Mailing List Archive by Gossamer Threads http://www.gossamer-threads.com/lists/clamav/users/ en-us (c) Gossamer Threads Inc. All rights reserved. 12 Feb 2012 11:45:58 -0800 120 75 23 http://www.gossamer-threads.com/lists/clamav/users/ http://www.gossamer-threads.com/images/lists/rss_logo.jpg On 2/11/12 5:52 PM, "Greg Cirino" <gcirino@cirelle.com> wrote: > I'm not sure there is much value to the virusdb updates, as I usually > delete them, 12 Feb 2012 01:22:00 -0800 http://www.gossamer-threads.com/lists/clamav/users/54272 | Do we really need information of not added submissions to clamav-virusdb | mailing list? Does submitter even get the submission ID some way? These | 11 Feb 2012 17:52:45 -0800 http://www.gossamer-threads.com/lists/clamav/users/54270 On Sat, Feb 11, 2012 at 01:49:29PM +0200, Henri Salo wrote: > Do we really need information of not added submissions to clamav-virusdb mailing list? D 11 Feb 2012 08:58:48 -0800 http://www.gossamer-threads.com/lists/clamav/users/54268 On Sat, Feb 11, 2012 at 08:23:33AM -0800, Chuck Swiger wrote: > On Feb 11, 2012, at 3:49 AM, Henri Salo wrote: > > Is there a way to receive clamav-vi 11 Feb 2012 08:44:25 -0800 http://www.gossamer-threads.com/lists/clamav/users/54267 On Feb 11, 2012, at 3:49 AM, Henri Salo wrote: > Is there a way to receive clamav-virusdb lists in one email per week/month? Enable the "digest mode" 11 Feb 2012 08:23:33 -0800 http://www.gossamer-threads.com/lists/clamav/users/54266 Do we really need information of not added submissions to clamav-virusdb mailing list? Does submitter even get the submission ID some way? These submi 11 Feb 2012 03:49:29 -0800 http://www.gossamer-threads.com/lists/clamav/users/54262 On Fri, Feb 10, 2012 at 07:12:26PM +0100, Matus UHLAR - fantomas wrote: > How does clamd behave if it detects multiple viruses/phishes in a file? > Do 11 Feb 2012 03:06:53 -0800 http://www.gossamer-threads.com/lists/clamav/users/54261 On 02/10/2012 10:53 PM, Chuck Swiger wrote: > On Feb 10, 2012, at 12:19 PM, Reynolds, David C. wrote: >> I am (will be) running on a relatively large 10 Feb 2012 13:35:49 -0800 http://www.gossamer-threads.com/lists/clamav/users/54251 On Feb 10, 2012, at 12:19 PM, Reynolds, David C. wrote: > I am (will be) running on a relatively large SGI Origin with a couple of hundred processors 10 Feb 2012 12:53:47 -0800 http://www.gossamer-threads.com/lists/clamav/users/54250 I am (will be) running on a relatively large SGI Origin with a couple of hundred processors available. Is there an easy configuration setting to enabl 10 Feb 2012 12:19:16 -0800 http://www.gossamer-threads.com/lists/clamav/users/54249 Hello, How does clamd behave if it detects multiple viruses/phishes in a file? Does it have some internal logic that tells which to report or does it 10 Feb 2012 10:12:26 -0800 http://www.gossamer-threads.com/lists/clamav/users/54246 On 02/10/2012 05:08 PM, Matthias Egger wrote: > Hello Edwin > > Thank you for your reply. > > On 10.02.2012 15:06, T�r�k Edwin wrote: >>> # clamscan 10 Feb 2012 07:18:20 -0800 http://www.gossamer-threads.com/lists/clamav/users/54245 Hello Edwin Thank you for your reply. On 10.02.2012 15:06, T�r�k Edwin wrote: >> # clamscan -v DHL_Post_oder_Notification-INF6782654.zip >> DHL_Post 10 Feb 2012 07:08:41 -0800 http://www.gossamer-threads.com/lists/clamav/users/54244 On 02/10/2012 03:45 PM, Matthias Egger wrote: > Hello List > > Yesterday we received a lot of "DHL Delivery Notification Messages" with a zip File as 10 Feb 2012 06:06:38 -0800 http://www.gossamer-threads.com/lists/clamav/users/54243 Hello List Yesterday we received a lot of "DHL Delivery Notification Messages" with a zip File as attachment. The zip file contains an exe file whi 10 Feb 2012 05:45:11 -0800 http://www.gossamer-threads.com/lists/clamav/users/54242 I just reported sample as false-positive, which is detected as Exploit.MS04_028-4. This picture is generated by web-camera with SHA1 d7ad16339fbf5d2b1 10 Feb 2012 03:53:26 -0800 http://www.gossamer-threads.com/lists/clamav/users/54240 On Feb 9, 2012, at 3:27 AM, G.W. Haywood wrote: > Chuck Swiger wrote: >> Oh, sure...when this issue was first noticed, anti-virus providers >> started 09 Feb 2012 18:28:40 -0800 http://www.gossamer-threads.com/lists/clamav/users/54238 Hi there, On Wed, 8 Feb 2012, Joel Esler wrote: > We're looking into a solution for this. A simple solution would be to encrypt the database (even 09 Feb 2012 03:27:17 -0800 http://www.gossamer-threads.com/lists/clamav/users/54234 -----Original message----- From: Tomasz Kojm <tkojm@clamav.net> Sent: Wed 08-02-2012 22:25 Subject: Re: [clamav-users] Cannot disable BC.Ex 08 Feb 2012 13:51:38 -0800 http://www.gossamer-threads.com/lists/clamav/users/54232 On Feb 8, 2012, at 10:09 AM, Joel Esler wrote: > We're looking into a solution for this. Oh, sure...when this issue was first noticed, anti-virus pro 08 Feb 2012 10:48:22 -0800 http://www.gossamer-threads.com/lists/clamav/users/54231 We're looking into a solution for this. On Wed, Feb 8, 2012 at 10:51 AM, Chuck Swiger <cswiger@mac.com> wrote: > On Feb 8, 2012, at 7:25 AM, Yoshiha 08 Feb 2012 10:09:15 -0800 http://www.gossamer-threads.com/lists/clamav/users/54230 On Feb 8, 2012, at 7:25 AM, Yoshihara Takao wrote: > Hi all, > > Now I use Snort-2.9.2.1 and clamd-0.97.3-3 on the same OS, Scientific Linux > 6.1 ( 08 Feb 2012 07:51:43 -0800 http://www.gossamer-threads.com/lists/clamav/users/54227 Hi all, Now I use Snort-2.9.2.1 and clamd-0.97.3-3 on the same OS, Scientific Linux 6.1 (i686). Since around a month ago, whenever daily clamscan i 08 Feb 2012 07:25:33 -0800 http://www.gossamer-threads.com/lists/clamav/users/54224 On Wed, 8 Feb 2012 14:03:18 +0100 Ralf Hildebrandt <Ralf.Hildebrandt@charite.de> wrote: > * Tomasz Kojm <tkojm@clamav.net>: >> On Wed, 8 Feb 2012 11:0 08 Feb 2012 06:07:29 -0800 http://www.gossamer-threads.com/lists/clamav/users/54223 * Tomasz Kojm <tkojm@clamav.net>: > On Wed, 8 Feb 2012 11:02:54 +1100 Bill Maidment <bill@maidment.vu> wrote: > > > I have manually patched 0.97.3, r 08 Feb 2012 05:03:18 -0800 http://www.gossamer-threads.com/lists/clamav/users/54222 Hi there, On Wed, 8 Feb 2012, Dave Reynolds wrote: > As to why I would install ClamAV, it is an IA requirement that we > scan for viruses on remote 08 Feb 2012 03:26:13 -0800 http://www.gossamer-threads.com/lists/clamav/users/54221 On Wed, 8 Feb 2012 11:02:54 +1100 Bill Maidment <bill@maidment.vu> wrote: > I have manually patched 0.97.3, re-compiled, re-installed and restarted c 08 Feb 2012 03:24:47 -0800 http://www.gossamer-threads.com/lists/clamav/users/54220 -----Original message----- From: Bill Maidment <bill@maidment.vu> Sent: Wed 08-02-2012 09:53 Subject: Re: [clamav-users] Cannot disable BC. 07 Feb 2012 16:02:54 -0800 http://www.gossamer-threads.com/lists/clamav/users/54218 -----Original message----- From: Tomasz Kojm <tkojm@clamav.net> Sent: Wed 08-02-2012 09:29 Subject: Re: [clamav-users] Cannot disable BC.Ex 07 Feb 2012 14:52:12 -0800 http://www.gossamer-threads.com/lists/clamav/users/54217 * Jan-Pieter Cornet <johnpc@xs4all.nl>: > I haven't got any experience with IRIX, but I do wonder: why are you > using tits for testing purposes? Tha 07 Feb 2012 14:35:39 -0800 http://www.gossamer-threads.com/lists/clamav/users/54216 On Tue, 07 Feb 2012 23:11:24 +0100 Tomasz Kojm <tkojm@clamav.net> wrote: > On Tue, 7 Feb 2012 23:07:05 +0100 Ralf Hildebrandt > <Ralf.Hildebrandt@char 07 Feb 2012 14:28:47 -0800 http://www.gossamer-threads.com/lists/clamav/users/54214 On 02/07/12 16:07, Ralf Hildebrandt wrote: > * Lyle Giese<lyle@lcrcomputer.net>: > >> The format of local.ign is not very inituitive, IMHO. > It's loc 07 Feb 2012 14:26:01 -0800 http://www.gossamer-threads.com/lists/clamav/users/54213 On 2012-2-7 18:27 , Reynolds, David C. wrote: > Thanks for the quick replies. I was able to run those tests. > > As to why I would install ClamAV, 07 Feb 2012 14:22:05 -0800 http://www.gossamer-threads.com/lists/clamav/users/54215 On Tue, 7 Feb 2012 23:07:05 +0100 Ralf Hildebrandt <Ralf.Hildebrandt@charite.de> wrote: > Have you tried that for a bytecode signature? > sigtool -- 07 Feb 2012 14:11:24 -0800 http://www.gossamer-threads.com/lists/clamav/users/54211 * Lyle Giese <lyle@lcrcomputer.net>: > The format of local.ign is not very inituitive, IMHO. It's local.ign2 according to the docs. "Creating sign 07 Feb 2012 14:07:05 -0800 http://www.gossamer-threads.com/lists/clamav/users/54210 On 02/07/12 15:05, Bill Maidment wrote: > -----Original message----- > From: Ralf Hildebrandt<Ralf.Hildebrandt@charite.de> > Sent: Wed 08-02-2012 00:1 07 Feb 2012 13:37:53 -0800 http://www.gossamer-threads.com/lists/clamav/users/54209 * Bill Maidment <bill@maidment.vu>: > > What am I doing wrong here? Running clamv 0.97.3 > > It's the same story here. We've had to switch off all b 07 Feb 2012 13:17:13 -0800 http://www.gossamer-threads.com/lists/clamav/users/54208 * Alain Zidouemba <azidouemba@sourcefire.com>: > Ralf, > > We got your FP reports and will address them today. Thanks :) But the original question r 07 Feb 2012 13:11:28 -0800 http://www.gossamer-threads.com/lists/clamav/users/54206 -----Original message----- From: Ralf Hildebrandt <Ralf.Hildebrandt@charite.de> Sent: Wed 08-02-2012 00:16 Subject: [clamav-users] Cannot d 07 Feb 2012 13:05:51 -0800 http://www.gossamer-threads.com/lists/clamav/users/54207 Thanks for the quick replies. I was able to run those tests. As to why I would install ClamAV, it is an IA requirement that we scan for viruses on 07 Feb 2012 09:27:40 -0800 http://www.gossamer-threads.com/lists/clamav/users/54203 Ralf, We got your FP reports and will address them today. Thanks, -Alain On Tue, Feb 7, 2012 at 8:08 AM, Ralf Hildebrandt < Ralf.Hildebrandt@chari 07 Feb 2012 06:52:23 -0800 http://www.gossamer-threads.com/lists/clamav/users/54202 Hi! I'm trying to disable this signature, since it's giving my FPs for some XLS files (yes, I already submitted it as FP today): mail2:/var/lib/clam 07 Feb 2012 05:08:17 -0800 http://www.gossamer-threads.com/lists/clamav/users/54201 B0;261;0cHi there, On Tue, 7 Feb 2012, Reynolds, David C. wrote: > I've recently installed .97.3 on an SGI Origin 3000 running TRIX > ... > This is 07 Feb 2012 03:55:04 -0800 http://www.gossamer-threads.com/lists/clamav/users/54200 On Mon, Feb 6, 2012 at 8:39 PM, Reynolds, David C. <DAVID.C.REYNOLDS@saic.com> wrote: > I've recently installed .97.3 on an SGI Origin 3000 running TR 06 Feb 2012 12:07:47 -0800 http://www.gossamer-threads.com/lists/clamav/users/54195 On Mon, 2012-02-06 at 11:39 -0800, Reynolds, David C. wrote: > I've recently installed .97.3 on an SGI Origin 3000 running TRIX > v6.5.28 using gcc 3. 06 Feb 2012 12:05:07 -0800 http://www.gossamer-threads.com/lists/clamav/users/54194 On Mon, 6 Feb 2012 11:39:32 -0800 Reynolds, David C. <DAVID.C.REYNOLDS@saic.com> wrote: > I've recently installed .97.3 on an SGI Origin 3000 running 06 Feb 2012 12:04:45 -0800 http://www.gossamer-threads.com/lists/clamav/users/54193 On 02/06/2012 09:39 PM, Reynolds, David C. wrote: > I've recently installed .97.3 on an SGI Origin 3000 running TRIX v6.5.28 using gcc 3.2.1. Thats a 06 Feb 2012 12:04:21 -0800 http://www.gossamer-threads.com/lists/clamav/users/54192 I've recently installed .97.3 on an SGI Origin 3000 running TRIX v6.5.28 using gcc 3.2.1. (I did need to make some source file modifications). I was 06 Feb 2012 11:39:32 -0800 http://www.gossamer-threads.com/lists/clamav/users/54191 We call it "Immunet" ;) On Fri, Feb 3, 2012 at 9:53 AM, G.W. Haywood <ged@jubileegroup.co.uk> wrote: > Hi there, > > > On Fri, 3 Feb 2012, joeclem11 03 Feb 2012 14:35:22 -0800 http://www.gossamer-threads.com/lists/clamav/users/54180 On Fri, 03 Feb 2012 16:04:37 +0100 aCaB articulated: > On 02/03/12 14:48, Jerry wrote: > > sasl_username=tom@PC.network.net > [...] > > SkipAuthentic 03 Feb 2012 08:54:14 -0800 http://www.gossamer-threads.com/lists/clamav/users/54176 On 02/03/12 14:48, Jerry wrote: > sasl_username=tom@PC.network.net [...] > SkipAuthenticated file:/etc/good_guys > > /etc/good_guys > tom Hi Jerry, 03 Feb 2012 07:04:37 -0800 http://www.gossamer-threads.com/lists/clamav/users/54174 Hi there, On Fri, 3 Feb 2012, joeclem111 wrote: > Clamav 097.3 shows GUI is out of date, check for updates in "help" shows new > GUI available but t 03 Feb 2012 06:53:06 -0800 http://www.gossamer-threads.com/lists/clamav/users/54173 I have a few users on my network that need to have messages they send exempted from being scanned by the clamav-milter that I am using in combination 03 Feb 2012 05:48:23 -0800 http://www.gossamer-threads.com/lists/clamav/users/54171 Thanks guys, just gone through your replies, found the rpm for Mandriva2010.2, download, install and now ALL is good. Some nice touches in the new GU 02 Feb 2012 13:20:35 -0800 http://www.gossamer-threads.com/lists/clamav/users/54167 I am running Mandriva Linux 2010.2 (Official) and 2010.1_64 (Official) on another PC. joeclem111 wrote: > > Clamav 097.3 shows GUI is out of date, c 02 Feb 2012 13:11:09 -0800 http://www.gossamer-threads.com/lists/clamav/users/54166 On Thu, 2 Feb 2012 13:12:33 -0600, Dave M wrote: > On Thu, Feb 2, 2012 at 1:09 PM, Al Varnell <alvarnell@mac.com> wrote: >> On 2/2/12 10:50 AM, "joecl 02 Feb 2012 11:29:06 -0800 http://www.gossamer-threads.com/lists/clamav/users/54163 On Thu, Feb 2, 2012 at 1:09 PM, Al Varnell <alvarnell@mac.com> wrote: > On 2/2/12 10:50 AM, "joeclem111" <joeclem111@uk2.net> wrote: > >> >> Clamav 09 02 Feb 2012 11:12:33 -0800 http://www.gossamer-threads.com/lists/clamav/users/54162 On 2/2/12 10:50 AM, "joeclem111" <joeclem111@uk2.net> wrote: > > Clamav 097.3 shows GUI is out of date, check for updates in "help" shows new > GUI 02 Feb 2012 11:09:14 -0800 http://www.gossamer-threads.com/lists/clamav/users/54161 > Clamav 097.3 shows GUI is out of date, check for updates in "help" shows new > GUI available but there is no way to do the update. How do I do this 02 Feb 2012 10:57:08 -0800 http://www.gossamer-threads.com/lists/clamav/users/54160 Clamav 097.3 shows GUI is out of date, check for updates in "help" shows new GUI available but there is no way to do the update. How do I do this plea 02 Feb 2012 10:50:44 -0800 http://www.gossamer-threads.com/lists/clamav/users/54159 Thanks for the tip, Matt. I just uploaded both files. Thanks, Sasha On Jan 30, 2012, at 3:00 AM, clamav-users-request@lists.clamav.net wrote: > 30 Jan 2012 13:48:19 -0800 http://www.gossamer-threads.com/lists/clamav/users/54143 Στις 30/01/2012 01:40 μμ, ο/η Tomasz Kojm έγραψε: > On Mon, 30 Jan 2012 13:37:52 +0200 Sergey Tsabolov ( aka linuxman ) > <sergios@greek 30 Jan 2012 04:00:58 -0800 http://www.gossamer-threads.com/lists/clamav/users/54138 On Mon, 30 Jan 2012 13:37:52 +0200 Sergey Tsabolov ( aka linuxman ) <sergios@greeklug.gr> wrote: > > > Στις 30/01/2012 01:09 μμ, ο/η Tomasz 30 Jan 2012 03:40:38 -0800 http://www.gossamer-threads.com/lists/clamav/users/54137 Στις 30/01/2012 01:09 μμ, ο/η Tomasz Kojm έγραψε: > On Mon, 30 Jan 2012 12:58:55 +0200 Sergey Tsabolov ( aka linuxman ) > <sergios@greek 30 Jan 2012 03:37:52 -0800 http://www.gossamer-threads.com/lists/clamav/users/54136 On Mon, 30 Jan 2012 12:58:55 +0200 Sergey Tsabolov ( aka linuxman ) <sergios@greeklug.gr> wrote: > I not need worry about all this WARNING ? > Becaus 30 Jan 2012 03:09:45 -0800 http://www.gossamer-threads.com/lists/clamav/users/54135 Στις 30/01/2012 12:51 μμ, ο/η Tomasz Kojm έγραψε: > On Mon, 30 Jan 2012 12:18:51 +0200 Sergey Tsabolov ( aka linuxman ) > <sergios@greek 30 Jan 2012 02:58:55 -0800 http://www.gossamer-threads.com/lists/clamav/users/54134 On Mon, 30 Jan 2012 12:18:51 +0200 Sergey Tsabolov ( aka linuxman ) <sergios@greeklug.gr> wrote: > Hello to all on list, > I installed ClamAV 0.96.5 o 30 Jan 2012 02:51:28 -0800 http://www.gossamer-threads.com/lists/clamav/users/54133 Hello to all on list, I installed ClamAV 0.96.5 on ubuntu server 10.04.3 but after 3-4 days all messages about update is error if I run freshclam fr 30 Jan 2012 02:18:51 -0800 http://www.gossamer-threads.com/lists/clamav/users/54132 Have you uploaded the files that are being incorrectly detected here: http://www.clamav.net/lang/en/sendvirus/submit-fp/ ? Cheers, -matt On Sat, Ja 29 Jan 2012 18:55:08 -0800 http://www.gossamer-threads.com/lists/clamav/users/54130 Hello, ClamAV falsely detects a BC.Exploit.CVE_2010_0815 in a ".ppt" file. I ran the file through VirusTotal and only ClamAV shows it as infected. I 28 Jan 2012 16:22:55 -0800 http://www.gossamer-threads.com/lists/clamav/users/54125 Hi there, On Sat, 28 Jan 2012, Simon Hobson wrote: > Andy Newby wrote: > > > How can we have clamAV automatically scan the images after they are > 28 Jan 2012 03:26:32 -0800 http://www.gossamer-threads.com/lists/clamav/users/54122 Andy Newby wrote: >How can we have clamAV automatically scan the images after they are >uploaded (to catch any viruses as quickly as possible)? You' 28 Jan 2012 01:01:04 -0800 http://www.gossamer-threads.com/lists/clamav/users/54121 Hi Jim - thanks for the suggestion How can we have clamAV automatically scan the images after they are uploaded (to catch any viruses as quickly as p 27 Jan 2012 23:59:57 -0800 http://www.gossamer-threads.com/lists/clamav/users/54119 On Thu, 26 Jan 2012 11:40:48 +0100 [Cardiff] Tugdual de LASSAT <tugdual.delassat@cardiff.fr> wrote: > Thanks for your return... > Can i please ask you 26 Jan 2012 03:45:44 -0800 http://www.gossamer-threads.com/lists/clamav/users/54114 Thanks for your return... Can i please ask you some details on the problem ? Signatures erroneous ? Daemon problems ? Yours Tugdual de Lassat ---- 26 Jan 2012 02:40:48 -0800 http://www.gossamer-threads.com/lists/clamav/users/54113 On 01/25/2012 11:35 AM, Simon Hobson wrote: [snip] > >> 3) our web site allows users to upload images via a standard >> form. We >> would like to 25 Jan 2012 22:45:59 -0800 http://www.gossamer-threads.com/lists/clamav/users/54112 Andy Newby wrote: >We're using ClamAV on a Unix Centos Server, with WHM and Cpanel, we would >like to do this: > >1) Set up a cron job to scan a sin 25 Jan 2012 10:35:19 -0800 http://www.gossamer-threads.com/lists/clamav/users/54108 On Wed, 25 Jan 2012 16:45:09 +0100 [Cardiff] Tugdual de LASSAT <tugdual.delassat@cardiff.fr> wrote: > Hello Tomasz. > > FYI, did so, and have created 25 Jan 2012 10:00:16 -0800 http://www.gossamer-threads.com/lists/clamav/users/54104 On 1/25/2012 11:02 AM, [Cardiff] Tugdual de LASSAT wrote: > That one is good: > I do get : > > clamdscan selsia.ppt > /root/selsia.ppt: Heuristics. 25 Jan 2012 08:10:29 -0800 http://www.gossamer-threads.com/lists/clamav/users/54102 That one is good: I do get : clamdscan selsia.ppt /root/selsia.ppt: Heuristics.OLE2.ContainsMacros FOUND ----------- SCAN SUMMARY ----------- Inf 25 Jan 2012 08:02:27 -0800 http://www.gossamer-threads.com/lists/clamav/users/54101 On 1/25/2012 9:48 AM, [Cardiff] Tugdual de LASSAT wrote: > Hello the list.. > > I have a problem, i wish to submit to your review... > We run 4 years 25 Jan 2012 07:54:55 -0800 http://www.gossamer-threads.com/lists/clamav/users/54100 Hello Tomasz. FYI, did so, and have created ID N�4269, bugzilla report.. Not knowing I enabled severity to blocker (first in list), but please change 25 Jan 2012 07:45:09 -0800 http://www.gossamer-threads.com/lists/clamav/users/54099 Hi, We're using ClamAV on a Unix Centos Server, with WHM and Cpanel, we would like to do this: 1) Set up a cron job to scan a single domain (via Cp 25 Jan 2012 07:42:55 -0800 http://www.gossamer-threads.com/lists/clamav/users/54098 On Wed, 25 Jan 2012 16:16:56 +0100 [Cardiff] Tugdual de LASSAT <tugdual.delassat@cardiff.fr> wrote: > Thanks for your prompt return ... > > Problem i 25 Jan 2012 07:27:06 -0800 http://www.gossamer-threads.com/lists/clamav/users/54097 Thanks for your prompt return ... Problem is: 1- That specific powerpoint doesn't use macros (it's a plain slide with no macros in it) 2- An excel f 25 Jan 2012 07:16:56 -0800 http://www.gossamer-threads.com/lists/clamav/users/54096 On Wed, 25 Jan 2012 16:02:56 +0100 [Cardiff] Tugdual de LASSAT <tugdual.delassat@cardiff.fr> wrote: > I do understant that it is the function OLE2Con 25 Jan 2012 07:11:33 -0800 http://www.gossamer-threads.com/lists/clamav/users/54094 On 01/25/2012 05:02 PM, [Cardiff] Tugdual de LASSAT wrote: > Hello the list.. > > I have a problem, i wish to submit to your review... > We run 4 yea 25 Jan 2012 07:05:51 -0800 http://www.gossamer-threads.com/lists/clamav/users/54095 Hello the list.. I have a problem, i wish to submit to your review... We run 4 years discontinuating, an Exim+Clamav mail server solution that ran sm 25 Jan 2012 07:02:56 -0800 http://www.gossamer-threads.com/lists/clamav/users/54092 Hello the list.. I have a problem, i wish to submit to your review... We run 4 years discontinuating, an Exim+Clamav mail server solution that ran sm 25 Jan 2012 06:48:05 -0800 http://www.gossamer-threads.com/lists/clamav/users/54093 On Tue, Jan 24, 2012 at 9:13 PM, Joel Esler <jesler@sourcefire.com> wrote: > This has been handled. > I noticed this. Thanks. P. ____________________ 25 Jan 2012 00:21:24 -0800 http://www.gossamer-threads.com/lists/clamav/users/54088 This has been handled. On Tue, Jan 24, 2012 at 3:52 AM, polloxx <polloxx@gmail.com> wrote: > On Tue, Jan 24, 2012 at 9:05 AM, Al Varnell <alvarnell@ 24 Jan 2012 12:13:54 -0800 http://www.gossamer-threads.com/lists/clamav/users/54085 | On 01/24/2012 01:05 AM, Greg Cirino wrote: |> Ok, I'm not sure what is happening, but I did a wget of the main.cvd and |> ran the sigtool against it 24 Jan 2012 01:38:04 -0800 http://www.gossamer-threads.com/lists/clamav/users/54083 On 01/24/2012 01:05 AM, Greg Cirino wrote: > Ok, I'm not sure what is happening, but I did a wget of the main.cvd and > ran the sigtool against it wit 24 Jan 2012 01:01:57 -0800 http://www.gossamer-threads.com/lists/clamav/users/54081 On 01/24/2012 12:46 AM, Greg Cirino wrote: > > Why is libclamav looking for main.mdb on a linux system? > main.cvd consists of a number of signatur 24 Jan 2012 01:00:11 -0800 http://www.gossamer-threads.com/lists/clamav/users/54082 On Tue, Jan 24, 2012 at 9:05 AM, Al Varnell <alvarnell@mac.com> wrote: > On Jan 23, 2012, at 11:44 PM, polloxx <polloxx@gmail.com> wrote: > >> We rece 24 Jan 2012 00:52:30 -0800 http://www.gossamer-threads.com/lists/clamav/users/54080 On Jan 23, 2012, at 11:44 PM, polloxx <polloxx@gmail.com> wrote: > We received a virus not detected by Clamav. VirusTotal shows a 23/43 > detection r 24 Jan 2012 00:05:49 -0800 http://www.gossamer-threads.com/lists/clamav/users/54079 > Dear list, > > We received a virus not detected by Clamav. VirusTotal shows a 23/43 > detection ratio. Trend Micro recogises it as TROJ_GEN.R06C8AN. 23 Jan 2012 23:53:03 -0800 http://www.gossamer-threads.com/lists/clamav/users/54078 Dear list, We received a virus not detected by Clamav. VirusTotal shows a 23/43 detection ratio. Trend Micro recogises it as TROJ_GEN.R06C8AN. Yester 23 Jan 2012 23:44:16 -0800 http://www.gossamer-threads.com/lists/clamav/users/54077 Ok, IMHO sigtool should return the same information (results) regardless if the debug flag is set or not. This means, using sigtool --debug --info=ma 23 Jan 2012 15:43:12 -0800 http://www.gossamer-threads.com/lists/clamav/users/54075 Ok, I'm not sure what is happening, but I did a wget of the main.cvd and ran the sigtool against it with the following command: sigtool --info=main.c 23 Jan 2012 15:05:04 -0800 http://www.gossamer-threads.com/lists/clamav/users/54074