Re: [clamav-users] Generating a positive?

2014-04-21 Thread Bowie Bailey
On 4/21/2014 3:12 PM, Dave Shevett wrote: Hi everyone - we have clamav now running happily via cron job and integrated with puppet. Problem is I want to have it successfully find something so I can test our notification mechanism. "Infect one of my servers" seems a big gruesome. Is there an ea

Re: [clamav-users] clamav stops boot

2014-05-02 Thread Bowie Bailey
On 5/2/2014 11:21 AM, Alain Zidouemba wrote: The ClamAV engine won't update itself automatically. You will have to manually perform that operation. The latest version of ClamAV (version 0.98.1) can be downloaded here: http://www.clamav.net/lang/en/download/sources/ Or, if ClamAV was installed f

Re: [clamav-users] clamav stops boot

2014-05-02 Thread Bowie Bailey
On 5/2/2014 12:16 PM, Greg Mueller wrote: I can't get to anything yet. It won't go past the out of date adviso It has to be something else causing the hang. That notice is just a warning message and should not affect the boot process. Have you tried booting into single user mode? I don't k

Re: [clamav-users] clamav stops boot

2014-05-02 Thread Bowie Bailey
On 5/2/2014 12:32 PM, Greg Mueller wrote: I found a selection in the GRUB page that is for recovery (it says) so I'm trying various options from that. CTR-C didn't work nor CTRL-Q If it's using Grub to boot, then you should be able to get to single user mode by editing the grub boot options

Re: [clamav-users] Version 0.98.3 hard loops on "clamdscan -V"

2014-05-09 Thread Bowie Bailey
On 5/8/2014 10:35 PM, Eric Shubert wrote: [root@qmt-cos5 etc]# grep -v ^# clamd.conf | grep -v ^$ Inefficiency bugs me... You can do multiple patterns with a single grep using the -e flag. grep -v -e ^# -e ^$ clamd.conf -- Bowie ___ Help us build

Re: [clamav-users] Version 0.98.3 hard loops on "clamdscan -V"

2014-05-12 Thread Bowie Bailey
On 5/9/2014 7:41 PM, Dennis Peterson wrote: On 5/9/14, 7:33 AM, Bowie Bailey wrote: On 5/8/2014 10:35 PM, Eric Shubert wrote: [root@qmt-cos5 etc]# grep -v ^# clamd.conf | grep -v ^$ Inefficiency bugs me... You can do multiple patterns with a single grep using the -e flag. grep -v -e ^# -e

Re: [clamav-users] reported before, makes no sense

2014-05-16 Thread Bowie Bailey
On 5/16/2014 6:39 AM, Steve Basford wrote: -rw-r--r-- 1 clamav adm 5958972 2013-05-03 07:51 junk.ndb That's a bit out of date ;) -rw-r--r-- 1 clamav adm 567741 2013-05-04 01:48 mbl.ndb JUST NUKED I'll see if the one I just nuked comes back. Yep, that'll be the one to watch out for.

Re: [clamav-users] reported before, makes no sense

2014-05-16 Thread Bowie Bailey
On 5/16/2014 9:52 AM, Kris Deugau wrote: Bowie Bailey wrote: I highly recommend the Sanesecurity signatures. They catch much more than the stock signatures. They also catch spam, scam, phishing, and other misc junk emails. I haven't had any problems with false positives. Here&

Re: [clamav-users] Bad detection rate

2014-06-24 Thread Bowie Bailey
On 6/24/2014 9:53 AM, Walter Bürger wrote: Hi dear ClamAV team, I submitted the same file as yesterday to virustotal.com: Rechnung_23_14_06_198630274520031_telekom_deutschland_GmbH.exe (MD5 ad690be247dda635781e20887fcac0e7) 30 out of 54 scanners detected a virus (NOD32 named it Win32/Emotet.AA

Re: [clamav-users] Warning in ClamAV update process

2014-09-11 Thread Bowie Bailey
On 9/11/2014 4:25 PM, Joel Esler (jesler) wrote: On Sep 11, 2014, at 7:15 AM, Gene Heskett mailto:ghesk...@wdtv.com>> wrote: On Thursday 11 September 2014 05:10:52 Tommy Berglund did opine And Gene did reply: Den 2014-09-11 09:59, Al Varnell skrev: On Thu, Sep 11, 2014 at 12:27 AM, Tommy Berglu

Re: [clamav-users] Clamav on Debian

2015-01-13 Thread Bowie Bailey
On 1/13/2015 10:17 AM, Richard Thibaudeau wrote: Hi everyone For at least two weeks I'm searching the Internet to find a solution to: root@debian:/# freshclam ERROR: Parse error at line 4: Unknown option LocalSocket ERROR: Can't open/parse the config file /etc/clamav/freshclam.conf I don't th

Re: [clamav-users] [Fwd: securiteinfo problems]

2015-04-24 Thread Bowie Bailey
On 4/24/2015 6:29 AM, Cedric Knight wrote: 2) Is anyone else using the new SI system via freshclam willing to report on it? Thanks. I have been using it since it was announced in March. It seems to work fine. -- Bowie ___ Help us build a comprehe

Re: [clamav-users] problem reading socket while updating database

2015-07-08 Thread Bowie Bailey
On 7/7/2015 4:31 PM, Kris Deugau wrote: Jingo Administrator wrote: Already more than a week ago I posted my first question to the list. I must admit I'm a bit disappointed that nobody responds. Is it that I asked a silly question? Or is the issue just to hard to solve and just nobody wants to bu

Re: [clamav-users] problem reading socket while updating database

2015-07-08 Thread Bowie Bailey
On 7/8/2015 11:11 AM, Jingo Administrator wrote: The system is a VIA PC3500G Motherboard with an onboard VIA Esther processor 1500MHz. So, indeed, nothing special or heavy, I know, although it's dedicated:-) . Scanning is not the bottleneck, reloading the database is. Before this server I had a m

Re: [clamav-users] problem reading socket while updating database

2015-07-08 Thread Bowie Bailey
I have a personal mail server at home too. It runs clamav with the base sigs and spamassassin. It is a small atom-based server and takes about 1 minute to reload the base sigs. I've never noticed any problems related to the reload time. In fact, I wasn't even aware that it was taking that l

[clamav-users] gpg key

2015-07-16 Thread Bowie Bailey
Where can I find the gpg key for the clamav tarball? I've poked through the website and sourceforge and can't find it anywhere. -- Bowie ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/cont

Re: [clamav-users] gpg key

2015-07-16 Thread Bowie Bailey
VRT On Thu, Jul 16, 2015 at 08:21 AM, Bowie Bailey wrote: Where can I find the gpg key for the clamav tarball? I've poked through the website and sourceforge and can't find it anywhere. Wow. They certainly buried it well enough! You would think they would put a link on the down

Re: [clamav-users] gpg key

2015-07-17 Thread Bowie Bailey
On 7/16/2015 7:33 PM, Joel Esler (jesler) wrote: On Jul 16, 2015, at 2:45 PM, Bowie Bailey mailto:bowie_bai...@buc.com>> wrote: On 7/16/2015 1:30 PM, Al Varnell wrote: Start with the Documentation page for Upgrading ClamAV: <http://www.clamav.net/doc/upgrade.html> • How do

Re: [clamav-users] [Fwd: [sanesecurity] Hacking Team detection]

2015-08-07 Thread Bowie Bailey
On 8/7/2015 9:20 AM, Gene Heskett wrote: On Friday 07 August 2015 04:46:31 Steve Basford wrote: Just in case it's useful... Original Message Subject: [sanesecurity] Hacking Team detection From:"Steve Basford" Date:Fri, August 7

Re: [clamav-users] [Fwd: [sanesecurity] Hacking Team detection]

2015-08-10 Thread Bowie Bailey
On 8/7/2015 6:30 PM, Gene Heskett wrote: On Friday 07 August 2015 16:58:09 Al Varnell wrote: Gene, It’s on the sanesecurity.net mirror sites, not the ones clamav.net provides, so freshclam isn’t going to find those. As Steve said earlier, you would have to install, configure and use the downl

Re: [clamav-users] Structured.CreditCardNumber bounce

2016-04-01 Thread Bowie Bailey
On 4/1/2016 11:16 AM, Rob McKennon wrote: On 04/01/2016 11:01 AM, Vladislav Kurz wrote: On Friday 01 of April 2016 Rob McKennon wrote: Hello, One of the reasons we use clamav is to not accept emails with credit card numbers. And it works great to bounce the message back to the sender

Re: [clamav-users] Structured.CreditCardNumber bounce

2016-04-01 Thread Bowie Bailey
On 4/1/2016 11:48 AM, Rob McKennon wrote: On 04/01/2016 11:40 AM, Bowie Bailey wrote: On 4/1/2016 11:16 AM, Rob McKennon wrote: On 04/01/2016 11:01 AM, Vladislav Kurz wrote: On Friday 01 of April 2016 Rob McKennon wrote: Hello, One of the reasons we use clamav is to not accept emails

Re: [clamav-users] Supported Operating Systems

2016-06-09 Thread Bowie Bailey
On 6/9/2016 8:24 AM, Van Dalsen, Herbie wrote: Hi all, I would please like to know if clamav is supported on HP-UX, and where I can get the manuals to install on HP-UX. I haven't tried it on HP-UX, but ClamAV should be fairly easy to install on any standard Linux/Unix system. If there are n

Re: [clamav-users] Supported Operating Systems

2016-06-09 Thread Bowie Bailey
install ClamAV to a server so that it is accessible via HTTP? Id like to do scans from http. Thanks, Joe On Jun 9, 2016, at 8:46 AM, Bowie Bailey wrote: On 6/9/2016 8:24 AM, Van Dalsen, Herbie wrote: Hi all, I would please like to know if clamav is supported on HP-UX, and where I can get

Re: [clamav-users] Understanding OLE2BlockMacros

2016-08-25 Thread Bowie Bailey
On 8/25/2016 2:39 PM, Alex wrote: Hi, When this option is set to Yes, the emails are tagged, but even emails with macro virus attachments are forwarded on, not blocked problem is that you don't understand your mailsystem, clamd itself only hives back with signatures are hit and then the glue (

Re: [clamav-users] Understanding OLE2BlockMacros

2016-08-25 Thread Bowie Bailey
On 8/25/2016 3:10 PM, Steve Basford wrote: Try this: 1) Enable OLE2BlockMacros and restart clamd 2) Use clamdscan to test your sample message and note the results 3) Disable OLE2BlockMacros and restart clamd 4) Use clamdscan to test your sample message again and note these results Something el

Re: [clamav-users] Understanding OLE2BlockMacros

2016-08-25 Thread Bowie Bailey
On 8/25/2016 4:20 PM, Dennis Peterson wrote: On 8/25/16 1:10 PM, Bowie Bailey wrote: On 8/25/2016 3:10 PM, Steve Basford wrote: Try this: 1) Enable OLE2BlockMacros and restart clamd 2) Use clamdscan to test your sample message and note the results 3) Disable OLE2BlockMacros and restart clamd 4

Re: [clamav-users] Understanding OLE2BlockMacros

2016-08-26 Thread Bowie Bailey
On 8/25/2016 7:06 PM, Alex wrote: Hi, Try this: 1) Enable OLE2BlockMacros and restart clamd 2) Use clamdscan to test your sample message and note the results 3) Disable OLE2BlockMacros and restart clamd 4) Use clamdscan to test your sample message again and note these results Very constructiv

Re: [clamav-users] Any way to force scan as mail?

2017-03-01 Thread Bowie Bailey
On 3/1/2017 1:00 PM, G.W. Haywood wrote: Hello again, On Wed, 1 Mar 2017, Carlos Velasco wrote: G.W. Haywood wrote: > Your conjecture is incorrect. Neither of those things is a properly > formed mail message. I'd describe them as jumbled up collections of > bits and pieces of things which mi

[Clamav-users] Source signature download problem

2009-06-30 Thread Bowie Bailey
When I attempt to download the 0.95.2 source and signature from the clamav.net web page, I get a "400 Bad Request" error. Bowie ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] Source signature download problem

2009-06-30 Thread Bowie Bailey
Bowie Bailey wrote: When I attempt to download the 0.95.2 source and signature from the clamav.net web page, I get a "400 Bad Request" error. It's apparently a problem with the download link to Sourceforge. I see that they have changed their site recently, so maybe that's

Re: [Clamav-users] Some Virus not detected by Clamav

2009-10-14 Thread Bowie Bailey
upscope wrote: > On Wednesday 14 October 2009 12:49:47 am Jose-Marcio Martins da Cruz wrote: > >> Hello Tom, >> >> Tom Shaw wrote: >> >>> Jose, >>> >>> If you use the unofficial signatures it might help you. See >>> http://www.sanesecurity.co.uk/databases.htm >>> >> I'll integrate wi

Re: [Clamav-users] How does Clam stand up to Commercial A/V?

2009-12-04 Thread Bowie Bailey
Dennis Peterson wrote: > > $ awk '/FOUND/ {print $(NF-1)}' clamd.log[0-4] |sort |wc -l > 637 > $ awk '/FOUND/ {print $(NF-1)}' clamd.log[0-4 |sort -u |wc -l > 73 > $ awk '/FOUND/ {print $(NF-1)}' clamd.log[0-4] |sort -u |grep -c > Sanesecur > 43 > $ awk '/FOUND/ {print $(NF-1)}' clamd.log[0-4] |sor

Re: [Clamav-users] Clamd hanging on startup

2010-01-26 Thread Bowie Bailey
Peter Stoffberg wrote: > Thanks so much Edwin! > > The problem was with the swap setup. A2's vps servers are not > configured with any swap space! Having only ever worked with my own > configured servers I never even thought to check this out. I added > 512MB of swap just using a file and it's now

Re: [Clamav-users] exclude multiple directories howto

2010-01-27 Thread Bowie Bailey
monte olvera wrote: > Hello, I'm running linux (fedora 11) and clamav (0.95.3) and I need to > exclude multiple directories but am having trouble, any ideas? > > > [r...@conrad testClam]# /opt/clamav/bin/clamscan > --exclude-dir=/tmp/testClam/test --exclude-dir=/tmp/testClam/test1 -r > /tmp/testCla

Re: [Clamav-users] Getting "***UNCHECKED***" on some emails I send out.

2010-02-25 Thread Bowie Bailey
Jerry wrote: > > Lets take this from the top. > > You, and other advocates of enforced screening of sent e-mail are > assuming that all individuals who send e-mail would abide by that > edict. Obviously you know that is a false assumption. Spammers > obviously would not adhere to that edict; nor wo

Re: [Clamav-users] [Bulk] Re: Getting "***UNCHECKED***" on some emails I send out.

2010-02-26 Thread Bowie Bailey
Jerry wrote: > On Thu, 25 Feb 2010 16:40:13 -0500 > Bowie Bailey articulated: > > >> Abide by what edict? Email marked as containing a virus is simply >> rejected. If a spammer or bot wishes to send out viruses from my >> network, they'll have to by

Re: [Clamav-users] ClamD Scan is not working on ubuntu9.04

2010-03-05 Thread Bowie Bailey
aman_none wrote: > Hi all, > > I have installed clamav on Ubuntu9.04,but my clamd scan is not working.Any > help would be appreciated. > "Help, it doesn't work!" messages are not very useful. You will need to provide some details before anyone can help you. Which version of ClamAV do you ha

Re: [Clamav-users] Automating freshclam

2010-04-09 Thread Bowie Bailey
Alex wrote: > Hi, > > >> Also, in my installation, the documentation can be found in both clamd.conf >> (under "Perform a database check SelfCheck xxx") and in man clamd.conf >> (under "Directives -> SelfCheck NUMBER"). It does seem a bit vague as only >> in clamd.conf does it indicate what

Re: [Clamav-users] Automating freshclam

2010-04-09 Thread Bowie Bailey
Robert Wyatt wrote: > Bowie Bailey wrote: >> >> I think there is a bit of confusion here between the "SelfCheck" setting >> in clamd.conf and the "Checks" setting in freshclam.conf. >> >> I do see his point with the man page docu

Re: [Clamav-users] File size limit exceeded

2010-04-16 Thread Bowie Bailey
Sasa wrote: > Hi and thank for your support, now I have this situation: > > [r...@mail ~]# clamdscan --version > ClamAV 0.95.2/10751/Fri Apr 16 05:23:45 2010 > > and my clamd.conf is: > > [r...@mail ~]# cat /usr/local/etc/clamd.conf > LocalSocket /var/run/clamav/clamd.sock > FixStaleSocket yes > Us

Re: [Clamav-users] The EOL tweets

2010-04-16 Thread Bowie Bailey
Simon Hobson wrote: > > Today I've gone from having a server that "just runs" and has run with > virtually no oversight for several years to one that "just broke". > > I had to disable AV scanning this morning in order to get the mail > moving, now I've disabled freshclam and rolled back the databa

Re: [Clamav-users] File size limit exceeded

2010-04-16 Thread Bowie Bailey
Sasa wrote: > I have modified in clamd.conf: > > LocalSocket /var/run/clamav/clamd.sock > > and in amavisd.conf: > > \&ask_daemon, ["CONTSCAN {}\n", "/var/run/clamav/clamd.sock > > and then I have restarted mail server but the errore message is always > present and the same situation is present on

Re: [Clamav-users] File size limit exceeded

2010-04-16 Thread Bowie Bailey
Sasa wrote: > yes, I have restart the machine ! > On log file I have this error: > > Apr 16 15:45:43 mail amavis[9710]: (09710-01-3) ClamAV-clamd: Can't > connect to UNIX socket /var/run/clamav/clamd.sock: No such file or > directory, retrying (2) So the error changed. That's the kind of thing we

Re: [Clamav-users] The EOL tweets

2010-04-16 Thread Bowie Bailey
Giampaolo Tomassoni wrote: I don't know of any way to stop freshclam from updating. Some mirrors can blacklist old versions, but not most/all. >>> Using a new DNS tree, such that old freshclam versions were unable to >>> perform the job? >>> >> The DNS servers don't r

Re: [Clamav-users] File size limit exceeded

2010-04-16 Thread Bowie Bailey
t; /var/run/clamav/clamd.sock > > > -- > > Salvatore. > > > > - Original Message - From: "Bowie Bailey" > To: > Sent: Friday, April 16, 2010 3:55 PM > Subject: Re: [Clamav-users] File size limit exceeded > > >> Sasa wrote: >>> yes, I have r

Re: [Clamav-users] The EOL tweets

2010-04-16 Thread Bowie Bailey
Eric Rostetter wrote: > Quoting Bowie Bailey : > >> A suggestion for the future... Rather than disabling clamd with the EOL >> signature, have freshclam key on the signature (or something else about >> the file) and fail the update with a notice that the current version i

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Bowie Bailey
Fred-145 wrote: > azidouemba wrote: > >> ClamAV is not specifically designed to be a host-based AV although you >> can use it as such. If you want a ClamAV solution specially designed to >> run on end systems, check out ClamAV for Windows >> > > Thanks for the link. I assume that ClamAV for

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Bowie Bailey
Fred-145 wrote: > I rebooted and installed "ClamAV for Windows". I have a couple of questions: > Keep in mind that (at the moment), "ClamAV" and "ClamAV for Windows" are two completely unrelated products. > 1. Unless I missed it, the UI only allows scanning stuff in RAM, not files > on hard-di

Re: [Clamav-users] [Windows] How does ClamAV compare with closed-source alternatives?

2010-05-12 Thread Bowie Bailey
Fred-145 wrote: > Alain Zidouemba wrote: > >> The current version of ClamAV for Windows offers on-access scanning. >> On-demand scanning is coming with the next release. >> > > Thanks for the clarification. I didn't know what "on-access scanning" and > "on-demand scanning" meant. So at this

Re: [Clamav-users] Clamscan scanning /sys despite clamd.conf entry

2010-06-15 Thread Bowie Bailey
Damon wrote: >>> In my clamd.conf I've got the entry below, did I screw something >>> >> up? >> >>> # Don't scan files and directories matching regex >>> # This directive can be used multiple times >>> # Default: scan all >>> ExcludePath ^/proc/ >>> ExcludePath ^/sys/ >>> ExcludePath ^/

Re: [Clamav-users] Some questions about clamav update warning messages

2010-07-06 Thread Bowie Bailey
JD wrote: > During update, I got these warning messages: > > > WARNING: Your ClamAV installation is OUTDATED! >My latest fedora rpm packages are: >clamav-0.95.3-1301.fc13.i686 >clamav-update-0.95.3-1301.fc13.i686 >clamav-lib-0.95.3-1301.fc13.i686 >clamav-fil

[Clamav-users] OnOutdatedExecute not working

2010-07-06 Thread Bowie Bailey
In my freshclam.conf file, I have the following line: OnOutdatedExecute 'mail -s "ClamAV %v available" bow...@buc.com < /dev/null > /dev/null' When I execute the mail command as the clamav user, the message comes through, but I don't think freshclam has ever sent the email to me. Does this optio

Re: [Clamav-users] OnOutdatedExecute not working

2010-07-07 Thread Bowie Bailey
Jason Bertoch wrote: > On 2010/07/06 4:55 PM, Bowie Bailey wrote: >> In my freshclam.conf file, I have the following line: >> >> OnOutdatedExecute 'mail -s "ClamAV %v available" bow...@buc.com< >> /dev/null> /dev/null' >> >> When

Re: [Clamav-users] Feedback on clamav + sanesecurity experience

2010-07-21 Thread Bowie Bailey
On 7/20/2010 7:12 PM, Shawn Bakhtiar wrote: > > Checked out GreyListing and Sanesecurity. Both look like really cool tools. > > However, we have been using SpamAssassin, ClamAV, with sendmail (Fedora Core > 8), and zan.spamhaus.org RBL, which does most of the heavy work, of blocking > incoming S

Re: [Clamav-users] CLUES -- CLamAv Unified Event System

2010-09-15 Thread Bowie Bailey
On 9/15/2010 12:47 PM, Török Edwin wrote: > On Tue, 14 Sep 2010 19:41:59 -0400 > Nathan Gibbs wrote: > >> A script to handle all external events in a ClamAV installation. >> >> Well, almost, there is a wrapper for the messed up VirusAction also. >> >> http://www.cmpublishers.com/oss/ > Can't open

Re: [Clamav-users] safe_clamd

2010-10-14 Thread Bowie Bailey
On 10/14/2010 7:05 AM, Luca Gibelli wrote: > Hello, > > starting from the 0.96.2 release, our source tarball includes a script to > automatically restart clamd in case the daemon crashes. > > The script is currently placed in the contrib/ directory. Latest version > is always available from: > >

[clamav-users] SecuriteInfo databases

2011-01-12 Thread Bowie Bailey
Are the SecuriteInfo databases being updated? I see that the current version of the unofficial sigs downloader still has them enabled by default, but on my system, most of them have not changed since last June. Are they still good, or should they be removed? -- Bowie ___

Re: [clamav-users] SecuriteInfo databases

2011-01-13 Thread Bowie Bailey
On 1/13/2011 12:36 AM, Bill Landry wrote: > On 1/12/2011 11:25 AM, Bowie Bailey wrote: >> Are the SecuriteInfo databases being updated? I see that the current >> version of the unofficial sigs downloader still has them enabled by >> default, but on my system, most of them h

Re: [clamav-users] SecuriteInfo databases

2011-01-13 Thread Bowie Bailey
On 1/13/2011 7:46 AM, G.W. Haywood wrote: > Hi there, > > On Thu, 13 Jan 2011 Bowie Bailey wrote: > >> Are the SecuriteInfo databases being updated? I see that the current >> version of the unofficial sigs downloader still has them enabled by >> default, but on my

Re: [clamav-users] updating signatures in an image

2011-01-24 Thread Bowie Bailey
On 1/24/2011 5:41 AM, Voy User wrote: > Hi, > I have a debian image which I use to install Debian onto other boxes. > The image has clamav included. I want to update the image regularly with the > lastest signature updates, so that any time I use the image, it would have the > latest signatures.

Re: [clamav-users] updating signatures in an image

2011-01-24 Thread Bowie Bailey
On 1/24/2011 11:26 AM, Voy User wrote: > On 1/24/2011, Bowie Bailey wrote: >>> On 1/24/2011 5:41 AM, Voy User wrote: >>> Hi, >>> I have a debian image which I use to install Debian onto other boxes. >>> The image has clamav included. I want to update t

Re: [clamav-users] What happened to 12663 ?

2011-02-11 Thread Bowie Bailey
On 2/11/2011 2:17 PM, Jan-Frode Myklebust wrote: > > We have a strong preference to running only RHEL5+EPEL packages, > so we're kind of stuck on 0.95.1 until EPEL updates or we move to > RHEL6+EPEL which gives us clamav-0.96.1. I expect you will have quite > a few users with the same/similar po

Re: [clamav-users] What happened to 12663 ?

2011-02-11 Thread Bowie Bailey
On 2/11/2011 2:59 PM, Bowie Bailey wrote: > On 2/11/2011 2:17 PM, Jan-Frode Myklebust wrote: >> We have a strong preference to running only RHEL5+EPEL packages, >> so we're kind of stuck on 0.95.1 until EPEL updates or we move to >> RHEL6+EPEL which gives us clamav-0.96

Re: [clamav-users] Immunet 3.0 powered by ClamAV

2011-02-22 Thread Bowie Bailey
On 2/20/2011 12:49 PM, Török Edwin wrote: > On 2011-02-19 19:59, Barry Cisna wrote: >> Hello All, >> >> Been using Clamav and Clamwin in our school enviornment for many years >> now. We run into from time to time viruses that get hanged onto our lan >> from kids dragging in stuff that shouldn't be

Re: [clamav-users] Immunet 3.0 powered by ClamAV

2011-02-22 Thread Bowie Bailey
On 2/22/2011 1:01 PM, Török Edwin wrote: > On 2011-02-22 19:50, Bowie Bailey wrote: > >> Will it upgrade ClamAV for Windows 2.0, or do I need to uninstall that >> version first? >> > I think that the upgrade should work, if you launch the installer for > 3.0 manua

Re: [clamav-users] daily database broken again

2011-02-28 Thread Bowie Bailey
On 2/28/2011 10:03 AM, Royce Williams wrote: > For future-proofing purposes, would it be feasible to enable > optionally tagging a signature with its minimum supported ClamAV > version? > > In other words, the entry is tagged with "min 0.98.2", and if you're > running 0.98.1, it ignores it, but com

Re: [clamav-users] daily database broken again

2011-02-28 Thread Bowie Bailey
On 2/28/2011 12:17 PM, Royce Williams wrote: > On Mon, Feb 28, 2011 at 7:39 AM, Bowie Bailey wrote: >> ClamAV 0.96 was released in April of 2010. How much time do you need to >> schedule an upgrade? If my servers were still running an old version a >> month after an update

Re: [clamav-users] Improving Scan Speeds on OS X.4.11

2011-03-16 Thread Bowie Bailey
On 3/16/2011 10:24 AM, Russ Tyndall wrote: > On Mar 15, 2011, at 4:51 PM, Chuck Swiger wrote: > >> One thing you might consider doing is using "find /location -mtime 1" to >> generate a list of which files have been modified over the past day, and >> only scanning these via clamdscan -f. > I expe

Re: [clamav-users] Access has been denied page

2011-04-14 Thread Bowie Bailey
On 4/14/2011 9:31 AM, Antonio Pereira wrote: > Hello, > > I have tried this again today and am getting this message still. Do I need > to do something on my system so it does not filter this? > > -Original Message- > From: clamav-users-boun...@lists.clamav.net > [mailto:clamav-users-boun

Re: [clamav-users] Access has been denied page

2011-04-14 Thread Bowie Bailey
On 4/14/2011 9:49 AM, Antonio Pereira wrote: > Thanks > > I ad put in > MBL_200562.UNOFFICIAL > > instead of > MBL_200562 > > I reloaded clamav and now it works. I would have done the same thing if I hadn't looked at the Sanesecurity file first. I think "UNOFFICIAL" is just a tag that is added on

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Bowie Bailey
On 9/13/2011 1:18 PM, sys...@ra-schaal.de wrote: > Am 13.09.2011 18:01, schrieb Al Varnell: >> On Sep 13, 2011, at 8:15 AM, Dan wrote: >> >>> Yet more failure on 88.198.67.125, this morning. This one is a double. >> I was going to wait a few more days to mention this, but since you bring it >> u

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-15 Thread Bowie Bailey
On 9/14/2011 3:29 AM, sys...@ra-schaal.de wrote: > > i´ll have at look. but i´m moving until september to a new server with > much bandwith (20 TB/month) and a better performance. > > maybe i can setup the mirror on this system on weekend. > > if you can´t connect to 88.198.67.125, you should fall

Re: [clamav-users] Obfuscated IP address.

2011-09-19 Thread Bowie Bailey
On 9/19/2011 11:46 AM, Michael Orlitzky wrote: >> A hostname cannot be all digits and except when the IP is used there >> will be a TLD, so if you see a pattern such as >> >> http:// 123456789/ cgi-bin/innocent_code.pl >> >> (Ignore the spaces they are there to let this post slip by most antispam

Re: [clamav-users] Obfuscated IP address.

2011-09-19 Thread Bowie Bailey
On 9/19/2011 12:16 PM, Michael Orlitzky wrote: > On 09/19/11 12:04, Bowie Bailey wrote: >> He is not trying to match the IP address. He is trying to match an >> unusual way of presenting the IP address that seems to occur primarily >> in spam. >> >> Whether this

Re: [clamav-users] Obfuscated IP address.

2011-09-19 Thread Bowie Bailey
On 9/19/2011 12:46 PM, Bernd Petrovitsch wrote: > On Mon, 2011-09-19 at 12:40 -0400, Bowie Bailey wrote: >> On 9/19/2011 12:16 PM, Michael Orlitzky wrote: >>> On 09/19/11 12:04, Bowie Bailey wrote: >>>> He is not trying to match the IP address. He is trying t

Re: [clamav-users] Scan files by date

2011-10-03 Thread Bowie Bailey
On 9/30/2011 10:56 PM, Nathan Gibbs wrote: > On 9/30/2011 9:37 PM, Rohler, Brian L wrote: >> I have a large number of files (9TB) with over a million files and >> thousands of directories. I would like to scan the group one time so >> I have a good baseline. After that I would like to scan files th

Re: [clamav-users] Scan files by date

2011-10-10 Thread Bowie Bailey
On 10/10/2011 5:28 AM, Matus UHLAR - fantomas wrote: >> On 9/30/2011 10:56 PM, Nathan Gibbs wrote: >>> clamscan itself isn't that smart, but if you are using unix, find could >>> feed a list of things to clamscan. > On 03.10.11 11:34, Bowie Bailey wrote: >

Re: [clamav-users] New user

2011-12-01 Thread Bowie Bailey
On 12/1/2011 10:53 AM, pushpa gouder wrote: > Thanks a lot, very helpful!. I have been researching about this for quite a > while now, If 'clamd' daemon does not scan anything why do they even have > options like "SCAN" "MULTISCAN" "INSTREAM"...etc in its man page, I am just > curious. Those are c

Re: [clamav-users] New user

2011-12-02 Thread Bowie Bailey
On 12/1/2011 7:02 PM, pushpa gouder wrote: > I have passed those arguments to clamd and put eicar.txt.com virus in that > SCAN folder. Nothing happened. But If I use clamsan/clamdscan on command > line it finds it. > > #clamd -h > > Clam AntiVirus Daemon 0.97.2 >By

Re: [clamav-users] clamav can't access socket file

2011-12-06 Thread Bowie Bailey
On 12/6/2011 7:31 AM, Tim Dunphy wrote: > Hi Ged and thank you for your reply. > >> The error message doesn't say that permission was denied, it says that >> the connection was refused. That means that nothing is listening on >> the socket. Maybe the daemon died? > Good question. Although I check

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread Bowie Bailey
On 1/25/2012 9:48 AM, [Cardiff] Tugdual de LASSAT wrote: > Hello the list.. > > I have a problem, i wish to submit to your review... > We run 4 years discontinuating, an Exim+Clamav mail server solution that ran > smoothly to our needs, until recent internal false positive has been > signaled... >

Re: [clamav-users] Heuristics.OLE2.ContainsMacros false positive

2012-01-25 Thread Bowie Bailey
On 1/25/2012 11:02 AM, [Cardiff] Tugdual de LASSAT wrote: > That one is good: > I do get : > > clamdscan selsia.ppt > /root/selsia.ppt: Heuristics.OLE2.ContainsMacros FOUND > > --- SCAN SUMMARY --- > Infected files: 1 > Time: 0.001 sec (0 m 0 s) > > So I must admit there is a pro

Re: [clamav-users] false positives with MBL_207346?

2012-02-22 Thread Bowie Bailey
On 2/22/2012 1:00 PM, John Madden wrote: > Oh, and I now realize that this is outside of freshclam's control, being > a sanesecurity signature. I removed the mbl.db and disabled that > cronjob until we sort this out... > > > > On 02/22/2012 12:51 PM, John Madden wrote: >> I wasn't able to receiv

Re: [clamav-users] My outdated Clam.

2012-03-07 Thread Bowie Bailey
On 3/7/2012 2:25 PM, Steve Kirkby wrote: > Following Edwin's reply (and thanks for that) I visited the clamav.net site. > I downloaded the ClamAV 0.97.3 install guide. It consists of 17 pages of > highly technical instructions which are so beyond me that I could not even > think of doing anythin

Re: [clamav-users] CentOS 5.6 and clamav 0.97.4

2012-04-13 Thread Bowie Bailey
On 4/12/2012 4:56 PM, Trixi D. Bubemyre wrote: > Is clamav 0.97.4 supported for CentOS 5.6? I do not find it listed among the > supported linux platforms. ClamAV should run on just about any recent version of CentOS. I'm running one on a CentOS 4.9 system (compiled from source) and another on C

Re: [clamav-users] Basic newbie question

2012-05-04 Thread Bowie Bailey
On 5/4/2012 10:39 AM, Mr. Eddie Jackson wrote: > Please answer this simple basic newbie webmaster question. I have spent hous > and read the entire clamav manual and it is not answered. > > I simply need to know if clamav deletes or quarantines viruses it finds in a > default debian squeeze apach

[clamav-users] ClamAV 0.97.5 download

2012-06-15 Thread Bowie Bailey
I see that the text on the download page of the website has changed to 0.97.5, but the link still goes to an 0.97.4 download file. -- Bowie ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [clamav-users] Help to download ClamAV 0.97.5

2012-06-15 Thread Bowie Bailey
On 6/15/2012 10:59 AM, gene heskett wrote: > On Friday, June 15, 2012 10:44:29 AM Matt Olney did opine: > >> We're having some trouble with our freshmeat account. You can download >> the latest here, until we get it fixed up: >> >> https://sourceforge.net/projects/clamav/files/ >> > I downloaded t

Re: [clamav-users] Many false positives: MBL_312128 / MBL_303159

2012-08-07 Thread Bowie Bailey
On 8/7/2012 2:46 PM, Matt Olney wrote: We've heard similar complaints on IRC. It looks like downloads may be broken from MBL. You'll have to work with them to address the issue. My last download was 3 hours ago. I don't see a problem from here. Also, I do not see the problematic rules in th

Re: [clamav-users] What is the maximum file size ClamAV supports ??

2012-09-17 Thread Bowie Bailey
On 9/17/2012 5:20 AM, Siranjeevi wrote: Sure. I have given full permission to that file.. like -rwxrwxrwx 1 root root 261638 Nov 11 2010 xrdp-0.4.0-1.el6.rf.x86_64.rpm But still i am getting the same error. I couldn't find out the exact reason. Check the permissions of the directory. D

Re: [clamav-users] ClamAV®: ClamAV Stats, we need more of them, we need your help

2012-09-20 Thread Bowie Bailey
On 9/18/2012 6:24 PM, Joel Esler wrote: http://blog.clamav.net/2012/09/clamav-stats-we-need-more-of-them-we.html ClamAV Stats, we need more of them, we need your help We've been working pretty hard behind the scenes over here on ClamAV, its backend infrastructure, and moving the codebase as we

Re: [clamav-users] ClamAV® : ClamAV Stats, we need more of them, we need your help

2012-09-21 Thread Bowie Bailey
On 9/21/2012 4:35 AM, Al Varnell wrote: On 9/20/12 9:12 AM, "Bowie Bailey" wrote: On 9/18/2012 6:24 PM, Joel Esler wrote: http://blog.clamav.net/2012/09/clamav-stats-we-need-more-of-them-we.html ClamAV Stats, we need more of them, we need your help We've been working pretty

Re: [clamav-users] ClamAV® : ClamAV Stats, we need more of them, we need your help

2012-09-21 Thread Bowie Bailey
Now that I have the submission working, I took a look at the personal stats page (www.stats.clamav.net). I see a graph of some data here, but I'm not sure how to read it. There is a bar chart with four bars. The numbers on the bars are 5, 1, 4, 2. When I hover over the bars, I get 19, 21, 2

Re: [clamav-users] How to remove infected files after scanning with Clamd ??

2012-09-21 Thread Bowie Bailey
On 9/21/2012 11:29 AM, Siranjeevi wrote: Clamdscan is client which runs on Clamd thread know. I am asking, Is there any option to delete the infected file..?? I want use daemon process to do this for my mail attachments. Keep in mind that mail attachments are not normal files. When you are sc

[clamav-users] Personal stats webpage

2012-09-25 Thread Bowie Bailey
I posted this a few days ago with no response. I think it got lost in the mailing list etiquette discussion. Original post: Now that I have the submission working, I took a look at the personal stats page (www.stats.clamav.net). I see a graph of some data here, but I'm not sure how to read

Re: [clamav-users] Personal stats webpage

2012-09-25 Thread Bowie Bailey
On 9/25/2012 11:45 AM, Joel Esler wrote: I'm sorry I didn't respond. We are working on your request and I'll have one of the guys get back to you. Thanks for your patience. No problem. Since the original thread devolved into an etiquette discussion, I wanted to re-post in case the original

Re: [clamav-users] Enabling stats in ClamAV

2012-10-03 Thread Bowie Bailey
On 10/3/2012 11:40 AM, Bryan Burke wrote: So, the page http://www.clamav.net/lang/en/faq/faq-cctts/stats-howto/ mentions having the "LogFile" directive filled out, but I use the syslog interface for logging (to the LOG_MAIL facility). So, my question is... can I point frechclam somehow at the

Re: [clamav-users] [Clamav-users] clamav no timestamp in the logs

2012-12-06 Thread Bowie Bailey
On 12/6/2012 7:28 AM, franckm wrote: With clamdscan, it still does not show timestamps (see below) The default config (/etc/clamd.conf) is to no show LogTimes. I have changed that (LogTime yes). Is there anything I need to do after having changed the clamd config? Restart clamd. releasemast

Re: [clamav-users] [Clamav-users] clamav no timestamp in the logs

2012-12-06 Thread Bowie Bailey
On 12/6/2012 10:43 AM, franckm wrote: Ok I've done that. LogTimes are shown (in a weird datetime format) but the file that I've just scanned is not listed at all: clamdscan /tmp/clamscan-franck-test/clamscan-franck-testclamscan-man.txt /tmp/clamscan-franck-test/clamscan-franck-testclamscan-ma

  1   2   >