<?xml version="1.0" encoding="iso-8859-1" ?>
<?xml-stylesheet title="XSL_formatting" type="text/xsl" href="/images/lists/rssstyle2.xsl"?>
<rss version="2.0">
<channel>
<title>ClamAV | users</title>
<description>Mailing List Archive by Gossamer Threads</description>
<link>http://www.gossamer-threads.com/lists/clamav/users/</link>
<language>en-us</language>
<copyright>(c) Gossamer Threads Inc. All rights reserved.</copyright>
<lastBuildDate>12 Feb  2012 11:54:40 -0800</lastBuildDate>
<ttl>120</ttl>
<image>
<title>Gossamer Threads | ClamAV | users</title>
<width>75</width>
<height>23</height>
<link>http://www.gossamer-threads.com/lists/clamav/users/</link>
<url>http://www.gossamer-threads.com/images/lists/rss_logo.jpg</url>
</image>
<item>
<title>virusdb updates</title>
<description>Do we really need information of not added submissions to clamav-virusdb mailing list? Does submitter even get the submission ID some way? These submi</description>
<pubDate>11 Feb  2012 03:49:29 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54262</link>
</item><item>
<title>Multiple clamd daemons</title>
<description>I am (will be) running on a relatively large SGI Origin with a couple of hundred processors available. Is there an easy configuration setting to enabl</description>
<pubDate>10 Feb  2012 12:19:16 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54249</link>
</item><item>
<title>multiple viruses detected</title>
<description>Hello, How does clamd behave if it detects multiple viruses/phishes in a file? Does it have some internal logic that tells which to report or does it</description>
<pubDate>10 Feb  2012 10:12:26 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54246</link>
</item><item>
<title>Question about not recognized malware IN a zipfile</title>
<description>Hello List Yesterday we received a lot of &amp;quot;DHL Delivery Notification Messages&amp;quot; with a zip File as attachment. The zip file contains an exe file whi</description>
<pubDate>10 Feb  2012 05:45:11 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54242</link>
</item><item>
<title>Probably false-positive Exploit.MS04_028-4 reported</title>
<description>I just reported sample as false-positive, which is detected as Exploit.MS04_028-4. This picture is generated by web-camera with SHA1 d7ad16339fbf5d2b1</description>
<pubDate>10 Feb  2012 03:53:26 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54240</link>
</item><item>
<title>False Positve rule set of Snort-2.9.2.1 on clamd-0.97.3-3</title>
<description>Hi all,  Now I use Snort-2.9.2.1 and clamd-0.97.3-3 on the same OS, Scientific Linux 6.1 (i686). Since around a month ago, whenever daily clamscan i</description>
<pubDate>08 Feb  2012 07:25:33 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54224</link>
</item><item>
<title>Cannot disable BC.Exploit.CVE_2011_3412 FP</title>
<description>Hi! I&amp;#039;m trying to disable this signature, since it&amp;#039;s giving my FPs for some XLS files (yes, I already submitted it as FP today): mail2:/var/lib/clam</description>
<pubDate>07 Feb  2012 05:08:17 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54201</link>
</item><item>
<title>Untit Testing</title>
<description>I&amp;#039;ve recently installed .97.3 on an SGI Origin 3000 running TRIX v6.5.28 using gcc 3.2.1. (I did need to make some source file modifications).  I was</description>
<pubDate>06 Feb  2012 11:39:32 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54191</link>
</item><item>
<title>Re: no GUI update</title>
<description>Hi there, On Fri, 3 Feb 2012, joeclem111 wrote: &amp;gt; Clamav 097.3 shows GUI is out of date, check for updates in &amp;quot;help&amp;quot; shows new &amp;gt; GUI available but t</description>
<pubDate>03 Feb  2012 06:53:06 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54173</link>
</item><item>
<title>Exempting certain users from scanning</title>
<description>I have a few users on my network that need to have messages they send exempted from being scanned by the clamav-milter that I am using in combination</description>
<pubDate>03 Feb  2012 05:48:23 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54171</link>
</item><item>
<title>[Clamav-users] no GUI update</title>
<description>Clamav 097.3 shows GUI is out of date, check for updates in &amp;quot;help&amp;quot; shows new GUI available but there is no way to do the update. How do I do this plea</description>
<pubDate>02 Feb  2012 10:50:44 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54159</link>
</item><item>
<title>(SOLVED) Re: ClamAV not update</title>
<description>Στις 30/01/2012 01:40 μμ, ο/η Tomasz Kojm έγραψε: &amp;gt; On Mon, 30 Jan 2012 13:37:52 +0200 Sergey Tsabolov ( aka linuxman ) &amp;gt; &amp;lt;sergios@greek</description>
<pubDate>30 Jan  2012 04:00:58 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54138</link>
</item><item>
<title>ClamAV not update</title>
<description>Hello to all on list, I installed ClamAV 0.96.5 on ubuntu server 10.04.3 but after 3-4 days all messages about update is error if I run freshclam fr</description>
<pubDate>30 Jan  2012 02:18:51 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54132</link>
</item><item>
<title>False Positive BC.Exploit.CVE_2010_0815.BC.Exploit.CVE_2010_0815</title>
<description>Hello, ClamAV falsely detects a BC.Exploit.CVE_2010_0815 in a &amp;quot;.ppt&amp;quot; file. I ran the file through VirusTotal and only ClamAV shows it as infected. I</description>
<pubDate>28 Jan  2012 16:22:55 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54125</link>
</item><item>
<title>Re: [FWD: Re: Some questions about setting up ClamAV]</title>
<description>Hi Jim - thanks for the suggestion How can we have clamAV automatically scan the images after they are uploaded (to catch any viruses as quickly as p</description>
<pubDate>27 Jan  2012 23:59:57 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54119</link>
</item><item>
<title>Some questions about setting up ClamAV</title>
<description>Hi, We&amp;#039;re using ClamAV on a Unix Centos Server, with WHM and Cpanel, we would like to do this: 1) Set up a cron job to scan a single domain (via Cp</description>
<pubDate>25 Jan  2012 07:42:55 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54098</link>
</item><item>
<title>Heuristics.OLE2.ContainsMacros false positive</title>
<description>Hello the list.. I have a problem, i wish to submit to your review... We run 4 years discontinuating, an Exim+Clamav mail server solution that ran sm</description>
<pubDate>25 Jan  2012 07:02:56 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54092</link>
</item><item>
<title>undetected virus</title>
<description>Dear list, We received a virus not detected by Clamav. VirusTotal shows a 23/43 detection ratio. Trend Micro recogises it as TROJ_GEN.R06C8AN. Yester</description>
<pubDate>23 Jan  2012 23:44:16 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54077</link>
</item><item>
<title>sigtool bug???</title>
<description>Ok, IMHO sigtool should return the same information (results) regardless if the debug flag is set or not. This means, using sigtool --debug --info=ma</description>
<pubDate>23 Jan  2012 15:43:12 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54075</link>
</item><item>
<title>sigtool verifies but freshclam fails</title>
<description>Ok, I&amp;#039;m not sure what is happening, but I did a wget of the main.cvd and ran the sigtool against it with the following command: sigtool --info=main.c</description>
<pubDate>23 Jan  2012 15:05:04 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54074</link>
</item><item>
<title>[LibClamAV] cli_tgzload: Invalid checksum for file main.mdb</title>
<description>Why is libclamav looking for main.mdb on a linux system? Best Regards Greg  _______________________________________________ Help us build a comprehe</description>
<pubDate>23 Jan  2012 14:46:43 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54073</link>
</item><item>
<title>freshclam Verification: Can&amp;#039;t verify database integrity</title>
<description>Hello Since upgrading from 0.97 to 0.97.3 it&amp;#039;s been less then satisfying on a fedora c3 server, I have a 7.3 server without issues Every time (it se</description>
<pubDate>23 Jan  2012 09:29:11 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54065</link>
</item><item>
<title>Permissions and ownership</title>
<description>Hi all,I&amp;#039;ve been reading through the clamav docs and found this section triggered a few questions. http://www.clamav.net/doc/latest/html/node24.html</description>
<pubDate>22 Jan  2012 00:07:06 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54057</link>
</item><item>
<title>Bytecode runtime error</title>
<description>$ clamdscan -V ClamAV 0.97.3/14323/Wed Jan 18 09:09:29 2012  LibClamAV Warning: Bytecode runtime error at line 0, col 0 LibClamAV Warning: [Bytecode</description>
<pubDate>18 Jan  2012 09:26:49 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54036</link>
</item><item>
<title>Exim email virus scanning</title>
<description>Hello, For the virus scan option in Exim with /etc/exim.conf: av_scanner = clamd:127.0.0.1 3310 What happens if virus is detected by ClamAV, does th</description>
<pubDate>17 Jan  2012 15:28:29 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54026</link>
</item><item>
<title>All midi files reported as positives</title>
<description>I run clamav on my mail server, and my daughter runs clamwin on Windows 7, on my recommendation. This morning&amp;#039;s scan showed midi files that have been</description>
<pubDate>16 Jan  2012 05:53:45 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54018</link>
</item><item>
<title>Database directory location confusion</title>
<description>Both freshclam.conf and clamd.conf have the following entry : #DatabaseDirectory /var/lib/clamav I&amp;#039;m a bit confused, I thought my signature database f</description>
<pubDate>14 Jan  2012 05:29:56 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/54010</link>
</item><item>
<title>ClamFS allows eicar test file in</title>
<description>HI all, I have a question about ClamFS, and I hope I don&amp;#039;t upset anyone asking my question in this mailing list. Sorry if I offend. I have ClamFS runn</description>
<pubDate>30 Dec  2011 07:14:57 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53913</link>
</item><item>
<title>Amavisd and clamav socket do not match</title>
<description>Hi List(s), Amavis currently uses &amp;quot;/var/run/clamav/clamd&amp;quot; as its socket in @av_scanners. The default, although commented socket in clamav is /tmp/cl</description>
<pubDate>29 Dec  2011 01:56:15 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53908</link>
</item><item>
<title>ClamFS Questions Here ?</title>
<description>Hi, Thanks in advance for any feedback. Is it ok to ask questions about problem&amp;#039;s I&amp;#039;m having with ClamFS to this mailing list ? Regards,Stephen.</description>
<pubDate>27 Dec  2011 23:10:22 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53902</link>
</item><item>
<title>clamd and IPv6</title>
<description>Hello. Does anybody use clamd with IPv6 ? I attempted to do it, but it not works. All complicated by the fact that it is my first experience with IPv</description>
<pubDate>26 Dec  2011 00:11:58 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53887</link>
</item><item>
<title>Calling Clamd INSTREAM on blocks of data, can a virus sneak by the edge of a block?</title>
<description>I am experimenting with a python script which uses http://xael.org/norman/python/pyclamd/ to scan blocks of data. Here is my scenario, I read one blo</description>
<pubDate>24 Dec  2011 21:48:47 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53880</link>
</item><item>
<title>Finding false positives</title>
<description>Hi, I have an email that was blocked by amavisd because clamav tagged it because it was received from securesites.net. I checked a few blacklists, an</description>
<pubDate>11 Dec  2011 21:24:41 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53800</link>
</item><item>
<title>CCEE 0.97.3 Patch Set Release</title>
<description>Clamav Common Execution Environment patch set. CCEE is a patch set to the ClamAV source that does the following: 1. Implements fixes for bugs 1754 an</description>
<pubDate>09 Dec  2011 15:02:26 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53789</link>
</item><item>
<title>clamav can&amp;#039;t access socket file</title>
<description>for some reason I am getting clamav errors in my postfix log files complaining that it can&amp;#039;t access it&amp;#039;s socket file. I&amp;#039;ve tried opening the permissio</description>
<pubDate>05 Dec  2011 08:18:30 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53755</link>
</item><item>
<title>Virus Signature queries</title>
<description>1. What do you mean by static malware. Why is MD5 based signature matching suitable for static malware? 2. What do you mean by a pre processed file? W</description>
<pubDate>04 Dec  2011 14:46:10 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53752</link>
</item><item>
<title>Code emulation</title>
<description>We have learnt that code emulation will be added in Clamav 0.98. We know that code emulation when used in conjunction with scanning is good at detecti</description>
<pubDate>04 Dec  2011 14:15:17 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53751</link>
</item><item>
<title>Notifying messages</title>
<description>What does mean messages like that following as just I started ClamAV? got 0 LibClamAV Warning: fmap_readpage: pread fail: asked for 4077 bytes @ offs</description>
<pubDate>01 Dec  2011 14:02:58 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53732</link>
</item><item>
<title>New user</title>
<description>Hello, I am a new clamav user trying to set it up for the first time. Is there a way to run clamav as daemon and scan only a folder?not the whole sys</description>
<pubDate>30 Nov  2011 14:36:17 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53714</link>
</item><item>
<title>Configuration Test</title>
<description>I have configured clamav to work with squid. How can I test if, in fact, infected files are blocked by clamav? Thanks in advance ___________________</description>
<pubDate>23 Nov  2011 10:04:00 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53643</link>
</item><item>
<title>Scanner memory and CPU usage</title>
<description>Is there a way to reduce the memory footprint of the scanner? It appears to take about 220M in memory to load the virus db. Also, it takes up all of</description>
<pubDate>22 Nov  2011 10:32:16 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53634</link>
</item><item>
<title>Disable specific virus signatures?</title>
<description>Hi I am a novice at this...is there a way to disable virus signatures that are generating several false positives? Also, how do you read the virus d</description>
<pubDate>22 Nov  2011 08:37:40 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53626</link>
</item><item>
<title>Supressing false positives</title>
<description>Hi: When I run ClamAV on a freebsd appliance, I get a bunch of false positives - that are primarily due to windows definitions that are not related</description>
<pubDate>21 Nov  2011 14:29:21 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53620</link>
</item><item>
<title>Lightweight version of clamav</title>
<description>Hi: I want to run ClamAV on a FreeBSD based appliance. However, it appears to have a performance impact that is significant (cpu/mem). Is there a li</description>
<pubDate>21 Nov  2011 14:28:44 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53621</link>
</item><item>
<title>Problems with permissions and clamav-unofficial-sigs</title>
<description>Hi, I have a fedora15 system with clamav-0.97.3 and amavis-2.6.6 with clamav-unofficial-sigs-3.7.1-5 and am having problems with permissions. clamd</description>
<pubDate>21 Nov  2011 14:10:39 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53619</link>
</item><item>
<title>ClamAV+MailScanner problem</title>
<description>Dear all, Please help. I have the following combination : Fedora 14, postfix 2.7.5-1, MailScanner 4.84.3, ClamAV 0.97.3 ClamAV is working fine from</description>
<pubDate>20 Nov  2011 23:34:13 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53615</link>
</item><item>
<title>libclamav warning</title>
<description>hi! i&amp;#039;m getting some warnings when scanning a directory: LibClamAV Warning: Bytcode 4 failed to run: Error during bytecode execution LibClamAV Warn</description>
<pubDate>18 Nov  2011 12:20:47 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53604</link>
</item><item>
<title>Freshclam problems after updating packages</title>
<description>Running CentOS 6, I&amp;#039;ve started getting messages like  No updates detected in the log for the freshclam daemon (the ClamAV update process). If the f</description>
<pubDate>18 Nov  2011 11:32:12 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53602</link>
</item><item>
<title>problems with daily.cld 13960</title>
<description>Is anyone else having problems with clamd after the daily.cld updated to version 13960. I&amp;#039;m running clamd 0.97.1, on Solaris 9 SPARC. SInce 13960</description>
<pubDate>17 Nov  2011 08:57:26 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53592</link>
</item><item>
<title>Clamav on Ubunt 10.04</title>
<description>Hello,   I have installed Clamav via apt-get install on my Ubuntu 10.04 64bit. Now I want to redirect the databases. I have create the folder /media</description>
<pubDate>14 Nov  2011 05:20:42 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53569</link>
</item><item>
<title>How can I have clamd reject items that can&amp;#039;t be scanned?</title>
<description>I see that there are ways to limit the level of archive that will be scanned as well as the size of the entities to be scanned. Is there a way for CL</description>
<pubDate>08 Nov  2011 08:41:22 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53511</link>
</item><item>
<title>Segfault error</title>
<description>Hello, Some time to time I am getting following error: kernel: clamd[5722]: segfault at 00002aaabe0c6000 rip 0000003e25c757ee rsp 00000000485dd200 e</description>
<pubDate>02 Nov  2011 07:29:40 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53483</link>
</item><item>
<title>A trojan is not blocked</title>
<description>Hello, I saw an interesting behavior related with for example with Email.Trojan-234. Configuration amavisd + ClamAV. When a message arrive with cont</description>
<pubDate>25 Oct  2011 05:55:12 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53451</link>
</item><item>
<title>clamd stops during selfcheck (here too)</title>
<description>Hi, Following the thread of David Alix &amp;quot;clamd abending at selfcheck&amp;quot; (th:e2ab86f7), I would like to report my related issue. I am running Clamav and</description>
<pubDate>24 Oct  2011 05:09:53 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53433</link>
</item><item>
<title>clamd unexpected termination: &amp;quot;... Failure in bytecode testmode&amp;quot;</title>
<description>Hi, I&amp;#039;m seeing a problem on a bunch of Solaris 10 SPARC servers running 0.97.x since about 00:55 BST this morning. Our 0.96 hosts seem to be ok (and</description>
<pubDate>24 Oct  2011 03:13:33 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53428</link>
</item><item>
<title>Mirror issues</title>
<description>Is it my lack of clue, or are there a fair amount of mirror issues today? -Jim P. _______________________________________________ Help us build a com</description>
<pubDate>23 Oct  2011 07:33:09 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53422</link>
</item><item>
<title>clamd abending at selfcheck</title>
<description>I am running Clamav and freshclam 0.97.1, called from mimedefang, with sendmail on Solaris 2.9. Starting yesterday morning, clamd has abended when</description>
<pubDate>20 Oct  2011 11:28:50 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53402</link>
</item><item>
<title>Phishing and ClamAV</title>
<description>Hello,  I am newbie with ClamAV and I am trying to improve phising accurance on an e-mail server installation. Unfortunatley I as not able to unders</description>
<pubDate>20 Oct  2011 03:59:08 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53390</link>
</item><item>
<title>0.97.3 compile on OSX 10. 6.8 with xcode 4.2</title>
<description>Works fine for 32bit intel ./configure --enable-llvm --enable-clamdtop --with-user=_clamav --with-group=_clamav Under 0.97.2 it worked fine on 64 bi</description>
<pubDate>19 Oct  2011 17:37:20 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53382</link>
</item><item>
<title>Inegrating with spamassassin</title>
<description>Hi, I have a fedora15 system with spamassassin-3.3.2 and clamav-0.97.2, and also using the clamav-unofficial-sigs. and I&amp;#039;ve just realized the score f</description>
<pubDate>19 Oct  2011 11:41:20 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53375</link>
</item><item>
<title>Value too large for defined data type</title>
<description>Hello everybody, I&amp;#039;m getting the following error trying to scan a file: WARNING: myfilename: Can&amp;#039;t access file myfilename: Value too large for defin</description>
<pubDate>14 Oct  2011 01:49:40 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53328</link>
</item><item>
<title>clamd exits with libclamav error</title>
<description>Hi, I have a fedora15 x86_64 box with clamav-0.97.2, postfix-2.8.4, and amavisd-new-2.6.6 with spamassassin-3.3.2 that has been running fine for quit</description>
<pubDate>10 Oct  2011 00:24:56 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53294</link>
</item><item>
<title>Scan files by date</title>
<description>I have a large number of files (9TB) with over a million files and thousands of directories. I would like to scan the group one time so I have a good</description>
<pubDate>30 Sep  2011 18:37:14 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53232</link>
</item><item>
<title>NetBSD with 97.2</title>
<description>I just installed 0.97.2 on a NetBSD 5.1 x86 box. When running  freshclam it hangs after Downloading daily-13703.cdiff [100%]. It can  sit there fo</description>
<pubDate>29 Sep  2011 06:32:45 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53206</link>
</item><item>
<title>Encrypted Documents</title>
<description>Hi I wanted to know if ClamAV detects Microsoft Office or OpenOffice encrypted documents. And in the next version? Thank you very much _____________</description>
<pubDate>28 Sep  2011 03:20:37 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53191</link>
</item><item>
<title>Configuring LogFacility</title>
<description>Hi all, i&amp;#039;m new here, please excuse my little english. I have a centralized syslog server and i&amp;#039;ve configured clamd to send logs as LogFacility local1</description>
<pubDate>27 Sep  2011 03:13:57 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53174</link>
</item><item>
<title>ClamAV Virus Database Search</title>
<description>When I go to &amp;lt;http://clamav-du.securesites.net/cgi-bin/clamgrok&amp;gt; and enter &amp;quot;OSX&amp;quot; I get a list of 34 hits for Mac OS signatures, but at least one is mi</description>
<pubDate>24 Sep  2011 17:52:33 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53156</link>
</item><item>
<title>clamav doesn`t start</title>
<description>Hello I use linux debian lenny on my server. I put the adress deb http://volatile.debian.org/debian-volatile lenny/volatile main contrib non-free i</description>
<pubDate>18 Sep  2011 08:55:02 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53098</link>
</item><item>
<title>clamav.akxnet.de Status</title>
<description>Just wondering if the status page &amp;lt;http://www.clamav.net/mirrors.html&amp;gt; should show two entries for clamav.akxnet.de since it represents two IP address</description>
<pubDate>18 Sep  2011 00:26:21 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53097</link>
</item><item>
<title>Obfuscated IP address.</title>
<description>Hi there, At about 1300 GMT today one of my mailservers rejected a message as being an obvious scam. As it happened I took a look at it. It&amp;#039;s a typ</description>
<pubDate>16 Sep  2011 08:53:41 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53086</link>
</item><item>
<title>Yet Another US Mirror Issue-Solved</title>
<description>It&amp;#039;s been almost twenty-four hours since the Firewall was fixed, so I thought I&amp;#039;d take this opportunity to thank everybody involved, both for backing</description>
<pubDate>14 Sep  2011 22:42:53 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53064</link>
</item><item>
<title>ClamAV fails to detect PDF /Launch actions</title>
<description>Hi, I encountered an issue where ClamAV doesn&amp;#039;t detect malicious payload in PDFs stored in a Launch Action. (PDF File Format Section 8.5.3 Action Typ</description>
<pubDate>14 Sep  2011 10:55:20 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53060</link>
</item><item>
<title>CCEE 0.97.2 Patch Set Release</title>
<description>Clamav Common Execution Environment patch set. CCEE is a patch set to the ClamAV source that does the following: 1. Implements fixes for bugs 1754 an</description>
<pubDate>14 Sep  2011 08:36:56 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/53053</link>
</item><item>
<title>git.clamav.net down?</title>
<description>Luca, My commit seems to have been pushed [*]. But it seems it didn&amp;#039;t propagate to git.clamav.net. Also no commit email is showing up and the bbot wa</description>
<pubDate>08 Sep  2011 08:01:39 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52948</link>
</item><item>
<title>Yet Another US Mirror Issue</title>
<description>According to my mirrors.dat file the last time I successfully connected to the US Mirror at akxnet.de (IP: 88.198.67.125) (obviously located in DE) wa</description>
<pubDate>06 Sep  2011 20:11:00 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52924</link>
</item><item>
<title>rpm upgrade problem</title>
<description>Hello,  I&amp;#039;ve been mucking around all day trying to upgrade a clamAV installation on a redhat server: 2.6.18-238.9.1.el5 #1 SMP Fri Mar 18 12:42:39 E</description>
<pubDate>06 Sep  2011 13:34:16 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52915</link>
</item><item>
<title>eicar-like phishing test signature?</title>
<description>Hello, does clamav include any signature used to test phishing mail? -- Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/ Warning</description>
<pubDate>06 Sep  2011 02:55:16 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52904</link>
</item><item>
<title>How to distinguish phiching signatures?</title>
<description>Hello, I&amp;#039;m trying to distinguish between phishing and other signatures on a mail server - phishing reports should be passed to our abuse@ account,</description>
<pubDate>05 Sep  2011 07:18:03 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52895</link>
</item><item>
<title>potential FP on Trojan.Rootkit-3041?</title>
<description>Hi there We picked up an infected machine, and ran ClamAV over it. ClamAV picked up iastor.sys as Trojan.Rootkit-3041 However according to virustot</description>
<pubDate>04 Sep  2011 18:57:54 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52888</link>
</item><item>
<title>Database not updating</title>
<description>Both current.cvd.clamav.net and your home page say the latest version of daily.cvd is 13538, but according to Twitter there have been seven updates in</description>
<pubDate>03 Sep  2011 11:12:36 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52881</link>
</item><item>
<title>file descriptor limit still 1024 on large 64bit system?</title>
<description>Hi there I&amp;#039;ve got a new 16-core CentOS-6 (64bit) with gobs of RAM, running clamav-0.97.2 I increased &amp;quot;nofiles&amp;quot; to 8192 in /etc/security/limits.conf,</description>
<pubDate>28 Aug  2011 20:06:39 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52819</link>
</item><item>
<title>Clarification of report needed</title>
<description>While cleaning up reported infected files, I&amp;#039;m seeing messages that point to a directory without giving a file identifier, such as  /home/anne/.kde/</description>
<pubDate>28 Aug  2011 02:42:44 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52815</link>
</item><item>
<title>ClamaV reporting problems on CentOS 6</title>
<description>I have been running ClamAV on CentOS 5 for a very long time, scanning /home and a data directory nightly via cron, and backup directories weekly.  I</description>
<pubDate>27 Aug  2011 01:30:54 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52809</link>
</item><item>
<title>Source RPM for RHEL?</title>
<description>Hey folks,   So, I can&amp;#039;t seem to find an SRPM for RHEL that actually matches its checksum, which makes me a bit .. uneasy, given the nature of the s</description>
<pubDate>23 Aug  2011 11:48:37 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52774</link>
</item><item>
<title>make check....</title>
<description>Hello, I see the next results listing every time when I do a &amp;quot;make check&amp;quot;: git-clamav-devel/unit_tests&amp;#039; PASS: check_clamav PASS: check_freshclam.sh P</description>
<pubDate>21 Aug  2011 14:12:57 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52759</link>
</item><item>
<title>Problems compiling 0.97.2 on Solaris 9</title>
<description>Hi, I&amp;#039;m attempting to compile a 64 bit version of 0.97.2 on Solaris 9, and running into some issues. Version 0.96.4 compiled fine in the same enviro</description>
<pubDate>19 Aug  2011 12:40:41 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52751</link>
</item><item>
<title>The error log message &amp;quot;milter=clmilter, tempfail&amp;quot;</title>
<description>Hello,   In the /var/log/maillog, sometimes we will see the log message &amp;quot;milter=clmilter, tempfail&amp;quot;. Is there anything that we should notice? The C</description>
<pubDate>18 Aug  2011 03:05:59 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52740</link>
</item><item>
<title>US Mirror</title>
<description>US Users seem to be having a continuing problem with off-shore mirror 213.165.80.159, which was added to our rotation a few months ago. I&amp;#039;ve tried se</description>
<pubDate>13 Aug  2011 15:19:14 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52715</link>
</item><item>
<title>outdated message notice disappeared</title>
<description>Hello,   In the earlier version before clamav 0.97.1, we will see the outdated message notice &amp;quot;This version of the ClamAV engine is outdated&amp;quot; once</description>
<pubDate>12 Aug  2011 09:05:26 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52710</link>
</item><item>
<title>clamav dies unexpectly</title>
<description>Hello everybody: I&amp;#039;ve been using Clamav since 2005 on Ubuntu and Debian sistems, since one year I&amp;#039;ve been compiling it with the clamuko module (</description>
<pubDate>11 Aug  2011 11:12:38 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52699</link>
</item><item>
<title>Re: [Clamav-announce] announcing ClamAV 0.97.2</title>
<description>On Mon, Jul 25, 2011 at 6:09 PM, Luca Gibelli &amp;lt;luca@clamav.net&amp;gt; wrote: &amp;gt; Dear ClamAV users, &amp;gt; &amp;gt; ClamAV 0.97.2 fixes problems with the bytecode engine,</description>
<pubDate>29 Jul  2011 08:03:57 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52631</link>
</item><item>
<title>CCEE 0.97.1.1 Patch Set Release - Happy Sysadmin Day</title>
<description>Clamav Common Execution Environment patch set. CCEE is a patch set to the ClamAV source that does the following: 1. Implements fixes for bugs 1754 an</description>
<pubDate>29 Jul  2011 07:53:11 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52630</link>
</item><item>
<title>[Clamav-users] Heuristics.Phishing.Email.SpoofedDomain</title>
<description>Hi I am new to the forum / newbie with linux/perl etc!!  And dont know where else to turn ? Ive emailed my webserver host and they are unless saying</description>
<pubDate>28 Jul  2011 14:10:12 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52624</link>
</item><item>
<title>Opcode 20 of type 0 is not implemented yet!</title>
<description>Hello, At a customer I run every night a scan over the files with: clamscan -ir /path/ Since the upgrade from Debian Lenny to Squeeze, and, at the s</description>
<pubDate>27 Jul  2011 01:24:25 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52616</link>
</item><item>
<title>Phishing.Heuristics.Email.SpoofedDomain</title>
<description>Is there something going on with subject infections? I see that it&amp;#039;s listed on the clamav home page as a &amp;quot;Current Threat&amp;quot;. We got several users aski</description>
<pubDate>26 Jul  2011 13:59:54 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52601</link>
</item><item>
<title>Third Party web interface</title>
<description>Hello, The ClamAV project is launching a new service called &amp;quot;Third Party web interface&amp;quot;. It will allow selected individuals/organizations to publish</description>
<pubDate>25 Jul  2011 09:35:38 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52588</link>
</item><item>
<title>Reporting infected spam</title>
<description>Looking for the correct way to handle this. I&amp;#039;ve been receiving a lot of infected email lately supposedly bounced messages infected with the MyDoom wo</description>
<pubDate>23 Jul  2011 17:07:53 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52578</link>
</item><item>
<title>CLUES -- CLamAv Unified Event System 0.3 Release</title>
<description>http://www.cmpublishers.com/oss/#clues Enjoy.  -- Sincerely, Nathan Gibbs Systems Administrator Christ Media http://www.cmpublishers.com</description>
<pubDate>23 Jul  2011 10:51:29 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52575</link>
</item><item>
<title>Clam Bake 0.2 Released</title>
<description>A tool for enumerating, stress testing, and/or shutting down instances of the Clam Antivirus service on a network. Download Freely. Enjoy thoroughly.</description>
<pubDate>23 Jul  2011 09:14:37 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52574</link>
</item><item>
<title>CLAMAV-MILTER, sighup</title>
<description>It would appear that sighup, in clamav 0.97.1, should re-open the log files when it receives a sighup. In our case, it simply ends clamav-milter, no m</description>
<pubDate>22 Jul  2011 19:40:51 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/clamav/users/52565</link>
</item>
</channel>
</rss>

