[clamav-users] [Heuristics.Structured.SSN]

2014-06-25 Thread Chris
-31227-422011-3a6d9c5a87-b272103213 ) ( http://if.inboxfirst.com/ga/click/2-20619679-120-15601-31227-422012-0a7ac1c41a-b272103213 ) [...] I imagine that clamav took the numbers in the URL as SSNs? -- Chris KeyID 0xE372A7DA98E6705C 31.11°N 97.89°W (Elev. 1092 ft) 19:11:55 up 1:40, 1 user

[clamav-users] [Heuristics.Structured.SSN]

2014-07-03 Thread Chris
email itself was all html. Since this is just a home system with mine and my wifes email what's the best way to keep this from happening? http://pastebin.com/5PFCmz4C Thanks Chris -- Chris KeyID 0xE372A7DA98E6705C 31.11°N 97.89°W (Elev. 1092 ft) 07:58:07 up 7 days, 14:26, 1 user, load ave

Re: [clamav-users] [Heuristics.Structured.SSN]

2014-07-03 Thread Chris
On Thu, 2014-07-03 at 14:37 +0100, Steve Basford wrote: > On Thu, July 3, 2014 2:08 pm, Chris wrote: > > > Below are the headers of the most recent mail that was hit the email > > itself was all html. Since this is just a home system with mine and my > > wifes email wha

[clamav-users] daily.cvd vs daily.cld

2014-07-03 Thread Chris
AV Warning: ** LibClamAV Warning: *** The virus database is older than 7 days! *** LibClamAV Warning: *** Please update it as soon as possible.*** LibClamAV Warning: ** I downloaded the daily.cvd and the error went away. Chris -- Chris KeyID 0xE372A7

Re: [clamav-users] daily.cvd vs daily.cld

2014-07-03 Thread Chris
On Thu, 2014-07-03 at 16:38 -0700, Al Varnell wrote: > On Jul 3, 2014, at 11:51 AM, Chris wrote: > > > It's been awhile since I used ClamAv wasn't there something one time > > about using either one or the other of the two databases listed above? > > They ar

[clamav-users] [Heuristics.Structured.SSN]

2014-07-10 Thread Chris
rs in it in the message. Chris -- Chris KeyID 0xE372A7DA98E6705C 31.11°N 97.89°W (Elev. 1092 ft) 15:33:33 up 14 days, 22:02, 1 user, load average: 0.14, 0.22, 0.25 Mandriva Linux 2010.2, kernel 2.6.33.7-desktop586-2mnb ___ Help us build a comprehensi

[clamav-users] Datebase Warning

2014-07-11 Thread Chris
o why is my database out of date? -- Chris KeyID 0xE372A7DA98E6705C 31.11°N 97.89°W (Elev. 1092 ft) 10:33:55 up 15 days, 17:02, 2 users, load average: 0.58, 0.84, 0.71 Mandriva Linux 2010.2, kernel 2.6.33.7-desktop586-2mnb ___ Help us build a compre

[clamav-users] 98.4 under Ubuntu 14.04.LTS

2014-07-14 Thread Chris
driva. The config.log shows the errors shown here. AFAIK I've got OpenSSL installed however this distro has got me fuddled in some ways. The link to the config.log - http://pastebin.com/B3bTDDnX Thanks for any assistance. This is slow going, luckily I'm retired and can spend as much time as

Re: [clamav-users] 98.4 under Ubuntu 14.04.LTS

2014-07-14 Thread Chris
On Tue, 2014-07-15 at 00:00 -0400, Scott Kitterman wrote: > On Monday, July 14, 2014 22:44:01 Chris wrote: > > I had to get a new box this weekend and since I was starting from > > scratch decided to go with Ubuntu instead of the old Mandriva. When > > installing from apt-ge

Re: [clamav-users] 98.4 under Ubuntu 14.04.LTS

2014-07-15 Thread Chris
On Tue, 2014-07-15 at 01:05 -0400, Scott Kitterman wrote: > On Monday, July 14, 2014 23:36:51 Chris wrote: > > On Tue, 2014-07-15 at 00:00 -0400, Scott Kitterman wrote: > > > On Monday, July 14, 2014 22:44:01 Chris wrote: > > > > I had to get a new box this weekend

Re: [clamav-users] 98.4 under Ubuntu 14.04.LTS

2014-07-15 Thread Chris
On Tue, 2014-07-15 at 15:21 -0400, Scott Kitterman wrote: > On Tuesday, July 15, 2014 13:03:55 Chris wrote: > > On Tue, 2014-07-15 at 01:05 -0400, Scott Kitterman wrote: > > > On Monday, July 14, 2014 23:36:51 Chris wrote: > > > > On Tue, 2014-07-15 at 00:0

[clamav-users] File::Scan::ClamAV

2014-07-19 Thread Chris
CPAN, I'm posted the output at pastebin - http://pastebin.com/bdurgL6X Any ideas anyone? ClamAV has been installed via the Ubuntu software installer if it makes a difference. Chris ___ Help us build a comprehensive ClamAV guide: https://github.com/

Re: [clamav-users] File::Scan::ClamAV

2014-07-20 Thread Chris
On Sun, 2014-07-20 at 13:32 +0200, Matus UHLAR - fantomas wrote: > On 19.07.14 21:38, Chris wrote: > >Finally I'm about finished with setting up my Ubuntu 14.04 system and > >getting everything setup the way it was in the old Mandriva system. I > >have both SA and

Re: [clamav-users] File::Scan::ClamAV

2014-07-20 Thread Chris
On Sun, 2014-07-20 at 12:52 -0400, Scott Kitterman wrote: > On Sunday, July 20, 2014 07:27:25 Chris wrote: > > On Sun, 2014-07-20 at 13:32 +0200, Matus UHLAR - fantomas wrote: > > > On 19.07.14 21:38, Chris wrote: > > > >Finally I'm about finished with se

Re: [clamav-users] File::Scan::ClamAV

2014-07-21 Thread Chris
On Sun, 2014-07-20 at 12:52 -0400, Scott Kitterman wrote: > On Sunday, July 20, 2014 07:27:25 Chris wrote: > > On Sun, 2014-07-20 at 13:32 +0200, Matus UHLAR - fantomas wrote: > > > On 19.07.14 21:38, Chris wrote: > > > >Finally I'm about finished with se

Re: [clamav-users] File::Scan::ClamAV

2014-07-21 Thread Chris
On Mon, 2014-07-21 at 23:08 -0400, Scott Kitterman wrote: > On Monday, July 21, 2014 21:47:34 Chris wrote: > > On Sun, 2014-07-20 at 12:52 -0400, Scott Kitterman wrote: > > > On Sunday, July 20, 2014 07:27:25 Chris wrote: > > > > On Sun, 2014-07-20 at 13:32 +0200

Re: [clamav-users] File::Scan::ClamAV

2014-07-22 Thread Chris
On Tue, 2014-07-22 at 13:53 +0100, Anthony DIckinson wrote: > On 22/07/14 03:47, Chris wrote: > > On Sun, 2014-07-20 at 12:52 -0400, Scott Kitterman wrote: > >> On Sunday, July 20, 2014 07:27:25 Chris wrote: > >>> On Sun, 2014-07-20 at 13:32 +0200, Matus UHLAR - fant

Re: [clamav-users] File::Scan::ClamAV

2014-07-22 Thread Chris
On Tue, 2014-07-22 at 10:33 -0500, Chris wrote: > On Tue, 2014-07-22 at 13:53 +0100, Anthony DIckinson wrote: > > On 22/07/14 03:47, Chris wrote: > > > On Sun, 2014-07-20 at 12:52 -0400, Scott Kitterman wrote: > > >> On Sunday, July 20, 2014 07:27:25 Chris wrote: &g

Re: [clamav-users] File::Scan::ClamAV

2014-07-22 Thread Chris
On Tue, 2014-07-22 at 17:19 +0100, Anthony DIckinson wrote: > On 22/07/14 16:33, Chris wrote: > > On Tue, 2014-07-22 at 13:53 +0100, Anthony DIckinson wrote: > >> On 22/07/14 03:47, Chris wrote: > >>> On Sun, 2014-07-20 at 12:52 -0400, Scott Kitterman wrote: > &g

[clamav-users] ScanStream

2014-07-22 Thread Chris
26.camel@localhost> for chris:1000 Jul 22 13:34:20 localhost clamd[11467]: Accepted connection from 127.0.0.1 on port 1302, fd 13 Jul 22 13:34:20 localhost clamd[11467]: ScanStream(127.0.0.1@1302): Can't create temporary file. Jul 22 13:34:20 localhost spamd[18732]: spamd: clean message (-1.2/5.0

[clamav-users] Still fighting with ClamAV and Ubuntu

2014-07-23 Thread Chris
Still trying to get this to work with SA. I'm pretty sure it's not going to until I get the correct reply: [sudo] password for chris: root@localhost:/usr/sbin# clamd ping ERROR: setgroups() failed. Any advice? Chris -- Chris 31.11°N 97.89°W (Elev. 1092 ft) 17:08:55 up 2 days, 23:2

[clamav-users] Error (Cannot connect to unix socket '/var/lib/clamav/clamd.socket': connect: No such file or directory)

2016-08-06 Thread Chris
on. # Default: disabled (must be specified by a user) LocalSocket /var/lib/clamav/clamd.socket It's not getting created no matter what I do. It used to be created in fact it was there before I did the system upgrade. Any assistance would be appreciated. Chris -- Chris KeyID 0xE372A7DA98E

Re: [clamav-users] Error (Cannot connect to unix socket '/var/lib/clamav/clamd.socket': connect: No such file or directory)

2016-08-07 Thread Chris
On Sun, 2016-08-07 at 10:49 +0200, Tobi wrote: > It might a systemd issue. Have you tried to start clamd by calling it > directly on cli? Does it create the socket then? > > Cheers > > tobi I've tried that lots of times Tobi, however, it still doesn't create it: chr

Re: [clamav-users] Error (Cannot connect to unix socket '/var/lib/clamav/clamd.socket': connect: No such file or directory)

2016-08-07 Thread Chris
On Sun, 2016-08-07 at 15:57 +0200, Reindl Harald wrote: > > Am 07.08.2016 um 15:51 schrieb Chris: > > > > On Sun, 2016-08-07 at 10:49 +0200, Tobi wrote: > > > > > > It might a systemd issue. Have you tried to start clamd by > > > calling it > >

Re: [clamav-users] Error (Cannot connect to unix socket '/var/lib/clamav/clamd.socket': connect: No such file or directory)

2016-08-07 Thread Chris
On Sun, 2016-08-07 at 17:02 +0200, Tobi wrote: > Hi Chris > > sorry I was not clear enough. I did not mean to start the service via > systemd but to call like > > sudo /usr/sbin/clamd -c /path/to/config > > and see then if the socket has been created in expected locatio

Re: [clamav-users] Error (Cannot connect to unix socket '/var/lib/clamav/clamd.socket': connect: No such file or directory)

2016-08-07 Thread Chris
On Sun, 2016-08-07 at 11:04 -0400, Alan Stern wrote: > On Sun, 7 Aug 2016, Chris wrote: > > > > > On Sun, 2016-08-07 at 10:49 +0200, Tobi wrote: > > > > > > It might a systemd issue. Have you tried to start clamd by > > > calling it > >

Re: [clamav-users] Error (Cannot connect to unix socket '/var/lib/clamav/clamd.socket': connect: No such file or directory)

2016-08-07 Thread Chris
On Sun, 2016-08-07 at 19:17 +0200, Reindl Harald wrote: > > Am 07.08.2016 um 19:13 schrieb Chris: > > > > On Sun, 2016-08-07 at 17:02 +0200, Tobi wrote: > > > > > > Hi Chris > > > > > > sorry I was not clear enough. I did not mean to star

Re: [clamav-users] Error (Cannot connect to unix socket '/var/lib/clamav/clamd.socket': connect: No such file or directory)

2016-08-07 Thread Chris
On Sun, 2016-08-07 at 19:41 +0200, Reindl Harald wrote: > > Am 07.08.2016 um 19:33 schrieb Chris: > > > > On Sun, 2016-08-07 at 19:17 +0200, Reindl Harald wrote: > > > > > > > > > Am 07.08.2016 um 19:13 schrieb Chris: > > > > >

Re: [clamav-users] Error (Cannot connect to unix socket '/var/lib/clamav/clamd.socket': connect: No such file or directory)

2016-08-10 Thread Chris
On Sun, 2016-08-07 at 17:02 +0200, Tobi wrote: > Hi Chris > > sorry I was not clear enough. I did not mean to start the service via > systemd but to call like > > sudo /usr/sbin/clamd -c /path/to/config > > and see then if the socket has been created in expected locatio

[Clamav-users] A bit OT - Reporting infected emails to ISP

2009-10-28 Thread Chris
hese is not a .zip but in fact a windows executable. Now why they would not scan that I have not idea, I'm going to have to ask. Thanks for any advice Chris -- KeyID 0xE372A7DA98E6705C signature.asc Description: This is a digitally signed message part _

[Clamav-users] Building Mandriva 2009.1 RPMS

2009-10-29 Thread Chris
Last night I attempted to build the 0.95.3 RPMS for Mandriva 2009.1 and ran into a problem. I kept getting this error: 1 out of 1 hunk FAILED -- saving rejects to file clamav-milter/clamav-milter.c.rej error: Bad exit status from /home/chris/rpm/tmp/rpm-tmp.zGMW7n (%prep) The output of the above

Re: [Clamav-users] Building Mandriva 2009.1 RPMS

2009-10-30 Thread Chris
On Fri, 2009-10-30 at 08:39 -0500, McDonald, Dan wrote: > On Thu, 2009-10-29 at 22:11 -0500, Chris wrote: > > Last night I attempted to build the 0.95.3 RPMS for Mandriva 2009.1 and > > ran into a problem. I kept getting this error: > > > > 1 out of 1 hunk FAILE

[Clamav-users] SubmitDetectionStats Error

2009-11-15 Thread Chris
I've seen this in the last three freshclam runs: ERROR: SubmitDetectionStats: Remote server reported temporary failure: under maintenance Curious as to whether anyone else sees the same -- KeyID 0xE372A7DA98E6705C signature.asc Description: This is a digitally signed message part ___

Re: [Clamav-users] SubmitDetectionStats Error

2009-11-16 Thread Chris
. > > I expect it to be back online in ~24h. > > Best regards > And it appears that it is Luca. I've not seen any errors after those this morning at 4;19am CST. Chris -- KeyID 0xE372A7DA98E6705C signature.asc Description: This is a digitally signed message part

[Clamav-users] Email.Trojan.GZC

2010-02-26 Thread Chris
I'm a bit confused, sometimes that's not hard to do. I'm running the ClamAv plugin with SpamAssassin and one spam was marked with the above virus. When saving just the infected attachment and running [ch...@localhost Virus]$ clamdscan - signature.asc Description: This is a digitally signed messa

Re: [Clamav-users] Email.Trojan.GZC

2010-02-27 Thread Chris
On Sat, 2010-02-27 at 09:56 +0200, Török Edwin wrote: > > > > [ch...@localhost Virus]$ clamdscan - > fd[12]: Email.Trojan.GZC FOUND > > > > --- SCAN SUMMARY --- > > Infected files: 1 > > Time: 0.191 sec (0 m 0 s) > > > > Is there a reason behind this? > > Email.* signatures ar

[Clamav-users] clamstats script

2010-03-05 Thread Chris
I run a script hourly that has an output of virus statistics for that hour in an html output format. The script uses a meter.jpg file that draws a line the length depending on different parameters. I previously had this working fine but has since quit apparently when I upgraded to Mandriva 2010. I'

[Clamav-users] HostID

2010-04-12 Thread Chris
I'd like to set this up for my home system, what format does a HostID need to be in? -- KeyID 0xE372A7DA98E6705C signature.asc Description: This is a digitally signed message part ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clam

Re: [Clamav-users] HostID

2010-04-13 Thread Chris
On Tue, 2010-04-13 at 09:50 +0300, Török Edwin wrote: > On 04/13/2010 01:57 AM, Chris wrote: > > I'd like to set this up for my home system, what format does a HostID > > need to be in? > > You get the HostID by following the steps described here: > htt

[Clamav-users] clamd memory usage

2010-04-13 Thread Chris
20 0 375m 344m 5420 S 0.0 45.6 0:25.13 clamd or am I incorrect in my assumption? If not what settings can I change to limit the amount of memory being used? Chris -- KeyID 0xE372A7DA98E6705C signature.asc Description: This is a digitally sign

Re: [Clamav-users] HostID

2010-04-13 Thread Chris
On Tue, 2010-04-13 at 14:23 +0300, Török Edwin wrote: > On 04/13/2010 02:17 PM, Chris wrote: > > On Tue, 2010-04-13 at 09:50 +0300, Török Edwin wrote: > >> On 04/13/2010 01:57 AM, Chris wrote: > >>> I'd like to set this up for my home system, what forma

Re: [Clamav-users] clamd memory usage

2010-04-14 Thread Chris
On Tue, 2010-04-13 at 19:56 -0700, Jim Preston wrote: > Chris wrote: > > I'll admit I'm not too smart when it comes to how much memory an app is > > supposed to use but it seems to me that since I installed .96 on my > > Mandriva 2010 system it's using an exce

Re: [Clamav-users] clamd memory usage

2010-04-14 Thread Chris
On Wed, 2010-04-14 at 16:27 -0700, Jim Preston wrote: > On Apr 14, 2010, at 4:07 AM, Chris wrote: > > > On Tue, 2010-04-13 at 19:56 -0700, Jim Preston wrote: > >> Chris wrote: > >>> I'll admit I'm not too smart when it comes to how much memory an >

Re: [Clamav-users] clamd memory usage

2010-04-14 Thread Chris
On Wed, 2010-04-14 at 16:27 -0700, Jim Preston wrote: > On Apr 14, 2010, at 4:07 AM, Chris wrote: > > > On Tue, 2010-04-13 at 19:56 -0700, Jim Preston wrote: > >> Chris wrote: > >>> I'll admit I'm not too smart when it comes to how much memory an >

[Clamav-users] clamdtop crashing

2010-04-16 Thread Chris
I'm trying to figure out what is causing, in my opinion, abnormal memory usage when clam is running. I started clamdtop and shortly thereafter it crashed with the below: Connecting to: /var/lib/clamav/clamd.socket Abnormal program termination: Failed to reconnect to clamd after connection was lost

Re: [Clamav-users] clamdtop crashing

2010-04-16 Thread Chris
On Fri, 2010-04-16 at 17:13 +0300, Török Edwin wrote: > On 04/16/2010 04:43 PM, Chris wrote: > > I'm trying to figure out what is causing, in my opinion, abnormal memory > > usage when clam is running. I started clamdtop and shortly thereafter it > > crashed with the be

[Clamav-users] clamd memory usage (Solved)

2010-04-21 Thread Chris
all is back to the way it should be. Chris -- KeyID 0xE372A7DA98E6705C signature.asc Description: This is a digitally signed message part ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

[Clamav-users] Building 96.2 for Mandriva 2010.1

2010-08-13 Thread Chris
rmat '%lu' expects type 'long unsigned int', but argument 4 has type 'size_t' jsparse/js-norm.c: In function 'append_tokens': jsparse/js-norm.c:549: warning: format '%lu' expects type 'long unsigned int', but argument 2 has type 'size_t

Re: [Clamav-users] Building 96.2 for Mandriva 2010.1

2010-08-14 Thread Chris
On Sat, 2010-08-14 at 11:23 +0300, Török Edwin wrote: > On Fri, 13 Aug 2010 18:03:30 -0500 > Chris wrote: > > > While building this I noticed the below: > > You get this on a 32-bit build, right? > 'int' and 'long' are the same size there, so it doe

[Clamav-users] test

2010-09-02 Thread Chris
testing... last message didn't show. ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

[Clamav-users] recipient notification

2010-09-02 Thread Chris
message always fails. Maybe destination isn't supposed to mean recipient -- if that is so, what does? How can I get clamav-milter to send a notification to the intended recipient? Thanks. -Chris Using Debian Lenny with the following on an amd64 platform: ii clamav

Re: [Clamav-users] recipient notification

2010-09-08 Thread Chris
Anyone? I tried rewriting my script, and using the 2nd argument (the Queue ID) to grep out the "To: " header -- but after some frustration, I found that the message isn't even put into the queue until AFTER the script is done processing. It sure seem like this be a pretty standard request

Re: [Clamav-users] recipient notification

2010-09-09 Thread Chris
the line will help clamav pass the recipient's email address along -- Heck, I'm not even sure if "Destination" is the same thing as "Recipient"... Hope I'm not beating a dead horse here, but I just want to be sure I understan

Re: [Clamav-users] LibClamAV Error: cli_dbgets: Line too long for provided buffer?

2010-09-27 Thread Chris
ine too long for provided buffer" > > when scanning files. > > > > What does this mean? > > bytecode.cvd version 72 should fix this, run freshclam to get it. > Does it still happen with 72? > AFAICT it's not happened since version 72 was installed. -- Chris

Re: [Clamav-users] safe_clamd

2010-10-16 Thread Chris
ks whether or not clamd is running on a user selected time basis. Your script sound about the same though I haven't looked at it yet. -- Chris KeyID 0xE372A7DA98E6705C signature.asc Description: This is a digitally signed message part ___ He

[Clamav-users] Freshclam oddity

2010-10-25 Thread Chris
used to appear each time freshclam was run until clam was updated? -- Chris KeyID 0xE372A7DA98E6705C signature.asc Description: This is a digitally signed message part ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net

Re: [Clamav-users] Freshclam oddity

2010-10-26 Thread Chris
On Mon, 2010-10-25 at 23:21 -0700, Al Varnell wrote: > On 10/25/10 3:30 PM, "Chris" wrote: > > > Knowing that 96.4 was coming out today I expected to see this: > > > > Your ClamAV installation is OUTDATED! > > localhost freshclam[20815]: Local version

Re: [clamav-users] When to run freshclam? Was Re: Updating of clam stats has stopped

2010-12-31 Thread Chris
ot;/etc/clamd.conf" DetectionStatsCountry = "US" DetectionStatsHostID = "000" However looking at the page at http://www.stats.clamav.net/host_view.php?id= stats for the last 1,7 or 30 days are empty. clamconf software settings shows: Software settings

Re: [clamav-users] When to run freshclam? Was Re: Updating of clam stats has stopped

2011-01-01 Thread Chris
> > You can try the latest git code to see if it works: > > You may consider upgrading to the > > latest code in the git repository if you need this feature. > > Best regards, > --Edwin > Thanks Edwin, I must have missed that post, since it's just my home system

[clamav-users] log size limit

2011-02-08 Thread Chris
limit. # You may use 'M' or 'm' for megabytes (1M = 1m = 1048576 bytes) # and 'K' or 'k' for kilobytes (1K = 1k = 1024 bytes). To specify the size # in bytes just don't use modifiers. # Default: 1M LogFileMaxSize 0 -- Chris KeyID 0xE372A7DA98E6705C 31.

[clamav-users] Freshclam - ERROR: SubmitDetectionStats: Can't read from socket

2011-03-11 Thread Chris
line. Thought someone would like to know. Chris -- Chris KeyID 0xE372A7DA98E6705C 31.11°N 97.89°W (Elev. 1092 ft) signature.asc Description: This is a digitally signed message part ___ Help us build a comprehensive ClamAV guide: visit

[clamav-users] Log file size limited to -1 bytes.

2011-06-11 Thread Chris
the clamd.log so it seems this only appears when the log file size is 0. -- Chris KeyID 0xE372A7DA98E6705C 31.11°N 97.89°W (Elev. 1092 ft) 22:09:33 up 129 days, 3:49, 2 users, load average: 2.11, 1.57, 0.72 signature.asc Description: This is a digi

[clamav-users] connect_error: getsockopt(SO_ERROR): fd=5 error=111: Connection refused

2011-07-06 Thread Chris
6 18:23:36 localhost freshclam[7244]: Downloading daily-13289.cdiff [100%] -- Chris KeyID 0xE372A7DA98E6705C 31.11°N 97.89°W (Elev. 1092 ft) 19:09:16 up 154 days, 48 min, 1 user, load average: 0.33, 0.21, 0.12 signature.asc Description: This is a digitally signed me

Re: [clamav-users] connect_error: getsockopt(SO_ERROR): fd=5 error=111: Connection refused

2011-07-14 Thread Chris
On Wed, 2011-07-06 at 19:17 -0500, Chris wrote: > Periodically the last few days I'll see the above in my syslog when > freshclam is running. This is when polling the mirror at: > > Jul 6 06:23:14 localhost freshclam[26748]: Retrieving > http://db.us.clamav.net/daily-13286.

Re: [clamav-users] connect_error: getsockopt(SO_ERROR): fd=5 error=111: Connection refused

2011-07-14 Thread Chris
On Thu, 2011-07-14 at 17:33 -0700, Chuck Swiger wrote: > On Jul 14, 2011, at 5:25 PM, Chris wrote: > > Anyone possibly have an idea why this is. I'm connecting hourly however > > at odd times using the freshclamcron script. Though the .diff is > > downloaded using a di

[clamav-users] Reporting infected spam

2011-07-23 Thread Chris
ay? I also have a script that will report these in conjunction with SA Learn which reports these but it sends the whole message including the infected attachment, I don't believe this is the correct way. Thanks Chris -- Chris KeyID 0xE372A7DA98E6705C 31.11°N 97.89°W (Elev. 1092 ft) 19:00:22 u

Re: [clamav-users] Reporting infected spam

2011-07-23 Thread Chris
On Sat, 2011-07-23 at 19:43 -0700, Al Varnell wrote: > On 7/23/11 5:07 PM, "Chris" wrote: > > > Looking for the correct way to handle this. I've been receiving a lot of > > infected email lately supposedly bounced messages infected with the > > MyDoom w

[clamav-users] clam daily.cvd update messages

2012-02-23 Thread Chris
being sent. -- Chris KeyID 0xE372A7DA98E6705C 31.11°N 97.89°W (Elev. 1092 ft) 19:20:49 up 5 days, 2:49, 1 user, load average: 1.02, 1.86, 1.58 signature.asc Description: This is a digitally signed message part ___ Help us build a comprehensive ClamAV guide:

[clamav-users] Your ClamAv is outdated - sometimes

2012-06-15 Thread Chris
Why is it that on one freshclam run my version, 97.4 is not outdated, then 4 more after that it is, then the next one it's not. Is it or isn't it? -- Chris KeyID 0xE372A7DA98E6705C 31.11°N 97.89°W (Elev. 1092 ft) 19:59:16 up 39 days, 7:06, 1 user, load average: 0.97, 1.54, 1.12 Mand

[clamav-users] ClamAV & freshclam permissions

2012-12-28 Thread Chris
boot the server there are permission issues with either clamav's or freshclan's logfiles which end up belonging to the wrong user. Thanks! -Chris ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] how to set cron to run freshclam

2007-04-15 Thread Chris
omly. > Thank you > Pascal > I have this tiny script located in /usr/local/bin/freshclamcron: #!/bin/bash sleep $[ RANDOM % 3000 ] /usr/bin/freshclam --quiet --daemon-notify=/etc/clamd.conf exit I run it at 2 minutes after each hour, it will sleep for a random amount of time, up to 50 minutes, run freshclam and notify clamd of updates. The entry in my /etc/crontab file looks like this: 2 * * * * clamav /usr/local/bin/freshclamcron HTH -- Chris KeyID 0xE372A7DA98E6705C pgpP9YsOOQOgH.pgp Description: PGP signature ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html

[Clamav-users] MSRBL-Images file shrinks

2007-04-19 Thread Chris
And this size at 14:09pm CDT sent 82 bytes  received 85 bytes  111.33 bytes/sec total size is 226391  speedup is 1355.63 receiving file list ... done /var/tmp/rsync/MSRBL-Images.hdb sent 20936 bytes  received 5821933 bytes  432805.11 bytes/sec total size is 11877474  speedup is 2.03 -- Chris

Re: [Clamav-users] MSRBL-Images file shrinks

2007-04-19 Thread Chris
On Thursday 19 April 2007 5:59 pm, Bill Landry wrote: > Bill Landry wrote the following on 4/19/2007 3:54 PM -0800: > > Chris wrote the following on 4/19/2007 3:38 PM -0800: > >> Odd, the file was this size at 8:09am CDT > >> > >> sent 82 bytes received 85 byt

[Clamav-users] [Possible SPAM] Re: MSRBL-Images file shrinks

2007-04-24 Thread Chris
On Tuesday 24 April 2007 9:49 am, Chris Burton wrote: > > Thanks Bill, looks like its growing again though, probably be +12mb again > > soon. > > The changes just took longer to do than I had hoped. As you can see now the > MSRBL-Images.hdb file is down to around 600KiB and 10

[Clamav-users] Stats script quit reporting correct number of sigs

2007-05-26 Thread Chris
is located here: http://mediasafe.embarq.com/chris1948/Hosted/clamstats.pl Nothing in the script or as far as I can see in the freshclam log between 30 April and 1 May. Someone else may see something I've missed. Thanks Chris -- Chris KeyID 0xE372A7DA98E6705C pgpnMpj8XUsga.pgp Descri

Re: [Clamav-users] Stats script quit reporting correct number of sigs

2007-05-26 Thread Chris
On Saturday 26 May 2007 5:41 pm, Bill Randle wrote: > > > On 1 May however it reported: > > > > > > Total viruses detected 10,021 > > Total Database Signatures 9,364 > > Chris, > &g

[Clamav-users] MSRBL-Images.hdb same size since 25 May

2007-05-27 Thread Chris
s a message from the MSRBL Announce list, subject - [Msrbl-announce] We've been reinstalledChris states: "If you notice any problems (other than no new images or updated sigs) just give me a shout." However, I'm wondering if no updated MSRBL-Images.hdb shouldn't be br

Re: [Clamav-users] clamscan extremly slow

2007-06-18 Thread Chris
lamdscan vs clamscan. I don't run a mailserver, however there are times I need to save an email message and scan it to see if its possibly a new type of virus. Of course running clamscan against this file does take an extremely long time, when trying to use clamdscan however I get the follow

Re: [Clamav-users] clamscan extremly slow

2007-06-18 Thread Chris
On Monday 18 June 2007 5:04 pm, Christopher X. Candreva wrote: > On Mon, 18 Jun 2007, Chris wrote: > > [EMAIL PROTECTED] ~]$ clamdscan phish1.txt > > /home/chris/phish1.txt: Access denied. ERROR > > > > I can't figure out why I keep getting this Access denied

[Clamav-users] TK53 Advisory #2: Multiple vulnerabilities in ClamAV

2007-12-30 Thread Chris
Saw this link at SANS today, anything to it? http://seclists.org/fulldisclosure/2007/Dec/0625.html Or is this a rehash of something already known about? -- Chris KeyID 0xE372A7DA98E6705C pgp7CFdZgXDiu.pgp Description: PGP signature ___ Help us

Re: [Clamav-users] TK53 Advisory #2: Multiple vulnerabilities in ClamAV

2007-12-31 Thread Chris
On Monday 31 December 2007 8:07 am, Sarocet wrote: > Chris wrote: > > Saw this link at SANS today, anything to it? > > > > http://seclists.org/fulldisclosure/2007/Dec/0625.html > > > > Or is this a rehash of something already known about > > I'm not a c

Re: [Clamav-users] TK53 Advisory #2: Multiple vulnerabilities in ClamAV

2008-01-02 Thread Chris
On Wednesday 02 January 2008 1:57 pm, Tomasz Kojm wrote: > On Sun, 30 Dec 2007 21:49:11 -0600 > > Chris <[EMAIL PROTECTED]> wrote: > > Saw this link at SANS today, anything to it? > > > > http://seclists.org/fulldisclosure/2007/Dec/0625.html > > > > O

[Clamav-users] Number of signatures not changing in stats report

2008-05-16 Thread Chris
-- Total viruses detected  219 Total Database Signatures   284,345 A link to the script I'm running is below: http://www.thelinkup.com/shared/itp3cmb6hyr5 Thanks for any assistance. -- Chris KeyID 0xE372A7DA98E6705C pgpf01dWijBB7.pgp Descr

Re: [Clamav-users] Number of signatures not changing in stats report

2008-05-16 Thread Chris
On Friday 16 May 2008 10:16 pm, Jim Preston wrote: > Chris wrote: > > Hopefully that will get someone to read further. I run a script hourly > > for an .html formatted output and nightly close to midnight for a text > > output report that is sent to me. Since May 11th t

Re: [Clamav-users] Number of signatures not changing in stats report

2008-05-16 Thread Chris
On Friday 16 May 2008 10:36 pm, Dennis Peterson wrote: > Chris wrote: > > ClamAV Statistics > > cpollock > > > > > > clamd last started

Re: [Clamav-users] Number of signatures not changing in stats report

2008-05-16 Thread Chris
On Friday 16 May 2008 10:36 pm, Dennis Peterson wrote: > Chris wrote: > > ClamAV Statistics > > cpollock > > > > > > clamd last started

[Clamav-users] clamdscan [file] shows access denied

2008-05-26 Thread Chris
When running clamdscan against a file in my home directory I get: [EMAIL PROTECTED] ~]$ clamdscan testmsg.txt /home/chris/testmsg.txt: Access denied. ERROR --- SCAN SUMMARY --- Infected files: 0 Time: 0.000 sec (0 m 0 s) Version and link to the output of running clamconf is

Re: [Clamav-users] clamdscan [file] shows access denied

2008-05-27 Thread Chris
On Tuesday 27 May 2008 12:52 am, Dennis Peterson wrote: > Chris wrote: > > When running clamdscan against a file in my home directory I get: > > > > [EMAIL PROTECTED] ~]$ clamdscan testmsg.txt > > /home/chris/testmsg.txt: Access denied. ERROR > > The clamd daemo

[Clamav-users] Error building clamav0.93.1rc1 Mandrake 10.1 RPM

2008-06-01 Thread Chris
I admit I still get shaky building rpm's but, I had a good teacher way back when, thanks Bill! Anyway trying to build the rpm's and when doing so this error jumped out: + pushd contrib/clamdmon /home/chris/rpm/tmp/rpm-tmp.50086: line 34: pushd: contrib/clamdmon: No

[Clamav-users] Can't build clamav-0.93.1 (clamdmon missing)

2008-06-09 Thread Chris
In attempting to build an rpm for Mandrake 10.1 I ran across this error: /home/chris/rpm/tmp/rpm-tmp.44427: line 34: pushd: contrib/clamdmon: No such file or directory error: Bad exit status from /home/chris/rpm/tmp/rpm-tmp.44427 (%build) RPM build errors: Bad exit status from /home/chris

Re: [Clamav-users] Clamav know virus count reduced.

2008-06-24 Thread Chris
reloaded (471837 signatures) Mon Jun 23 16:11:46 2008 -> Database correctly reloaded (391335 signatures) The difference being 80502. Does this mean anything, I don't know, I imagine the number of sigs could vary up and down, I've just never noticed it before. -- Chris KeyI

Re: [Clamav-users] Clamav know virus count reduced.

2008-06-30 Thread Chris
On Monday 30 June 2008 4:02 am, Tomasz Kojm wrote: > On Tue, 24 Jun 2008 19:45:42 -0500 > > Chris <[EMAIL PROTECTED]> wrote: > > This is run at 23:59 nightly, so sometime between Sunday at the time it > > was ran and yesterday when it ran 80454 signatures were dropped f

Re: [Clamav-users] 0.94-exp

2008-09-03 Thread Chris
:32 > 2008 -> -- __cut__ I have the same issue and haven't seen a reply yet. I installed using Mandrake rpm's I built. The install went fine yet I'm seeing the same about my installation being outdated. -- Chris KeyID 0xE372A7DA98E6705C

[Clamav-users] clamstats.pl

2008-09-05 Thread Chris
to the line above to have it show the found virus? The entire script is here: http://pastebin.com/m38a04a08 Thanks for any help Chris -- Chris KeyID 0xE372A7DA98E6705C pgpk7LhflxsjV.pgp Description: PGP signature ___ Help us build a compr

Re: [Clamav-users] clamstats.pl

2008-09-05 Thread Chris
k here, but try this: > > } elsif (($virus) = ($string =~ /^stream[^:]+: (.+) FOUND/ )) { > > It doesn't appear you're trying to match anything between stream and > the virus, so just ignore it with the "[^:]". It works for me with a > sample script, but your mileage

[Clamav-users] failed updates

2008-09-05 Thread Chris
secs) Fri Sep 5 17:25:41 2008 -> Can't connect to port 80 of host db.us.clamav.net (IP: 209.170.150.7) The next time freshclam is run there are no issues, then it may update a couple more times then fail again. Anyone have any ideas on this? -- Chris KeyID 0xE372A7DA98E6705C pgp1cm

Re: [Clamav-users] Webinar Recording

2008-09-09 Thread Chris
d in Linux. > > Maybe they have a stand-alone java player that will let you play the > downloaded file ? > The player loaded here on my Mandrake box once, however as soon as it was done loading Firefox crashed. Now every time I select "playback" FF will immediately

[Clamav-users] number of signatures decrease

2008-10-24 Thread Chris
8 Last Database UpdateWed Oct 22 23:24:23 2008 Total viruses detected  209 Total Database Signatures   410,706 Thanks -- Chris KeyID 0xE372A7DA98E6705C pgpEaGhdu8bVG.pgp Description

[Clamav-users] building 0.94.1

2008-11-04 Thread Chris
Is there a different version of libtool required to build 94.1 than there was to build .94? I get this when trying to build 94.1: make[2]: Entering directory `/home/chris/rpm/BUILD/clamav-0.94.1/libclamunrar' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -I..

Re: [Clamav-users] building 0.94.1

2008-11-04 Thread Chris
On Tuesday 04 November 2008 3:09 pm, Nathan Brink wrote: > Chris wrote: > > Is there a different version of libtool required to build 94.1 than there > > was to build .94? > > I had this problem too. However, I think I only had it when I ran > libtoolize and/or ran autorec

  1   2   3   4   5   >