Re: [clamav-users] Clamwin will not update or so Slow it's Impractical to try

2016-11-12 Thread Rudy Stebih
It's because their mirrors are extremely slow and they won't add any new
mirrors.  What you are waiting for is for a mirror to timeout (30sec)
before it will move onto the next mirror. And so on...

I routinely go through 5 or 6 mirrors before I find one that's active.

On Sat, Nov 12, 2016 at 1:55 PM, Al Varnell  wrote:

> You are asking in the wrong place. Try the Clamwin Forum <
> http://forums.clamwin.com>
> or their mailing list  mailman/listinfo/clamwin-users>.
>
> -Al-
>
> On Sat, Nov 12, 2016 at 12:59 PM, Lee Gold wrote:
> >
> > Using Clamwin.
> >
> > It just won't update the definitions. Slow updates have been a problem
> > ever since I can remember.
> >
> > It's a major question that's been asked many times.
> >
> > Why are updates so slow? Why can't it be fixed?
>
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Clamwin will not update or so Slow it's Impractical to try

2016-11-12 Thread Rudy Stebih
ClamAV.

On Sat, Nov 12, 2016 at 5:19 PM, Joel Esler (jesler) 
wrote:

> Who is “they”?  Us?  Or ClamWin?
>
> --
> Joel Esler | Talos: Manager | jes...@cisco.com<mailto:jes...@cisco.com>
>
>
>
>
>
>
> On Nov 12, 2016, at 5:02 PM, Rudy Stebih  clamavmir...@gmail.com>> wrote:
>
> It's because their mirrors are extremely slow and they won't add any new
> mirrors.  What you are waiting for is for a mirror to timeout (30sec)
> before it will move onto the next mirror. And so on...
>
> I routinely go through 5 or 6 mirrors before I find one that's active.
>
> On Sat, Nov 12, 2016 at 1:55 PM, Al Varnell mailto:alva
> rn...@mac.com>> wrote:
>
> You are asking in the wrong place. Try the Clamwin Forum <
> http://forums.clamwin.com>
> or their mailing list <http://lists.sourceforge.net/
> mailman/listinfo/clamwin-users>.
>
> -Al-
>
> On Sat, Nov 12, 2016 at 12:59 PM, Lee Gold wrote:
>
> Using Clamwin.
>
> It just won't update the definitions. Slow updates have been a problem
> ever since I can remember.
>
> It's a major question that's been asked many times.
>
> Why are updates so slow? Why can't it be fixed?
>
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net<mailto:clamav-users@lists.clamav.net>
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net<mailto:clamav-users@lists.clamav.net>
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Clamwin will not update or so Slow it's Impractical to try

2016-11-12 Thread Rudy Stebih
First, it's obvious the guys ClamAV installation is outdated and needs to
be updated by the message 'Your ClamAV installation is OUTDATED!'

Fix that first and I bet it will work fine after that!

On Sat, Nov 12, 2016 at 5:27 PM, Al Varnell  wrote:

> Looks like either there is a related discussion or the same one taking
> place at
> <http://forums.clamwin.com/viewtopic.php?t=4544>.
>
> Sent from Janet's iPad
>
> -Al-
>
> On Nov 12, 2016, at 5:19 PM, "Joel Esler (jesler)" wrote:
> > Who is “they”?  Us?  Or ClamWin?
> >
> > --
> > Joel Esler | Talos: Manager | jes...@cisco.com<mailto:jes...@cisco.com>
> >
> > On Nov 12, 2016, at 5:02 PM, Rudy Stebih wrote:
> >> It's because their mirrors are extremely slow and they won't add any new
> >> mirrors.  What you are waiting for is for a mirror to timeout (30sec)
> >> before it will move onto the next mirror. And so on...
> >>
> >> I routinely go through 5 or 6 mirrors before I find one that's active.
> >>
> >> On Sat, Nov 12, 2016 at 1:55 PM, Al Varnell wrote:
> >>> You are asking in the wrong place. Try the Clamwin Forum <
> >>> http://forums.clamwin.com>
> >>> or their mailing list <http://lists.sourceforge.net/
> >>> mailman/listinfo/clamwin-users>.
> >>>
> >>> -Al-
> >>>
> >>> On Sat, Nov 12, 2016 at 12:59 PM, Lee Gold wrote:
> >>>> Using Clamwin.
> >>>>
> >>>> It just won't update the definitions. Slow updates have been a problem
> >>>> ever since I can remember.
> >>>>
> >>>> It's a major question that's been asked many times.
> >>>>
> >>>> Why are updates so slow? Why can't it be fixed?
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Clamwin will not update or so Slow it's Impractical to try

2016-11-12 Thread Rudy Stebih
Clamwin & ClamAV are exactly the same engine.  The ONLY difference is that
Clamwin has a pretty windows UI.

First of all, I don't get paid to do QC for them.

Second, it clearly states in the 'Mirror' documentation that 'Every mirror
is continuously monitored to ensure that every ClamAV user gets the latest
virus database.'

They are not monitoring the mirrors anymore, and as such everyone is
getting crappy update speeds because half the mirrors are down and they are
not taking anymore mirrors to replace those down mirrors...

On Sat, Nov 12, 2016 at 5:49 PM, Al Varnell  wrote:

> But again, that would appear to be a Clamwin problem as it doesn't appear
> they have updated the scan engine for some reason. The current version was
> released in January.
>
> But perhaps your issues can be addressed here, since you brought it up. I
> suspect the ClamAV network folks could look into that if you can post a
> summary of the mirror sites that aren't working for you along with your
> geographic location and the results of running these commands:
>
> freshclam --list-mirrors
> host database.clamav.net
>
> -Al-
> --
> ClamXav User
>
> On Sat, Nov 12, 2016 at 05:39 PM, Rudy Stebih wrote:
> >
> > First, it's obvious the guys ClamAV installation is outdated and needs to
> > be updated by the message 'Your ClamAV installation is OUTDATED!'
> >
> > Fix that first and I bet it will work fine after that!
> >
> > On Sat, Nov 12, 2016 at 5:27 PM, Al Varnell  wrote:
> >
> >> Looks like either there is a related discussion or the same one taking
> >> place at
> >> <http://forums.clamwin.com/viewtopic.php?t=4544>.
> >>
> >> Sent from Janet's iPad
> >>
> >> -Al-
> >>
> >> On Nov 12, 2016, at 5:19 PM, "Joel Esler (jesler)" wrote:
> >>> Who is “they”?  Us?  Or ClamWin?
> >>>
> >>> --
> >>> Joel Esler | Talos: Manager | jes...@cisco.com<mailto:jes...@cisco.com
> >
> >>>
> >>> On Nov 12, 2016, at 5:02 PM, Rudy Stebih wrote:
> >>>> It's because their mirrors are extremely slow and they won't add any
> new
> >>>> mirrors.  What you are waiting for is for a mirror to timeout (30sec)
> >>>> before it will move onto the next mirror. And so on...
> >>>>
> >>>> I routinely go through 5 or 6 mirrors before I find one that's active.
> >>>>
> >>>> On Sat, Nov 12, 2016 at 1:55 PM, Al Varnell wrote:
> >>>>> You are asking in the wrong place. Try the Clamwin Forum <
> >>>>> http://forums.clamwin.com>
> >>>>> or their mailing list <http://lists.sourceforge.net/
> >>>>> mailman/listinfo/clamwin-users>.
> >>>>>
> >>>>> -Al-
> >>>>>
> >>>>> On Sat, Nov 12, 2016 at 12:59 PM, Lee Gold wrote:
> >>>>>> Using Clamwin.
> >>>>>>
> >>>>>> It just won't update the definitions. Slow updates have been a
> problem
> >>>>>> ever since I can remember.
> >>>>>>
> >>>>>> It's a major question that's been asked many times.
> >>>>>>
> >>>>>> Why are updates so slow? Why can't it be fixed?
> >> ___
> >> clamav-users mailing list
> >> clamav-users@lists.clamav.net
> >> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> >>
> >>
> >> Help us build a comprehensive ClamAV guide:
> >> https://github.com/vrtadmin/clamav-faq
> >>
> >> http://www.clamav.net/contact.html#ml
> >>
> > ___
> > clamav-users mailing list
> > clamav-users@lists.clamav.net
> > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> >
> >
> > Help us build a comprehensive ClamAV guide:
> > https://github.com/vrtadmin/clamav-faq
> >
> > http://www.clamav.net/contact.html#ml
>
> -Al-
> --
> Al Varnell
> Mountain View, CA
>
>
>
>
>
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Clamwin will not update or so Slow it's Impractical to try

2016-11-12 Thread Rudy Stebih
In the ClamAV-Mirrors mailing list it has been mentioned several times.

On Sat, Nov 12, 2016 at 6:16 PM, Al Varnell  wrote:

> On Sat, Nov 12, 2016 at 06:02 PM, Rudy Stebih wrote:
> >
> > Clamwin & ClamAV are exactly the same engine.  The ONLY difference is
> that
> > Clamwin has a pretty windows UI.
>
> Well, obviously the ClamAV engine is used with Clamwin, thought I don't
> know what configuration options it employs. I suspect it's not a trivial
> task for the average Windows user to upgrade the engine. As a ClamXav user
> I know it's not something I would expect even a seasoned user of macOS/OS X
> to do for themselves. I've been attempting to help a half dozen legacy OS X
> Server users with the provided 0.97.8 engine upgrade and it's been a real
> struggle for them. Neither Apple nor CLamAV are willing to assist.
>
> > First of all, I don't get paid to do QC for them.
> >
> > Second, it clearly states in the 'Mirror' documentation that 'Every
> mirror
> > is continuously monitored to ensure that every ClamAV user gets the
> latest
> > virus database.'
> >
> > They are not monitoring the mirrors anymore, and as such everyone is
> > getting crappy update speeds because half the mirrors are down and they
> are
> > not taking anymore mirrors to replace those down mirrors...
>
> I only brought that up to help you out, so if that's not something you
> need then feel free to ignore it. Hardly any of us here get paid for QC,
> but that hasn't stopped us in the past. I thought we were a community
> helping each other out here, but perhaps that is no longer true. Although
> I've certainly seen those same signs, it's been years since I've
> experienced anything close to what your are reporting. They keep promising
> to bring back the ClamAV Mirror Status page, but no sign of it nor evidence
> that even they have access to such a thing.
>
> Where did you hear they were not accepting any more mirrors?
>
> -Al-
>
> > On Sat, Nov 12, 2016 at 5:49 PM, Al Varnell wrote:
> >
> >> But again, that would appear to be a Clamwin problem as it doesn't
> appear
> >> they have updated the scan engine for some reason. The current version
> was
> >> released in January.
> >>
> >> But perhaps your issues can be addressed here, since you brought it up.
> I
> >> suspect the ClamAV network folks could look into that if you can post a
> >> summary of the mirror sites that aren't working for you along with your
> >> geographic location and the results of running these commands:
> >>
> >> freshclam --list-mirrors
> >> host database.clamav.net
> >>
> >> -Al-
> >> --
> >> ClamXav User
> >>
> >> On Sat, Nov 12, 2016 at 05:39 PM, Rudy Stebih wrote:
> >>>
> >>> First, it's obvious the guys ClamAV installation is outdated and needs
> to
> >>> be updated by the message 'Your ClamAV installation is OUTDATED!'
> >>>
> >>> Fix that first and I bet it will work fine after that!
> >>>
> >>> On Sat, Nov 12, 2016 at 5:27 PM, Al Varnell  wrote:
> >>>
> >>>> Looks like either there is a related discussion or the same one taking
> >>>> place at
> >>>> <http://forums.clamwin.com/viewtopic.php?t=4544>.
> >>>>
> >>>> Sent from Janet's iPad
> >>>>
> >>>> -Al-
> >>>>
> >>>> On Nov 12, 2016, at 5:19 PM, "Joel Esler (jesler)" wrote:
> >>>>> Who is “they”?  Us?  Or ClamWin?
> >>>>>
> >>>>> --
> >>>>> Joel Esler | Talos: Manager | jes...@cisco.com<mailto:jesler
> @cisco.com
> >>>
> >>>>>
> >>>>> On Nov 12, 2016, at 5:02 PM, Rudy Stebih wrote:
> >>>>>> It's because their mirrors are extremely slow and they won't add
> any new
> >>>>>> mirrors.  What you are waiting for is for a mirror to timeout
> (30sec)
> >>>>>> before it will move onto the next mirror. And so on...
> >>>>>>
> >>>>>> I routinely go through 5 or 6 mirrors before I find one that's
> active.
> >>>>>>
> >>>>>> On Sat, Nov 12, 2016 at 1:55 PM, Al Varnell wrote:
> >>>>>>> You are asking in the wrong place. Try the Clamwin Forum <
> >>>>>>> http://forums.clamwin.com>
>

[clamav-users] LibClamAV Warning

2017-05-02 Thread Rudy Stebih
Hi Folks,

I've been getting the following error for a week or so:

'LibClamAV Warning: Bytecode runtime error at line 1226, col 4'

I finally found the time to run ClamAV in verbose mode and believe this is
the culprit:

'Scanning C:\Program Files (x86)\Applian Director\ClearRegCode.exe'

At least that was the last file being scanned right before the error.

I can upload the file somewhere if you like...

Cheers,
Rudy
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] LibClamAV Warning

2017-05-06 Thread Rudy Stebih
I filed a bug report for this.  Bug #11837

Cheers,
Rudy


On Wed, May 3, 2017 at 1:25 PM, David Raynor  wrote:

> Bump for visibility. I figure someone from your team should get in touch
> with him, since it is not exactly an FP report. Maybe he can still submit
> it as FP. Don't know.
>
> Dave R.
>
> On Tue, May 2, 2017 at 10:05 PM, Rudy Stebih 
> wrote:
>
> > Hi Folks,
> >
> > I've been getting the following error for a week or so:
> >
> > 'LibClamAV Warning: Bytecode runtime error at line 1226, col 4'
> >
> > I finally found the time to run ClamAV in verbose mode and believe this
> is
> > the culprit:
> >
> > 'Scanning C:\Program Files (x86)\Applian Director\ClearRegCode.exe'
> >
> > At least that was the last file being scanned right before the error.
> >
> > I can upload the file somewhere if you like...
> >
> > Cheers,
> > Rudy
> > ___
> > clamav-users mailing list
> > clamav-users@lists.clamav.net
> > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> >
> >
> > Help us build a comprehensive ClamAV guide:
> > https://github.com/vrtadmin/clamav-faq
> >
> > http://www.clamav.net/contact.html#ml
> >
>
>
>
> --
> ---
> Dave Raynor
> Talos Security Intelligence and Research Group
> dray...@sourcefire.com
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] LibClamAV Warning

2017-05-06 Thread Rudy Stebih
As I didn't hear back from anyone, I placed an exclude statement for the
file just so that I could finish the scan. These warnings are halting the
scan!

Turns out I got a second LibClamAV warning after I excluded the first one:

Scanning C:\Program Files (x86)\InstallShield Installation
Information\{1FA41DBD-E8F8-46B1-A90C-1FA7E823DA58}\ISSetup.dll
LibClamAV Warning: Bytecode runtime error at line 968, col 5

Cheers,
Rudy




On Sat, May 6, 2017 at 11:07 AM, Joel Esler (jesler) 
wrote:

> I thought this was fixed.
>
> --
> Sent from my iPhone
>
> > On May 6, 2017, at 14:01, Rudy Stebih  wrote:
> >
> > I filed a bug report for this.  Bug #11837
> >
> > Cheers,
> > Rudy
> >
> >
> >> On Wed, May 3, 2017 at 1:25 PM, David Raynor 
> wrote:
> >>
> >> Bump for visibility. I figure someone from your team should get in touch
> >> with him, since it is not exactly an FP report. Maybe he can still
> submit
> >> it as FP. Don't know.
> >>
> >> Dave R.
> >>
> >> On Tue, May 2, 2017 at 10:05 PM, Rudy Stebih 
> >> wrote:
> >>
> >>> Hi Folks,
> >>>
> >>> I've been getting the following error for a week or so:
> >>>
> >>> 'LibClamAV Warning: Bytecode runtime error at line 1226, col 4'
> >>>
> >>> I finally found the time to run ClamAV in verbose mode and believe this
> >> is
> >>> the culprit:
> >>>
> >>> 'Scanning C:\Program Files (x86)\Applian Director\ClearRegCode.exe'
> >>>
> >>> At least that was the last file being scanned right before the error.
> >>>
> >>> I can upload the file somewhere if you like...
> >>>
> >>> Cheers,
> >>> Rudy
> >>> ___
> >>> clamav-users mailing list
> >>> clamav-users@lists.clamav.net
> >>> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> >>>
> >>>
> >>> Help us build a comprehensive ClamAV guide:
> >>> https://github.com/vrtadmin/clamav-faq
> >>>
> >>> http://www.clamav.net/contact.html#ml
> >>>
> >>
> >>
> >>
> >> --
> >> ---
> >> Dave Raynor
> >> Talos Security Intelligence and Research Group
> >> dray...@sourcefire.com
> >> ___
> >> clamav-users mailing list
> >> clamav-users@lists.clamav.net
> >> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> >>
> >>
> >> Help us build a comprehensive ClamAV guide:
> >> https://github.com/vrtadmin/clamav-faq
> >>
> >> http://www.clamav.net/contact.html#ml
> >>
> > ___
> > clamav-users mailing list
> > clamav-users@lists.clamav.net
> > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> >
> >
> > Help us build a comprehensive ClamAV guide:
> > https://github.com/vrtadmin/clamav-faq
> >
> > http://www.clamav.net/contact.html#ml
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml