-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Johann Spies schrieb: > On Thu, Jul 12, 2007 at 11:54:51AM +0200, Robert Schetterer wrote: >> Hi, after having good results in the beginning >> with pdfinfo , >> no one of the following pdf spam was catched/marked >> >> i am now using >> clam and Sanesecurity to eleminate pdf spam. > > I have tried that, but clamav did not pick up one when scanning a > bunch of the pdf-spam. I have used one of the downloadscripts on > Sanesecurity. Do I have to do some other configurations to activate > the databasis for Clamav? > > I have this in /var/lib/clamav at the moment: > > drwxr-xr-x 2 clamav clamav 4096 2007-07-12 14:22 > clamav-29a2fe02977a1d4c26abf3fd199d1e70 > -rw-r--r-- 1 clamav clamav 995915 2007-07-11 22:48 daily.cvd > -rwxrwxr-- 1 clamav clamav 0 2007-07-12 14:15 .dbLock > -rw-r--r-- 1 clamav clamav 9351789 2007-07-11 22:48 main.cvd > -rw-r--r-- 1 clamav clamav 294979 2007-07-12 15:05 MSRBL-Images.hdb > -rw-r--r-- 1 clamav clamav 228436 2007-07-12 15:05 MSRBL-SPAM.ndb > -rw-r--r-- 1 clamav clamav 180868 2007-07-12 10:26 phish.ndb.gz > -rw-r--r-- 1 clamav clamav 115449 2007-07-12 10:26 scam.ndb.gz > > > Regards > Johann Hi Johann, your clam db looks nice, but its always the same with signatures of antivirus tools, it may need time till they catch the newest one. Today i had 3 new pdf spam, so the mutation rate is very high and cant be catched at once , if you recieve it in a early stage of spreading, the download scripts of Sanesecurity works for me, if i got in trouble with curl , i use wget for the new sigs and restart clam, this worked too for me, also no trouble with todays update 0.91 to clam maybe you ask the coders of Sanesecurity for help - -- Mit freundlichen Gruessen Best Regards
Robert Schetterer https://www.schetterer.org Germany -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFGljg2fGH2AvR16oERAtKrAJsFdiIDF8LVypS78AKrN2nY6oYV5wCggcns vUvbgpdZ4rKJxysPJkCsovQ= =HuVF -----END PGP SIGNATURE-----
