search for: eicar

List, we are working on implementing an antivirus solution (samba-vscan + clamav)on our samba shares. We performed the steps mentioned on some guides we found in Portuguese and things seems to be installed ok. But when we make a test and try to access a share, every file on it is not accessible (though we can mount the share) and after looking at /var/log/messages we see the following: ... Mar 11

Hello, I have installed samba-vscan module but when I try to read a test file: May 24 12:14:12 va2 smbd_vscan-clamav[15035]: ERROR: file /home/testav/eicar.com not found, not readable or an error occured why ? my smb.conf for homes: [homes] comment = home of %U, %u read only = No valid users = %U create mask = 0644 directory mask = 0775 browseable = No vfs object = vscan-clamav vscan-c...

...cannedonly flush_sendbuffer: failed to send files to AV scanner, discarding files.smbd_dirptr_get_entry mask=[*] found dperusich/test.txt is being scanned for viruses fname=test.txt is being scanned for viruses (test.txt is being scanned for viruses) smbd_dirptr_get_entry mask=[*] found dperusich/eicar.com is being scanned for viruses fname=eicar.com is being scanned for viruses (eicar.com is being scanned for viruses) [2011/05/19 12:46:33.993187, 3] modules/vfs_scannedonly.c:264(flush_sendbuffer) scannedonly flush_sendbuffer: error sending on socket 37 to scanner: Transport endpoint is not co...

...t unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/opt/dovecot/libexec/dovecot/deliver -d ${recipient} -f ${sender} On the same machine, with 2.2.23 I get a bounce mail when trying to send a virus, with the subject "VIRUS in message apparently from you (Eicar-Test-Signature)", to both the users inbox as well as to the mailbox of virusalert at ourdomain.internal With 2.3.0, in the logs I get an error: relay=dovecot, delay=0.01, delays=0/0/0/0, dsn=5.3.0, status=bounced (command line usage error. Command output: lda: Fatal: Invalid -f parameter: Mi...

...- - pipe > > flags=DRhu user=vmail:vmail argv=/opt/dovecot/libexec/dovecot/deliver -d ${recipient} -f ${sender} > > > > On the same machine, with 2.2.23 I get a bounce mail when trying to send a virus, with the subject "VIRUS in message apparently from you (Eicar-Test-Signature)", to both the users inbox as well as to the mailbox of virusalert at ourdomain.internal > > > > With 2.3.0, in the logs I get an error: > > > > relay=dovecot, delay=0.01, delays=0/0/0/0, dsn=5.3.0, status=bounced (command line usage error. Command output...

...e LLVM test-suite" and "people who don't know how to disable their antivirus" may not be empty, but it's really too small to care about. The test-suite isn't meant to be used by end-users, we can expect anyone who wants to try the testsuite to be smart enough to put "eicar" in the search engine of their choice and then then disable their antivirus after finding out what it is. I'm also strongly suggesting to disable any kind of antivirus guard on a machine that builds and tests llvm because it slows down builds significantly and has the tendency to make tes...

...test. If anyone have any sugestion I will gracefull regards Mariusz ..snip Could you solve this problem meanwhile? I'm fighting with same problem. With the help of your thread, i'm able to load the vscan-clamav module, but it seems to me, that the scanner doesn't work. If i copy the EICAR test to the share, there is no warning or anything else. What did you do? Thank's for help! With best regards Rainer Breuer WERKZEUGPROFI Mockel + Breuer oHG Heuweg 20 06886 Lutherstadt Wittenberg T.: +49 (0) 34 91 / 64 64 64 F.: +49 (0) 34 91 / 64 64 - 999 M.: RBreuer@WERKZEUGPROFI.de

...y=14dae9399d3b9b67cc04b2d60790 X-DSPAM-Result: Virus X-DSPAM-Processed: Mon Nov 28 21:03:47 2011 X-DSPAM-Confidence: 1.0000 X-DSPAM-Probability: 1.0000 X-DSPAM-Signature: 4ed43d8341479178914901 --14dae9399d3b9b67cc04b2d60790 Content-Type: text/plain; charset=ISO-8859-1 X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H* does not end up into SPAM, or anyplace else, including inbox. How do I make this work? sean

...mavisd/tmp/amavis-20130130T141411-06756/parts: lstat() failed: Permission denied. ERROR\n" at (eval 100) line 594. Jan 30 14:14:11 test1 amavis[6756]: (06756-01) (!!)WARN: all primary virus scanners failed, considering backups Jan 30 14:14:21 test1 amavis[6756]: (06756-01) Blocked INFECTED (Eicar-Test-Signature), <root at test1.test.htt-consult.com> -> <faxit at test.htt-consult.com>, Message-ID: <20130130191410.DA8082A099B at test1.test.htt-consult.com>, mail_id: 95-+1-aqz4Cb, Hits: -, size: 446, 10352 ms Jan 30 14:14:21 test1 postfix/lmtp[6777]: DA8082A099B: to=&l...

For the last several years, I have been using Vexira MailArmor (http://www.centralcommand.com) for anti-virus protection on the mail server here at Shorewall.net. While Vexira is an excellent product and I have been very happy with it, it costs me $300US/year for a one-domain license. To avoid this expense, I have decided to try ClamAV (http://www.clamav.net). I have installed ClamAV and since my

...n n - - pipe > flags=DRhu user=vmail:vmail argv=/opt/dovecot/libexec/dovecot/deliver -d ${recipient} -f ${sender} > > On the same machine, with 2.2.23 I get a bounce mail when trying to send a virus, with the subject "VIRUS in message apparently from you (Eicar-Test-Signature)", to both the users inbox as well as to the mailbox of virusalert at ourdomain.internal > > With 2.3.0, in the logs I get an error: > > relay=dovecot, delay=0.01, delays=0/0/0/0, dsn=5.3.0, status=bounced (command line usage error. Command output: lda: Fatal: Invali...

1. I can't tell Microsoft Security Essentials to ignore anything. Even if I click Allow, it breaks the pull. 2. The issue is not me. I don't download virus infested stuff and I don't visit dangerous sites so I rarely have a need for antivirus solutions. The issue is the newcomer Windows user whom I have to instruct to disable and/or remove his antivirus program if he or she wants to

...pipe > > flags=DRhu user=vmail:vmail argv=/opt/dovecot/libexec/dovecot/deliver > -d ${recipient} -f ${sender} > > > > On the same machine, with 2.2.23 I get a bounce mail when trying to send > a virus, with the subject "VIRUS in message apparently from you > (Eicar-Test-Signature)", to both the users inbox as well as to the mailbox > of virusalert at ourdomain.internal > > > > With 2.3.0, in the logs I get an error: > > > > relay=dovecot, delay=0.01, delays=0/0/0/0, dsn=5.3.0, status=bounced > (command line usage error. Comm...

...ot; and "people who > don't know how to disable their antivirus" may not be empty, but it's > really too small to care about. The test-suite isn't meant to be used by > end-users, we can expect anyone who wants to try the testsuite to be smart > enough to put "eicar" in the search engine of their choice and then then > disable their antivirus after finding out what it is. > > I'm also strongly suggesting to disable any kind of antivirus guard on a > machine that builds and tests llvm because it slows down builds > significantly and has...

...I recently used the Amavisd howto to setup a couple of mailservers, which saved me from hours of searching online and reading novels of documentation. Since Ned is taking a little break from the Amavisd page, I would like to help contribute. There were a few things I'd like to add, like GTUBE/EICAR testing and SELinux config lines. My wiki username is WilliamFong. I'm frequently on Freenode IRC as either "seekwill" or "will". Please let me know how I may contribute. Thanks, -will ----- Original Message ----- From: "Ned Slider" <ned at unixmail.co.uk...

...LEDIR/%u ]; \ # then cp -R $PROFILEDIR/default $PROFILEDIR/%u; \ # chmod -R 700 $PROFILEDIR/%u; chown -R %u:%g $PROFILEDIR/%u; fi #########################Partie Spécifique Sorral############################# #Faux virus - Pour test des antivirus [Test Antivirus] path = /var/eicar read only = yes user = @utilisateurs #Section des groupes #Le public [public] path = /users/groups/public browseable = yes writable = yes #L'option suivante assure que les acls par défaut seront bien héritées #Les acls de la doivent sont positionnées ainsi ##...