[clamav-users] ClamAV detecting SSN in mail

2012-04-18 Thread Stephen Guglielmo
Hello, I have a mail system with virus filtering via ClamAV. It has been working well, I've tested it with the EICAR check successfully. However, ClamAV has been detecting false positives in certain emails with the detection "Heuristics.Structured.SSN." This is the most recent email it flagged as

Re: [clamav-users] ClamAV detecting SSN in mail

2012-04-18 Thread Török Edwin
On 04/18/2012 06:38 PM, Stephen Guglielmo wrote: > Hello, > > I have a mail system with virus filtering via ClamAV. It has been > working well, I've tested it with the EICAR check successfully. > However, ClamAV has been detecting false positives in certain emails > with the detection "Heuristics.

Re: [clamav-users] trouble compiling clamav 0.97.4 -> Just a general comment on programming and error messages.

2012-04-18 Thread Jim Preston
On 04/17/2012 09:15 AM, Jasowicz, Artur wrote: Jasowicz, You forced configure to skip a check which is there in order to avoid us being flooded with "clamd crashed" bug reports where bzip2 really fails. Configure obeys but it tells you that you are on your own. If you clamd crashes, good luck. Of

[clamav-users] clamd network mode

2012-04-18 Thread Tom Goerger
Hi, We're running clamav on our mta servers right now, each in local mode. We're experiencing some high loads causing mail delays on these servers, and are trying to offload some of their resources. It seems from some of the language in the clamd conf file that there's a way to use clamd in a ne

Re: [clamav-users] Google Chrome infected?

2012-04-18 Thread Frank Chan
On 12-04-2012 20:09, Frank Chan wrote: On 11-04-2012 17:33, Frank Chan wrote: On 11-04-2012 16:08, Alain Zidouemba wrote: Frank, This is a FP that has already been taken care of. Please update your signatures and let us know if you run into any problems. Thanks, -Alain On Apr 11, 2012, at 7

Re: [clamav-users] Google Chrome infected?

2012-04-18 Thread Alain Zidouemba
What is the file being detected as? What is the MD5 for the file being detected? - Alain On Wed, Apr 18, 2012 at 1:38 PM, Frank Chan wrote: > On 12-04-2012 20:09, Frank Chan wrote: >> >> On 11-04-2012 17:33, Frank Chan wrote: >>> >>> On 11-04-2012 16:08, Alain Zidouemba wrote: Frank, >

Re: [clamav-users] clamd network mode

2012-04-18 Thread Rob Sterenborg (Lists)
On Wed, 2012-04-18 at 12:13 -0500, Tom Goerger wrote: > Hi, > > We're running clamav on our mta servers right now, each in local mode. > We're experiencing some high loads causing mail delays on these servers, I can imagine if you're using clamscan. > and are trying to offload some of their res

Re: [clamav-users] trouble compiling clamav 0.97.4 -> Just a general comment on programming and error messages.

2012-04-18 Thread Chuck Swiger
On Apr 18, 2012, at 10:25 AM, Jim Preston wrote: > Too many times error messages are meaningless to almost anyone who is not > part of the build team. That's may well be true in general, but ClamAV is open source: you've got the source code and build infrastructure available to inspect and deter

[clamav-users] False positive phishing

2012-04-18 Thread Daniel Gomes
Hello. I am not receiving a legitimate email from hsbc.com.br that have a attachment .hmtl. This message is classificated as a Heuristics.Phishing.Email.SpoofedDomain. Can you help me? -- Daniel Gomes ___ Help us build a comprehensive ClamAV guide: vi

Re: [clamav-users] Google Chrome infected?

2012-04-18 Thread Frank Chan
On 18-04-2012 10:42, Alain Zidouemba wrote: What is the file being detected as? What is the MD5 for the file being detected? - Alain On Wed, Apr 18, 2012 at 1:38 PM, Frank Chan wrote: On 12-04-2012 20:09, Frank Chan wrote: On 11-04-2012 17:33, Frank Chan wrote: On 11-04-2012 16:08, Alain Zi

[clamav-users] false possitives for CVE_2012_0773-2?

2012-04-18 Thread Arthur Douwes
Hi, After freshclam updated the virusdatabase last night (17th april) on our server the virusscanner reported the CVE_2012_0773-2 virus in several flash files. The problem is that some of those files are from 2007 and have never been changed. Other virusscanners don't give any warnings on the

Re: [clamav-users] false possitives for CVE_2012_0773-2?

2012-04-18 Thread Alain Zidouemba
Arthur, This is a FP that we are aware about and should be fixed momentarily. Thanks, - Alain On Wed, Apr 18, 2012 at 5:27 PM, Arthur Douwes wrote: > Hi, > > After freshclam updated the virusdatabase last night (17th april) on our > server the virusscanner reported the CVE_2012_0773-2 virus i