[Clamav-users] Ubuntu package and Clamuko

Hello, I'm using Ubuntu 9.04 and clamav-0.95.2 package. When I set "ClamukoScanOnAccess yes" and "ClamukoScanOnOpen yes" in clamd.conf, the daemon logs that message: Clamuko is not available. Is there any another package to install ? regards, Fred

Re: [Clamav-users] DHL invoices

On 2009-09-24 01:02, Jari Fredriksson wrote: >> I am a tad confused about your reporting comment as the >> clamav web reporting mechanism works fine at least for me >> and you can also >> report via virustotal as well. >> >> Anyway glad your happy with your config. >> >> Tom >> >> btw its winnow a

Re: [Clamav-users] DHL invoices

>> Seems to work. I just got this: >> >> -- >> A virus was found: W32/Downldr3.GW >> >> Banned name: .exe,.exe-ms,open.exe >> Scanners detecting a virus: F-PROT Antivirus for UNIX, >> BitDefender >> >> Content type: Virus >> Internal reference

Re: [Clamav-users] DHL invoices

Hello Jari, > clamav NOW detects that even without pua, things updated. > But the older DHL-incoices. No. Not even with detect-pua=yes. what does the form answer you when you try to submit it? It should reject it with a message. That message can help us to track down the issue. Best regards -

Re: [Clamav-users] DHL invoices

> Hello Jari, > >> clamav NOW detects that even without pua, things updated. >> But the older DHL-incoices. No. Not even with >> detect-pua=yes. > > what does the form answer you when you try to submit it? > It should reject it with a message. > > That message can help us to track down the issu

Re: [Clamav-users] DHL invoices

On 2009-09-24 16:01, Jari Fredriksson wrote: >> Hello Jari, >> >> >>> clamav NOW detects that even without pua, things updated. >>> But the older DHL-incoices. No. Not even with >>> detect-pua=yes. >>> >> what does the form answer you when you try to submit it? >> It should reject it w

Re: [Clamav-users] DHL invoices

Hello Jari, > >> clamav NOW detects that even without pua, things updated. > >> But the older DHL-incoices. No. Not even with > >> detect-pua=yes. > > what does the form answer you when you try to submit it? > > It should reject it with a message. > > That message can help us to track down the i

Re: [Clamav-users] DHL invoices

> Yeah, we already know that. Can you please cut&paste the full message > returned by the form? Thanks, Hi Luca, I've *just* uploaded 4 copies of the dhl invoice malware that have been missed by up-to-date official sigs. These were blocked using Sanesecurity.Malware.12505.UNOFFICIAL. Hope it h

Re: [Clamav-users] DHL invoices

At 2:19 PM +0100 9/24/09, Steve Basford wrote: > Yeah, we already know that. Can you please cut&paste the full message returned by the form? Thanks, Hi Luca, I've *just* uploaded 4 copies of the dhl invoice malware that have been missed by up-to-date official sigs. These were blocked using

Re: [Clamav-users] DHL invoices

At 9:53 AM -0400 9/24/09, Tom Shaw wrote: At 2:19 PM +0100 9/24/09, Steve Basford wrote: > Yeah, we already know that. Can you please cut&paste the full message returned by the form? Thanks, Hi Luca, I've *just* uploaded 4 copies of the dhl invoice malware that have been missed by up-to-da

Re: [Clamav-users] DHL invoices

> On 2009-09-24 16:01, Jari Fredriksson wrote: >>> Hello Jari, >>> >>> clamav NOW detects that even without pua, things updated. But the older DHL-incoices. No. Not even with detect-pua=yes. >>> what does the form answer you when you try to submit it? >>> It should reject it

[Clamav-users] GTUBE test pattern not being picked up

ClamAV does not pick up the GTUBE test pattern. GTUBE - the Generic Test for Unsolicited Bulk Email. This is one of the tests that nospamtoday uses. See: http://www.nospamtoday.com/emailsecurity/ Is this because it is redundant because of the Eicar test signature? James. _