[Clamav-users] Oversized zips with clamscan

2004-08-12 Thread Plant, Dean
I need to increase the ArchiveMaxCompressionRatio in clamscan as I have had a few zips being incorrectly identified as oversized zips. I first increased the ArchiveMaxCompressionRatio in clamav.conf but the zip file was still incorrectly identified. From reading the changelog it looks like that th

RE: [Clamav-users] Oversized zips with clamscan

2004-08-12 Thread Plant, Dean
Tomasz Kojm wrote: > On Thu, 12 Aug 2004 15:58:30 +0100 > "Plant, Dean" <[EMAIL PROTECTED]> wrote: > >> I need to increase the ArchiveMaxCompressionRatio in clamscan as I >> have had a few zips being incorrectly identified as oversized zips. >> >>

[Clamav-users] Exclude with clamdscan

2005-02-04 Thread Plant, Dean
I am testing Clamav 0.81 on Solaris 9 to run weekly full scan's on the local file system. Is there any way to exclude directories as to not scan /net /proc and remote mounted file systems with clamdscan or is my only option to use clamscan with the --exclude option? Thanks Dean Plant __

RE: [Clamav-users] Exclude with clamdscan

2005-02-04 Thread Plant, Dean
James Lick wrote: > Plant, Dean wrote: > >> Is there any way to exclude directories as to not scan /net /proc >> and remote mounted file systems with clamdscan or is my only option >> to use clamscan with the --exclude option? >> >> > > Don'

[Clamav-users] www.mozilla.org/editor infected?

2005-02-07 Thread Plant, Dean
I am using Squid/Dansguardian and Clamav v0.82 and am finding the site www.mozilla.org/editor is getting blocked due to a reported infection. Has anyone else seen this? Access to the page: http://www.mozilla.org/editor/ ... has been denied for the following reason: Virus Worm.JS.Redlof.A found

RE: [Clamav-users] Exclude with clamdscan

2005-02-22 Thread Plant, Dean
Tomasz Kojm wrote: >> >> I'm still having problems while trying to run a full scan from root. >> If I scan using >> >> Clamscan -r / --exclude=/net --exclude=/home >> >> Clamscan seems to traverse down /net/localhost and then >> /net/localhost/net/hostname and then >> /net/localhost/net/hostnam

[Clamav-users] Clamscan bug/feature in Solaris

2005-02-23 Thread Plant, Dean
I have posted a few previous questions regarding clamscan and problems with /net on Solaris. After some further investigation I have found that it impossible to run an efficient full scan (clamscan -r /) of a Solaris file system if /net is activated in /etc/auto_master. This is down to the fact t

RE: [Clamav-users] Exclude with clamdscan

2005-02-24 Thread Plant, Dean
Tomasz Kojm wrote: > "Plant, Dean" wrote: > >> Is it possible to completely exclude the /net folder so that when >> clamscan hits this directory it does not check the contents of it? > > Yes, it's in my TODO. Thank you. _

RE: [Clamav-users] Clamscan bug/feature in Solaris

2005-02-28 Thread Plant, Dean
Dennis Peterson wrote: > > Naturally it is going to follow NFS mount points. That is what you > asked it to > do so why wouldn't it? And what you are doing is a rather nutty thing > to > attempt, as well. This is a user problem, not a software problem. The > solution > is to scan selectively as

RE: [Clamav-users] Clamscan bug/feature in Solaris

2005-02-28 Thread Plant, Dean
Alberto da Silva wrote: > On Mon, 28 Feb 2005 10:17:42 -0000, Plant, Dean > <[EMAIL PROTECTED]> wrote: >> Nutty I may be :-) but scanning selectively is fine for a few >> machines but what if you have fifty machines with varying >> configurations. This approach woul

[Clamav-users] Oversized Zip

2003-11-12 Thread Plant, Dean
Hello, I have just upgraded to ClamAV 0.65 on RH8.0 and have found that it is reporting a valid zip file as an Oversized Zip. The 50K zip file contains 2 1,487K bitmap files. Is there any reason why this should be happening v0.60 had no problems with this file. ./Looms.zip: Oversized Zip FOUND -

RE: [Clamav-users] over sized zips from 0.65

2003-11-21 Thread Plant, Dean
I posted a similar problem on 13/11. The answer from Tomasz Kojm, which worked for me, shown below. Please edit libclamav/scanners.c, the line 64: #define ZIPOSDET 20 /* FIXME: Make it user definable */ and increase the value to 50. Regards Dean Plant -Original Message- From: Br

RE: [Clamav-users] Clamav Uninstall

2006-08-18 Thread Plant, Dean
Robert wrote: > First post to the Clamav list. > > I have Clamav 0.88.2 installed from source on an OSX client machine. > I want to upgrade to 0.88.4. > Now, usually when I upgrade Clamav, I back up the clamd.conf and > freshclam.conf > files and cd to the old clamav source folder. From there I ru