I use a Smoothwall firewall. and clamav in added on. if I look at the location of the database directory. I do not see a local.ign2. Do I create one and will it work with this Smoothwall firewall?
-----Original Message----- From: clamav-users-boun...@lists.clamav.net [mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of Török Edwin Sent: April-13-11 3:20 PM To: clamav-users@lists.clamav.net Subject: Re: [clamav-users] Access has been denied page On 2011-04-13 22:10, Antonio Pereira wrote: > Hello, > > I have a user that receives an email from a legitimate online newspaper site > and since Monday they click on links in that email address and DG blocks the > page with the following message > > Virus MBL_200562.UNOFFICIAL found > > Is this a valid virus because I could not find any info on this in Google. > The only thing I found was to remove the entry from the clamav db, which I > did but because there is a daily update it sets it back. > > Also, I tried to view an online flyer and I received this message as well > from my own pc. > > What is this? Probably the 3rdparty signature from here: http://www.malware.com.br/cgi/submit?action=list_clamav_ext MBL_200562:0:*:3030322e6c61 Run that through sigtool --decode to see what it is, but it looks like something very FP prone, at very least it should check for 'http:' too You can add MBL_200562.UNOFFICIAL to a file local.ign2 in your database directory. Best regards, --Edwin _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml Confidentiality Warning: This message and any attachments are intended only for the use of the intended recipient(s), are confidential, and may be privileged. If you are not the intended recipient, you are hereby notified that any review, retransmission, conversion to hard copy, copying, circulation or other use of this message and any attachments is strictly prohibited. If you are not the intended recipient, please notify the sender immediately by return e-mail, and delete this message and any attachments from your system. Thank you. Information confidentielle: Le présent message, ainsi que tout fichier qui y est joint, est envoyé à l'intention exclusive de son ou de ses destinataires; il est de nature confidentielle et peut constituer une information privilégiée. Nous avertissons toute personne autre que le destinataire prévu que tout examen, réacheminement, impression, copie, distribution ou autre utilisation de ce message et de tout fichier qui y est joint est strictement interdit. Si vous n'êtes pas le destinataire prévu, veuillez en aviser immédiatement l'expéditeur par retour de courriel et supprimer ce message et tout document joint de votre système. Merci. _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
