if I have a
commonly reported signature, Sanesecurity.Phishing.Cur.1266.UNOFFICIAL, is
this reported or is it only malware that is in the 'Official' ClamAv database
reported?
--
Chris
KeyID 0xE372A7DA98E6705C
pgp8CDoPgU6iS.pgp
Description
. For instance
between Nov 6 22:50:44 and Nov 9 11:21:56 2008 according to my clamd log
there were there were nine malwares detected yet 10 were submitted. I'm just
trying to understand what 'trips' the stats submission.
Thanks
--
Chris
KeyID 0xE372A7DA98E6705C
pgpWvn
On Wednesday 12 November 2008 3:34 pm, Tomasz Kojm wrote:
> On Wed, 12 Nov 2008 14:17:19 -0600
>
> Chris <[EMAIL PROTECTED]> wrote:
> > Question is why is there not enough data for submission at the above
> > date/time when the next time freshclam is run 10 records are
I'm trying to build the rpm's for my Mandrake 10.1 box. Below is the failure:
[EMAIL PROTECTED] ~]$ rpmbuild -bb --sign /home/chris/rpm/SPECS/clamav.spec
Enter pass phrase:
Pass phrase is good.
Executing(%prep): /bin/sh -e /home/chris/rpm/tmp/rpm-tmp.98383
+ umask 022
+ cd /home/chris
base Signatures 470,759
Seems like every month or so I have to make the change from either cld to cvd
or cvd to cld. What, if anything, could be the reason for this?
--
Chris
KeyID 0xE372A7DA98E6705C
pgpkUsa3f1ZI9.pgp
Description: PGP signature
___
On Thursday 04 December 2008 3:00 am, Török Edwin wrote:
> On 2008-12-04 05:49, Chris wrote:
> > if (/main\.(?:cvd|inc).+\(version:\s(\d+),\ssigs:\s(\d+),/) {
>
> .inc is no longer used, you should replace that with cld.
>
> > if (/main\.(?:cld|inc).+\(vers
) {
Should it be changed also?
--
Chris
KeyID 0xE372A7DA98E6705C
pgpfPnl0rC5uE.pgp
Description: PGP signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
e update lines for sanesecurity sigs in Bill Landry's script.
Have a great holiday and hope to see you back on line next year.
--
Chris
KeyID 0xE372A7DA98E6705C
pgplS99UEOuj3.pgp
Description: PGP signature
___
Help us build a comprehensiv
getting updates. Is there any
reason why there would be no clamd executable included with a Mandriva
package? There was always one when I rolled my own for 10.1.
Thanks
Chris
___
Help us build a comprehensive ClamAV guide: visit http://wiki.
Tomasz Kojm wrote:
> On Tue, 30 Dec 2008 15:17:25 -0600
> Chris wrote:
>
>> I'm working on updating my old Mandrake 10.1 system to Mandriva 2009, what
>> a pain, anyway, using urpmi I installed 94.2. When trying to start it I got
>> a 'command not found'
McDonald, Dan wrote:
> On Tue, 2008-12-30 at 15:17 -0600, Chris wrote:
>> I'm working on updating my old Mandrake 10.1 system to Mandriva 2009, what
>> a pain, anyway, using urpmi I installed 94.2. When trying to start it I got
>> a
>> 'command not found&#
number processed: 0
gpg: Can't check signature: public key not found
Looks like your public key can't be found unless I'm havng an issue here
but this is the first time I've noticed something like this.
Chris
--
KeyID 0xE372A7DA98E6705C
Live - Elton John - All Across T
ot running.
Chris
--
KeyID 0xE372A7DA98E6705C
signature.asc
Description: This is a digitally signed message part
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
]
Do you want me to also add this information to what I've already
submitted for the bug?
Chris
--
KeyID 0xE372A7DA98E6705C
signature.asc
Description: This is a digitally signed message part
___
Help us build a comprehensive ClamAV guide:
r the Sanesecurity sigs being run.
> >
>
> But are Sanesecurity sigs loaded?
> If yes, please add all information to
> https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1370
>
Yes they are and I've added my comments to the bug
lamd[4492]: segfault at 84 ip
b7fb5ca6 sp bfca2fb0 error 4 in libclamav.so.5.0.4[b7fab000+b]
Unofficial sigs update began at
Wed Mar 4 02:09:06 CST 2009 - Pause complete, checking for new database
files...
Two of Steves db's were updated and the MalwarePatrol database.
Chri
On Thu, 2009-03-05 at 18:16 +0200, Török Edwin wrote:
> On 2009-03-05 18:01, Steve Basford wrote:
> >> Here is information on my crash of today:
> >>
> >
> > Thanks Chris.
> >
> > Out of interest I wonder if it's worth someone who get
Another probably easy question. When running
[ch...@localhost ~]$ clamdscan spam1.txt
/home/chris/spam1.txt: Access denied. ERROR
Where should clamdscan be and who should own it? It was
in /usr/local/bin along with
-rwxr-xr-x 1 root root 1041 2009-03-05
17:42 /usr/local/bin/clamav
On Thu, 2009-03-05 at 20:33 -0600, Brandon Perry wrote:
> Make sure clamd has permission to read the file :-)
>
-rwxr-xr-x 1 root root 228068 2009-03-05 17:42 /usr/local/bin/clamdscan*
Odd clamscan works fine:
-rwxr-xr-x 1 root root 131462 2009-03-05 17:42 /usr/local/bin/clamscan*
so why doesn
On Thu, 2009-03-05 at 19:07 -0800, Bill Landry wrote:
> Chris wrote:
> > On Thu, 2009-03-05 at 20:33 -0600, Brandon Perry wrote:
> >> Make sure clamd has permission to read the file :-)
> >>
> >
> > -rwxr-xr-x 1 root root 228068 2009-03-05 17:42 /usr/loc
One more probably dumb question and I'll call it a night. Previously on
all my clamav installs the freshclam.log was started the first time it
was ran, not so from what I can see. I have it in my freshclam.conf
file:
# Path to the log file (make sure it has proper permissions)
# Default: disabled
On Thu, 2009-03-05 at 22:45 -0800, Dennis Peterson wrote:
> Robert Holtzman wrote:
> > On Thu, 5 Mar 2009, Dennis Peterson wrote:
> >
> >> Does freshclam.log exist and if so, who owns it and what are the
> >> permissions?
> >
> > locate freshclam.log in a terminal? Don't know about Mac but there
On Fri, 2009-03-06 at 06:09 -0600, Chris wrote:
> On Thu, 2009-03-05 at 22:45 -0800, Dennis Peterson wrote:
> > Robert Holtzman wrote:
> > > On Thu, 5 Mar 2009, Dennis Peterson wrote:
> > >
> > >> Does freshclam.log exist and if so, who owns
I've just finished installing rc2, activated safebrowsing in
freshclam.conf. Ran freshclam however it appears that the
safebrowsing.cvd file was not downloaded at least its not where the
other database files are /var/lib/clamav.
HeuristicScanPrecedence yes
Every thing else seems up-to-date
[r...
On Sun, 2009-03-22 at 12:27 +0100, Tomasz Kojm wrote:
> On Sun Mar 22 2009 02:31:56 GMT+0100 (CET)
> Chris wrote:
>
> > [r...@localhost ~]# freshclam -V
> > ClamAV 0.95rc2/9148/Sat Mar 21 16:17:14 2009
> >
> > [r...@localhost ~]# clamd -V
> > ClamA
d 618 lines and executed
618 commands
But then again it was downloaded on the next run
Sat Mar 28 00:48:04 2009 -> Downloading safebrowsing-931.cdiff [100%]
Sat Mar 28 00:48:04 2009 -> cdiff_apply: Parsed 618 lines and executed
618 commands
I've noticed this before a couple of times in
empting to build I got the errors shown here but as I
pasted at the bottom of the paste file I have all the dependencies
listed:
https://pastebin.com/K1LfbwXX
I may have to post this to the ubuntu-users list but I'm hoping someone
here can set me straight.
--
Chris
KeyID 0xE372A7DA98
On Fri, 2018-01-26 at 00:46 +, Scott Kitterman wrote:
>
> On January 25, 2018 11:18:41 PM UTC, Chris
> wrote:
> >
> > I'm trying to build 99.3 for Ubuntu 16.04LTS. I had no problems
> > building 99.2 with pbuilder. When downloading the source I got
> >
; > Thank you to the following ClamAV community members for your code
> > submissions and bug reports!
> >
> > Alberto Garcia
> > Daniel J. Luke
> > Francisco Oca
> > Sebastian A. Siewior
> > Suleman Ali
> >
> > Special thanks to Offensive
On Fri, 2018-01-26 at 08:41 +0100, Matus UHLAR - fantomas wrote:
> >
> > >
> > > On January 25, 2018 11:18:41 PM UTC, Chris > > om>
> > > wrote:
> > > >
> > > > I'm trying to build 99.3 for Ubuntu 16.04LTS. I had no prob
nd the .dsc file.
>
> Am 26.01.2018 um 15:31 schrieb Chris:
> >
> > On Thu, 2018-01-25 at 19:18 -0800, Al Varnell wrote:
> > >
> > > Are you sure you have the correct 0.99.3 download released late
> > > today
> > > from <http://www.clamav.n
On Fri, 2018-01-26 at 16:25 +0100, Reindl Harald wrote:
>
> Am 26.01.2018 um 16:15 schrieb Chris:
> >
> > On Fri, 2018-01-26 at 15:37 +0100, Tilman Schmidt wrote:
> > >
> > > Ubuntu doesn't have 0.99.3 release yet.
> > > You need to go to http:/
t;
> Ciao
> Marcus
>
>
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV gui
On Sun, 2018-01-28 at 00:54 +0100, Marcus Schopen wrote:
> Am Samstag, den 27.01.2018, 17:22 -0600 schrieb Chris:
> >
> > Thanks so much for this Marcus, seems a lot easier than going
> > through
> > using pbuilder.
> Never used pbuilder. For sure there are easier wa
On Sun, 2018-01-28 at 00:54 +0100, Marcus Schopen wrote:
> Am Samstag, den 27.01.2018, 17:22 -0600 schrieb Chris:
> >
> > Thanks so much for this Marcus, seems a lot easier than going
> > through
> > using pbuilder.
> Never used pbuilder. For sure there are easier wa
9.2.
Any suggestions where I've messed up this time?
--
Chris
KeyID 0xE372A7DA98E6705C
31.11972; -97.90167 (Elev. 1092 ft)
19:41:17 up 2:24, 1 user, load average: 0.37, 0.36, 0.55
Description:Ubuntu 16.04.3 LTS, kernel 4.13.0-32-generic
signature.asc
Description: This is a digitally sign
Candidate: 0.99.3+addedllvm-0ubuntu0.16.04.1
apt-cache policy clamav-freshclam
clamav-freshclam:
Installed: 0.99.3+addedllvm-0ubuntu0.16.04.1
Candidate: 0.99.3+addedllvm-0ubuntu0.16.04.1
Here are all my configuration files:
https://pastebin.com/f5xfDRHv
Any assistance would be appreciated.
--
n ClamAV with the same settings I've
not had this problem.
Using nc -l 3310 in one terminal and nc 127.0.0.1 3310 I get:
nc -l 3310
test
this is a test
nc 127.0.0.1 3310
test
this is a test
So, IIUC I can talk to port 3310 with 127.0.0.1 or am I incorrect?
>
> On 2/1/18 6:49 AM, Ch
On Thu, 2018-02-01 at 18:28 +0100, Reindl Harald wrote:
>
> Am 01.02.2018 um 18:23 schrieb Chris:
> >
> > nc -zv 127.0.0.1 3300-3400
> > nc: connect to 127.0.0.1 port 3300 (tcp) failed: Connection refused
> > nc: connect to 127.0.0.1 port 3301 (tcp) failed: Connect
= Update(s) detected, reloaded ClamAV databases =
I want to thank all of you for chiming in with what to check and
possible fixes. Not sure why this upgrade went south this time it
should have been as all the others, just upgrade, restart and you're
back to running again.
> On 2/1
vice: Failed
with result 'exit-code'.
I hope this makes enough sense to not cause me to get yelled at.
--
Chris
KeyID 0xE372A7DA98E6705C
31.11972; -97.90167 (Elev. 1092 ft)
10:46:00 up 17:52, 1 user, load average: 1.64, 1.74, 1.54
Description:Ubuntu 16.04.4 LTS, kernel 4.13.0-36-gene
On Thu, 2018-03-08 at 11:46 -0600, Chris wrote:
> This is clamav 0.99.4+addedllvm-0ubuntu0.16.04.1 amd64 on Ubuntu
> 16.04.4 LTS.
>
> This morning I updated via system updates to the above version. After
> the update I stopped the clamav-daemon and restarted via
>
> su
It's odd that this just started last Tuesday
especially since I'd been out of town since the day before .
I'm running Ubuntu 16.04.4, clamav 99.4
Wondering if this is the right list to ask on or should I try the
Ubuntu users list?
--
Chris
KeyID 0xE372A7DA98E6705C
31.11972; -97.9016
On Sun, 2018-06-24 at 15:03 +, Scott Kitterman wrote:
>
> On June 24, 2018 1:52:53 PM UTC, Chris
> wrote:
> >
> > I was out of town last week and when I got home I noticed the above
> > while going through my hourly syslog snippets. The complete output
> &
7;ve had a detection
stat host ID for a long time also. Has this option been depreciated?
I've Googled for any information and can't seem to find if it has. This
is
freshclam -V
ClamAV 0.100.1/24779/Tue Jul 24 11:43:34 2018
Thanks
Chris
--
Chris
KeyID 0xE372A7DA98E6705C
31.11972; -97.90167 (
On Wed, 2018-07-25 at 00:26 +, Micah Snyder (micasnyd) wrote:
> Hi Chris,
>
> I'm sorry to say that SubmitDetectionStats was deprecated some time
> ago. We are actively working on a strategy to provide a replacement
> mechanism for submitting system and detection stats.
e downloaded it to.
If someone could help fill in the blanks, or tell me if i'm totally on the
wrong track, i would be grateful.
Thanks
Chris
---
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit
f so maybe they disabled
it)
Any help would be appreciated
Regards
Chris
___
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
Thanks a bunch Fajar
It turns out it was because I wasnt logged in as root
I su'd to root and all worked thanks to your tip
being from windows all this security stuff is foreign to me ;)
Regards
Chris
> -Original Message-
> From: Fajar A. Nugraha [mailto:[EMAIL PROTECTED
ne with no variables and
the other as I had set it up in the cronjob with -d -c 24. I take it then
that the cronjob is not necessary to restart freshclam and that all variables
are read from the /etc/freshclam.conf file. Is that a correct assumption?
--
Chris
Registered Linux User 2
l
> time points. Here's a script I adapted from an a submission in this list:
>
>
Since I had a cronjob to start freshclam on boot and it apparently was started
by another means also, how to only have it run from the cronjob?
--
Chris
Registered Linux User 283774 http://counter.li.org
13:48
On Sunday 21 August 2005 02:09 pm, René Berber wrote:
> Chris wrote:
> > I've just installed ClamAV last night and after reading through the
> > archives I setup a cronjob to restart freshclam on boot. I got a chance
> > to test this today since my box decided th
was
provided in another message, placed it in my /usr/local/bin folder and run it
as a cronjob hourly. With the random sleep variable it should work. I'll
find out next time my hourly syslog snippet is sent to me.
--
Chris
Registered Linux User 283774 http://counter.li.org
14:58:48 up 2:42,
hclam \
--config-file=/etc/freshclam.conf \
--quiet \
--daemon
RETVAL=$?
echo
[ $RETVAL -eq 0 ] && touch /var/lock/subsys/freshclam
;;
--
Chris
Registered Linux User 283774 http://counter.li.org
15:25:42 up 3:09, 1 user, load average:
e -n 19 run-parts /etc/cron.hourly
2 * * * * clamav /usr/local/bin/freshclamcron
Using your script, is 56 old enough :)
>
> Get rid of webadmin as soon as possible. It is keeping you from using your
> brain and I assure you it hasn't one of its own.
Done - Just have to migrate
On Monday 22 August 2005 02:37 pm, Todd Lyons wrote:
> Chris wanted us to know:
> >${LOGFILE}, and running "service freshclam start" from the cli resulted in
> >the process starting "Starting Clam AntiVirus Update Daemon:" but the 'ok'
> >was not
I notice in the virus db and the way clamav tags some of my messages with
HTML.Phishing.Bank-265. How does one submit these phishing msgs? For
instance I've been receiving quite a few Amazon phish's lately. Or, should
they be submitted?
Thank You
Chris
--
Chris
Registered Linux U
generating signatures worthwhile?
--
Chris
Registered Linux User 283774 http://counter.li.org
19:56:17 up 3 days, 8:09, 1 user, load average: 0.33, 0.50, 0.50
Mandriva Linux 10.1 Official, kernel 2.6.8.1-12mdk
___
http://lurker.clamav.net/list/clamav
On Tuesday 13 September 2005 08:13 pm, Christopher X. Candreva wrote:
> On Tue, 13 Sep 2005, Chris said:
> > Can ClamAV be configured (I guess thats the right word) to tag fraud type
> > messages the same as it does with phishing messages? For instance this:
>
> Spam Assassin
exactly is the "functionality level"
--
Chris
Registered Linux User 283774 http://counter.li.org
19:48:40 up 19 days, 8:01, 3 users, load average: 4.03, 2.47, 1.53
Mandriva Linux 10.1 Official, kernel 2.6.8.1-12mdk
___
http://lurker.clamav.net/list/clamav-users.html
My apologies for using bandwidth without doing some research. Reading the
FAQ I now see what it means.
--
Chris
Registered Linux User 283774 http://counter.li.org
19:53:24 up 19 days, 8:06, 3 users, load average: 5.91, 4.03, 2.38
Mandriva Linux 10.1 Official, kernel 2.6.8.1-12mdk
ould I find that, or, make it at?
--
Chris
Registered Linux User 283774 http://counter.li.org
20:31:44 up 11 days, 23:53, 1 user, load average: 0.64, 0.59, 0.81
Mandriva Linux 10.1 Official, kernel 2.6.8.1-12mdk
___
http://lurker.clamav.net/list/clamav-users.html
On Tuesday 18 October 2005 09:25 pm, Dennis Peterson wrote:
> Chris said:
> >
> > To get them automatically loaded.just copy them to the local virus
> > database directory.
> >
> > Where would I find that, or, make it at?
> >
> >From your comm
¾Çå³ý.
±¾ÓʼþÖк¬Óв¡¶¾£¬ÓÚ 2006. 1. 3 10: 1 Çå³ý.
ÔÓʼþÒѱ¸·ÝÓÚ¼ÆËã»ú USER-5C316902E3£¬ÎļþÃû: C:
[EMAIL PROTECTED] Registration Confirmation [Tue 03
Jan 2006 01 50 29 GMT].vir.
- --
Chris
Registered Linux User 283774 http://counter.li.org
20:18:56 up 6 days, 3:05, 3 users, load average: 4.42
On Monday 02 January 2006 8:46 pm, Dennis Peterson wrote:
> Chris said:
> > -BEGIN PGP SIGNED MESSAGE-
> > Hash: SHA1
> >
> > The below was added to a truncated viral attachment. The file name
> > is !KV!.txt, has anyone seen anything like this be
stalled. Seems like I'm
in a vicious circle here. Never had this problem before. These are the
rpms from ftp://ftp.neocat.org/pub/RPMS/ for Mandriva. Any advice or a
kick in the head to make me see what I'm missing here would be highly
appreciated.
--
Chris
Registered Linux User 28
it is updated download and upcompress it.
>
Chris, running your script as a cronjob nets this output:
phish.ndb.gz500
as a guess does this mean there was no new file to download?
--
Chris
Registered Linux User 283774 http://counter.li.org
21:18:06 up 5 days, 1:02, 1 user, load average:
nal server error. Nothing to do with the
script."
I'm a bit confused on the above then. Why would your script work fine from
the cli? Its such a simple script I can't figure out why it won't work
when run as a cronjob.
--
Chris
Registered Linux User 283774 http://counter
On Wednesday 26 April 2006 9:08 pm, Christopher X. Candreva wrote:
> On Wed, 26 Apr 2006, Chris wrote:
> > "A 500 status code is an internal server error. Nothing to do with the
> > script."
>
> "99% of all problems under Unix are permissions"
>
&g
error
was sent as a reslut of the freshclamcron job. The complete output was:
ERROR: Can't unlink daily.cvd. Please fix it and try again.
I have the below permissions set for the clamsigs folder and the *.cvd
files:
drwsrwsrwt 3 chris chris4096 Apr 30 12:14 clamsigs/
-rw-rw-rw- 1
On Sunday 30 April 2006 12:33 pm, Chris wrote:
>
> drwsrwsrwt 3 chris chris4096 Apr 30 12:14 clamsigs/
> -rw-rw-rw- 1 chris chris 3950054 Apr 21 15:55 main.cvd
> -rw-rw-rwT 1 chris chris 286938 Apr 30 12:14 daily.cvd
>
> Is it possible that when the new daily.cvd
--
0 File Extensions Used
--
By Date ( . = 1 viruses )
--
By Hour ( . = 1 viruses )
--
By Month ( . = 1 viruses )
-
By Year ( . = 1 viruses )
--
On Wednesday 24 May 2006 5:54 pm, Rick Macdougall wrote:
> Chris wrote:
> > I've downloaded a script that is supposed to output stats on virus's
> > that clamav detects. Needless to say its not working correctly and I'm
> > soliciting some help since I k
On Wednesday 24 May 2006 7:05 pm, Rick Macdougall wrote:
> Chris wrote:
> > On Wednesday 24 May 2006 5:54 pm, Rick Macdougall wrote:
> >> I developed this http://newmail.axess.com/virus/
> >>
> >> But it's only currently for Qmail/simscan (until someone
any and all help
If you can't d/l the files I'll be glad to just send them direct.
Chris
--
Chris
Registered Linux User 283774 http://counter.li.org
14:03:42 up 21 days, 2:03, 1 user, load average: 0.55, 0.42, 0.20
Mandriva Linux 10.1 Official, kernel 2.6.8.1-12mdk
pgpYkOuQcWV4A.pg
On Sunday 04 June 2006 2:37 pm, Stephen Gran wrote:
> On Sun, Jun 04, 2006 at 02:10:16PM -0500, Chris said:
> > It seems to read the freshclam.log correctly and posts the correct
> > stats, however, for some unknown reason it appears to not be reading
> > the clamd.log at a
On Sunday 04 June 2006 6:27 pm, Stephen Gran wrote:
> On Sun, Jun 04, 2006 at 03:25:53PM -0500, Chris said:
> > On Sunday 04 June 2006 2:37 pm, Stephen Gran wrote:
> > > You're regexes (at least in the version I downloaded) are multi-line.
> >
> > When lookin
Is there a configuration setting in clamd.conf to 'not' have the clamd.log
restarted monthly? Or is the archiving of the previous months log
controlled by something else? I'd like to have my clamstats output
continuous instead of restarting every month.
--
Chris
Registered Li
On Saturday 01 July 2006 8:56 am, Stephen Gran wrote:
> On Sat, Jul 01, 2006 at 08:36:21AM -0500, Chris said:
> > Is there a configuration setting in clamd.conf to 'not' have the
> > clamd.log restarted monthly? Or is the archiving of the previous
> > months log con
av hits on spam via the clamav plugin for spamassassin. Therefore
everything is working. Any known reasons why clamd just up and quit
logging?
--
Chris
18:02:35 up 3 days, 23:31, 1 user, load average: 0.04, 0.17, 0.17
pgpVSNZT52VHa.pgp
Description: PGP
On Friday 04 August 2006 12:18 pm, Todd Lyons wrote:
> On Thu, Aug 03, 2006 at 06:09:25PM -0500, Chris wrote:
> >I was looking at my clamav stats file and noticed that it kept giving me
> > the same amount of virus's detected as of 1 Aug. Looking at
> >my /var/log/clama
rotations. Look at logtail if you want a good
> implementation.
Thanks Stephen, I'll take a look at it.
--
Chris
20:13:02 up 5 days, 1:41, 1 user, load average: 0.22, 0.25, 0.27
pgpyw35iAoyzC.pgp
Description: PGP signature
___
http://lurker.clamav.net/list/clamav-users.html
This was not found when incoming mail was scanned, however, I saved the
attachment and ran clamscan on it and it was picked up. Clamav is called
via a plugin in SpamAssassin. This happened last night and again tonight.
Any possible reason?
--
Chris
pgpfY7pS7nRvZ.pgp
Description: PGP
271
By Year ( . = 78 viruses )
--
2006: 1,562
It also does an HTML output suitable for webpages.
--
Chris
pgp9IQ6zpPRaS.pgp
Description: PGP signature
___
http://lurker.clamav.net/list/clamav-users.html
rl gurus on this list and a couple of others there are no
errors. I could post it here but I don't know about attachments to this
list. If anyone wants it I'd be glad to send it to them.
Chris
--
Chris
pgpC6ovQA1R3w.pgp
Description: PGP signature
___
http://lurker.clamav.net/list/clamav-users.html
ar/log/clamav/";
my $logfile = $CLAMAV_ROOT . "clamd.log";
my $fclogfile = $CLAMAV_ROOT . "freshclam.log";
my $host = `hostname`;
--
Chris
pgpeK54uvOOgA.pgp
Description: PGP signature
___
http://lurker.clamav.net/list/clamav-users.html
I've noticed the above in my hourly syslog snip thoughout the day today. Its
not appearing each and every time a message is checked. Could someone advise
me on what the problem may be and what the fix might be?
Thanks
Chris
--
Chris
pgpGbbZBUE5ZL.pgp
Description: PGP sign
On Wednesday 06 December 2006 8:20 pm, Chris wrote:
> I've noticed the above in my hourly syslog snip thoughout the day today.
> Its not appearing each and every time a message is checked. Could someone
> advise me on what the problem may be and what the fix might be?
>
> Thank
m: Cron Daemon <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
/var/lib/clamav/scam.ndb.gz 200
gunzip: /var/lib/clamav/scam.ndb.gz: unexpected end of file
Guess I should have checked the logs first.
--
Chris
pgpjbsf5jSdBt.pgp
Description: PGP signature
led via a spamassassin plugin if it matters.
--
Chris
http://learn.to/quote
pgpXYTWm2w4zF.pgp
Description: PGP signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
cron.hourly (rather than freshclam
> daemon) I check for new files, if new then download and test the any new
> SaneSecurity and MSRBL signature files, then run freshclam. Work well
> here.
>
Bill, I'm using the script you posted awhile back for the MSRBL and
SaneSecurity si
BL databases before using.
>
> Bill
And it's still showing up as corrupted as of an hour ago. Is there a way to
contact the MSRBL folks and let them know of the bad database?
--
Chris
http://learn.to/quote
pgp1yUjHHdPIk.pgp
Description: PGP signature
eeds editing:
} elsif (/(\w+)\s(\w+)\s{1,2}(\d{1,2})\s(\d+:\d+:\d+)\s(\d+).+stream:\s(.
+)\sFOUND/ ) {
Thanks
Chris
--
Chris
KeyID 0xE372A7DA98E6705C
pgpgCQkAmvymE.pgp
Description: PGP signature
___
Help us build a comprehensive ClamAV guide
On Sunday 18 February 2007 4:46 pm, Jan-Pieter Cornet wrote:
> On Sat, Feb 17, 2007 at 07:50:37PM -0600, Chris wrote:
> > Wed Feb 14 15:25:59 2007 -> stream: Html.Img.Gen013.Sanesecurity.06112900
> > FOUND Wed Feb 14 20:55:26 2007 -> stream 1907: HTML.Phishing.Azon-17
> &
ay.
Previously, even after the upgrade to 0.90 it was running just fine.
The script is located here
http://mediasafe.embarq.com/chris1948/Hosted/clamstats.pl
And sample output here
http://mediasafe.embarq.com/chris1948/Hosted/mystats.html.tar.bz2
--
Chris
KeyID 0xE372A7DA98E6705C
pgpCULnxsOQLz.
er the upgrade to 0.90 it was running just fine.
>
> Did you recently turn on scripted updates?
Thanks Stephen, short reply, I didn't write the script, have no idea how to
modify it, I know nil about regex's and yes I did turn on scripted updates
back when I installed
On Thursday 01 March 2007 9:39 pm, Stephen Gran wrote:
> On Thu, Mar 01, 2007 at 09:04:25PM -0600, Chris said:
> > Thanks Stephen, short reply, I didn't write the script, have no idea how
> > to modify it, I know nil about regex's and yes I did turn on scripted
> >
& \
cp --reply=yes MSRBL-Images.hdb MSRBL-Images.hdb-bak && \
mv -f $tmp_dir/MSRBL-Images.hdb .
--
Chris
KeyID 0xE372A7DA98E6705C
pgpOnfPFe18Qh.pgp
Description: PGP signature
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html
I've commented out the
# curl -R -s -z MSRBL-SPAM.ndb -o $tmp_dir/MSRBL-SPAM.ndb \
#http://download.mirror.msrbl.com/MSRBL-SPAM.ndb
# curl -R -s -z MSRBL-Images.hdb -o $tmp_dir/MSRBL-Images.hdb \
#http://download.mirror.msrbl.com/MSRBL-Images.hdb
--
Chris
KeyID 0xE372A7DA98E67
ages.hdb -o $tmp_dir/MSRBL-Images.hdb \
#http://download.mirror.msrbl.com/MSRBL-Images.hdb
test -s $tmp_dir/MSRBL-Images.hdb && \
clamscan --quiet -d $tmp_dir/MSRBL-Images.hdb && \
cp --reply=yes MSRBL-Images.hdb MSRBL-Images.hdb-bak && \
mv
101 - 200 of 463 matches
Mail list logo
