Re: [Clamav-users] freshclam fails, but tries only one IP address

I wrote: >It seems that freshclam had created a mirrors.dat file that completely >ruined its ability to try more than one fixed IP address, even when the >mirror at that address failed. Deleting mirrors.dat only worked for a short time; it has now reverted to again only trying 62.236.254.228, whi

Re: [Clamav-users] need to know the scanned file contains .EXE files

> I have requirement that if the scanned archive file contains .EXE > file, i need to delete the archive files itself. > is the a way i can find out the scanned archives contains .EXE file? Check http://untroubled.org/mailfront/plugin-patterns.html for a list with executable content and make a f

[Clamav-users] smfi_register failure

Hi All, I unsuccessfully tried to use clamav 0.942 on a intel server with a debian system (2.6.18) whereas I had no problem on many others servers before. I previously compilled sendmail 8.14.3 and its libmilter directory (./ Build and ./Build install) without any error message. clamav is bui

[Clamav-users] need to know whether the archive contains .exe files

Hi , I have requirement that if the scanned archive file contains .EXE file, i need to delete the archive files itself. is the a way i can find out the scanned archives contains .EXE file? Regards, M.Sudakar ___ Help us build a comprehensive ClamAV guid

[Clamav-users] Best Practice Webinar

Folks, Edwin's Webinar given last week on the topic of best practice and common pitfalls in ClamAV is now available for download from http://www.sourcefire.com/resources/CAV-webcast-access. The presentation covers common pitfalls in the deployment of ClamAV, such as permissions, resource limits

[Clamav-users] need to know the scanned file contains .EXE files

Hi , I have requirement that if the scanned archive file contains .EXE file, i need to delete the archive files itself. is the a way i can find out the scanned archives contains .EXE file? Thanks & Regards, M.Sudakar ___ Help us build a comprehensive Cl

[Clamav-users] support.cab false positive

Hi, This possible false positive is too large (4.58 MB) to be submitted via the ClamAv virus sample submission form. How can I report it? C:\SwSetup\VALADD\SUPPORT\TOOLS\SUPPORT.CAB: Trojan.Agent-62881 FOUND The file, dated 2004, appears to be legitimate, and I also found this discussion indic

Re: [Clamav-users] need to know the scanned file contains .EXE files

H Maurice Lucas/clamav-users, Thanks for your reply. The requirment is that when user upload files(zip,tar,etc..) i need to scan them, if the file contains "virus or exe" then i need to delete them. Here is how i am planning to implement it. 1.From java i execute the unix command as "clamscan ",

Re: [Clamav-users] Sanesecurity Announcement

On Dec 14, 2008, at 1:20 PM, Steve Basford wrote: > 14/12/08 > > Sanesecurity signatures are no longer being updated or distributed due > to extremely high server resource usage, which appears to be from a > distributed denial of service attack (DDoS). I've moved server hosts > twice (which takes

Re: [Clamav-users] need to know the scanned file contains .EXE files

Sent from my iPhone On Dec 15, 2008, at 1:03 PM, "Sudhakar Marimuthu" wrote: > H Maurice Lucas/clamav-users, > > Thanks for your reply. > > The requirment is that when user upload files(zip,tar,etc..) i need to > scan them, if the file contains "virus or exe" then i need to delete > them. > >

Re: [Clamav-users] How to scan MXF file?

On Sat, Dec 13, 2008 at 12:33 AM, Török Edwin wrote: > On 2008-12-13 02:44, Aleksey Tsalolikhin wrote: >> Hi. I am running ClamAV 0.94.2 on Ubuntu 8.10 (Desktop, 64-bit.) >> >> I have 29 GB .mxf file I want to check for viruses. >> >> When I run clamscan, it prints >> >> >> Scanned Files: 1 >> Da

Re: [Clamav-users] Can I force ClamAV to scan a data file?

On Fri, Dec 12, 2008 at 6:42 PM, Dennis Peterson wrote: > Aleksey Tsalolikhin wrote: >> Hi. I just created a 250 MB file, using >> >> dd if=/dev/zero of=file.dat >> >> When I tried to run clamscan on it, I got "Scanned Files: 1 Data >> Scanned: 0.00 MB" >> >> So clamscan didn't actually

Re: [Clamav-users] How to scan MXF file?

On 2008-12-15 21:14, Aleksey Tsalolikhin wrote: > It's supposed to contain media files. > > Is there any way to force ClamAV to scan the file, please? > > We have a business requirement to be able to say, yes, we scan all our > files for viruses. > > I understand that technically it can't contain a

Re: [Clamav-users] Can I force ClamAV to scan a data file?

On 2008-12-15 21:15, Aleksey Tsalolikhin wrote: > On Fri, Dec 12, 2008 at 6:42 PM, Dennis Peterson wrote: > >> Aleksey Tsalolikhin wrote: >> >>> Hi. I just created a 250 MB file, using >>> >>> dd if=/dev/zero of=file.dat >>> >>> When I tried to run clamscan on it, I got "Scanned Files

Re: [Clamav-users] How to scan MXF file?

On Dec 15, 2008, at 11:14 AM, Aleksey Tsalolikhin wrote: > Is there any way to force ClamAV to scan the file, please? Of course. Use "clamscan --max-scansize=0" or set MaxScanSize 0 in clamd.conf if you are using clamdscan + clamd. -- -Chuck ___ He

Re: [Clamav-users] Can I force ClamAV to scan a data file?

On Mon, Dec 15, 2008 at 11:28 AM, Török Edwin wrote: > > Works for me: > $ clamscan --max-scansize=250M --max-filesize=250M file.dat > file.dat: OK That's great. I was trying to edit the conf files, but with the command-line options, clamscan scans my big files. Many thanks, Török! Aleksey ___

Re: [Clamav-users] How to scan MXF file?

Totally got it, thanks all for responding. I'll look into auto-unwrapping the MXF file prior to scan, too, so we can do a "deeper" scan of the MXF bundle. Best, Aleksey ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://

[Clamav-users] clamdscan getting inode_permission denial on Ubuntu 8.10

Hi. So I've scanned 173 Gigs of data using clamscan, and it took 3 hours. I have a quad core CPU, and the clamscan process used 100% of one of the cores, and the other 3 were idle. So I want to try clamdscan, to benefit from clamd's multi-threadedness. But clamdscan exits with "Access denied" a