Re: [Clamav-users] ClamAV 0.96 and memory usage

2010-06-10 Thread Török Edwin
On 06/09/2010 11:34 AM, Vivien Raoul wrote: > I tried to renice clamd with a priority of 19. It doesn't change the > behaviour of scanning while I'm browsing, and the reload process doesn't > take more time ; I'd even say it's better since the load average doesn't > climb as high as it did before.

Re: [Clamav-users] ClamAV 0.96 and memory usage

2010-06-10 Thread Vivien Raoul
What exactly do you mean by reload ? The fact is that I can't browse anymore since the selfcheck. It happens almost every hour and lasts between 3 and up to 8 minutes. If I do a force-reload manually (I don't know if it's the same operation) : # time /etc/init.d/clamav-daemon force-reload Stopping

Re: [Clamav-users] ClamAV 0.96 and memory usage

2010-06-10 Thread Török Edwin
On 06/10/2010 12:30 PM, Vivien Raoul wrote: > What exactly do you mean by reload ? The fact is that I can't browse anymore > since the selfcheck. It happens almost every hour and lasts between 3 and up > to 8 minutes. > If I do a force-reload manually (I don't know if it's the same operation) : >

[Clamav-users] Safebrowsing signatures - how well do they work?

2010-06-10 Thread Andrew Hearn
Hello, I'm thinking of using the SafeBrowsing signatures on our outgoing email relays. We recently had some spam go through that was not caught by anything else, but had URLs that are in the SafeBrowsing database, so thought it would be a good idea to add them. Have other people found SafeBrowsi

Re: [Clamav-users] PUA.HTML.Infected.WebPage-1

2010-06-10 Thread Arnaud Jacques
Hello, Le Thursday 03 June 2010 13:05:39 Jiri Reischig, vous avez écrit : > Hi all, > > is it possible find anywhere information what "PUA.HTML.Infected.WebPage" > exactly means if it's detected in the file? > > It's look like that it detects files with iframe html tag. > When yes it can detect a

Re: [Clamav-users] Problem with lha, lzh, uuencode and pgp files

2010-06-10 Thread DAVID BERTHIAU
On 2010-06-09 12:41, Török Edwin wrote: > On 06/09/2010 03:12 PM, DAVID BERTHIAU wrote: > > Hello, > > > > I have installed clamav with squidclam for a proxy (0.96 with package and > > 0.96.1 with sources) but when I test it with eicar files Ø > > (found on http://techlabs.bluecoat.com/) the ei

Re: [Clamav-users] Problem with lha, lzh, uuencode and pgp files

2010-06-10 Thread Török Edwin
On 2010-06-10 17:20, DAVID BERTHIAU wrote: > > > On 2010-06-09 12:41, Török Edwin wrote: >> On 06/09/2010 03:12 PM, DAVID BERTHIAU wrote: >> > Hello, >> > >> > I have installed clamav with squidclam for a proxy (0.96 with package > and 0.96.1 with sources) but when I test it with eicar files >

Re: [Clamav-users] ClamAV 0.96 and memory usage

2010-06-10 Thread Vivien Raoul
Thank you for the patch. I applied it, the force-reload seems to be (really) faster. I'll tell you if I see changes on selfchecks. 2010/6/10 Török Edwin > On 06/10/2010 12:30 PM, Vivien Raoul wrote: > > What exactly do you mean by reload ? The fact is that I can't browse > anymore > > since the

Re: [Clamav-users] ClamAV 0.96 and memory usage

2010-06-10 Thread Vivien Raoul
Actually, I'm not sure of what I did ; I couldn't apply the patch with "patch", and I made the changes manually ; but it seems that all the free() are in the #if 0 block. What is exactly your patch supposed to do ? 2010/6/10 Vivien Raoul > Thank you for the patch. I applied it, the force-reload

Re: [Clamav-users] ClamAV 0.96 and memory usage

2010-06-10 Thread Vivien Raoul
2010/6/10 Török Edwin > On 2010-06-10 21:29, Vivien Raoul wrote: > > Actually, I'm not sure of what I did ; I couldn't apply the patch with > > "patch", and I made the changes manually ; but it seems that all the > free() > > are in the #if 0 block. > > What is exactly your patch supposed to do ?

Re: [Clamav-users] ClamAV 0.96 and memory usage

2010-06-10 Thread Török Edwin
On 2010-06-10 22:29, Vivien Raoul wrote: > 2010/6/10 Török Edwin > >> On 2010-06-10 21:29, Vivien Raoul wrote: >>> Actually, I'm not sure of what I did ; I couldn't apply the patch with >>> "patch", and I made the changes manually ; but it seems that all the >> free() >>> are in the #if 0 block.

Re: [Clamav-users] ClamAV 0.96 and memory usage

2010-06-10 Thread Török Edwin
On 2010-06-10 21:29, Vivien Raoul wrote: > Actually, I'm not sure of what I did ; I couldn't apply the patch with > "patch", and I made the changes manually ; but it seems that all the free() > are in the #if 0 block. > What is exactly your patch supposed to do ? If ClamAV is built with memory poo

Re: [Clamav-users] Problem with lha, lzh, uuencode and pgp files

2010-06-10 Thread DAVID BERTHIAU
-Message d'origine- De : Török Edwin [mailto:edwinto...@gmail.com] Envoyé : jeudi 10 juin 2010 16:28 À : DAVID BERTHIAU Cc : clamav-users Objet : Re: [Clamav-users] Problem with lha, lzh, uuencode and pgp files On 2010-06-10 17:20, DAVID BERTHIAU wrote: >> >> >> On 2010-06-09 12:41, TÃ

Re: [Clamav-users] Problem with lha, lzh, uuencode and pgp files

2010-06-10 Thread Sarocet
DAVID BERTHIAU wrote: >> None of the AVs detect that (and none should, it is an encrypted file): >> http://www.virustotal.com/analisis/21c94279acf534fe49c32289dbe22cff12ec1006>b09ef2e6ac31066e2d943cfb-1276179996 >> > Sorry, but I am not agree with you because my current system (trend micro >