamav-users] solaris10 crashes in cli_ole2_extract with 0.94

2008-10-17 Thread Hans Morten Kind
On Fri, Oct 17, 2008 at 09:50:50AM +0300, Török Edwin wrote: > Is it the latest Sun compiler? > Does it also crash if you don't use any optimizations? (CFLAGS only -g) > Does it crash if you use gcc? I have reinstalled 0.94 using gcc, the problem disappered. I have tested both with 32 and 64-bit c

Re: [Clamav-users] solaris10 crashes in cli_ole2_extract with 0.94

2008-10-17 Thread Török Edwin
On 2008-10-17 19:54, Hans Morten Kind wrote: > On Fri, Oct 17, 2008 at 09:50:50AM +0300, Török Edwin wrote: > >> Is it the latest Sun compiler? >> Does it also crash if you don't use any optimizations? (CFLAGS only -g) >> Does it crash if you use gcc? >> > > I have reinstalled 0.94 using gc

Re: [Clamav-users] Announcing ClamAV 0.94.1 RC1

2008-10-17 Thread James Kosin
Nigel Horne wrote: > Folks, > > We are pleased to announce the availability of the first release candidate > for ClamAV 0.94.1. 0.94.1RC1 is scheduled for release on Wednesday (15/10/08). > Nigel, Everything works on gcc-3.3.6 with Redhat FC1. I managed to install check and perform the checks

[Clamav-users] Warning while building ClamAV 0.94.1 RC1

2008-10-17 Thread Jason Bertoch
Are the following warnings anything to worry about, or is this a libmilter issue? clamav-milter.c: In function ‘clamfi_connect’: clamav-milter.c:2868: warning: passing argument 1 of ‘hosts_ctl’ discards qualifiers from pointer target type clamav-milter.c: In function ‘clamfi_eom’: c

Re: [Clamav-users] Warning while building ClamAV 0.94.1 RC1

2008-10-17 Thread Török Edwin
On 2008-10-17 21:26, Jason Bertoch wrote: > Are the following warnings anything to worry about, or is this a libmilter > issue? > > > clamav-milter.c: In function ‘clamfi_connect’: > clamav-milter.c:2868: warning: passing argument 1 of ‘hosts_ctl’ discards > qualifiers from pointer target

Re: [Clamav-users] solaris10 crashes in cli_ole2_extract with 0.94

2008-10-17 Thread Hans Morten Kind
> Please do open a bug and attach the file that was crashing when compiled > with the old Sun C. Have done, however the servers runnning solaris10 were already upgraded, so the bug reported is produced on solaris9 with an even older SUNWspro. hmk ___

Re: [Clamav-users] Announcing ClamAV 0.94.1 RC1

2008-10-17 Thread Jan Pieter Cornet
On Fri, Oct 17, 2008 at 08:19:54AM +0200, Tomasz Kojm wrote: > On Thu, 16 Oct 2008 17:41:50 -0700 > John Rudd <[EMAIL PROTECTED]> wrote: > > > Do you have any thoughts about how we can get the stats to you, so that > > you can use them, without bypassing our mechanism for ensuring > > consistent