Re: [clamav-users] [SPAM] Re: Time taken to complete scan recently doubled (Ausencia por vacaciones)

2025-08-04 Thread Rafael Martínez Guerrero via clamav-users
://diputacion.toledo.gob.es). ___ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/Cisco-Talos/clamav-documentation https

Re: [clamav-users] Time taken to complete scan recently doubled

2025-08-04 Thread Daniel Sotirhos via clamav-users
, Jul 29, 2025 at 8:12 PM Val Snyder (micasnyd) via clamav-users < clamav-users@lists.clamav.net> wrote: > Thanks all for reporting scan time issues with the recent update. We are > working to reduce the scan time caused by the recent signature update. > > Sorry for the delayed re

Re: [clamav-users] Help! - ClamAV database IP addresses (at Cloudflare) blocked by firewall

2025-07-31 Thread Joshua Grove via clamav-users
You can look at https://atomicorp.com.  They have clamav feeds. On Thursday, July 31, 2025 at 08:41:13 AM EDT, lists--- via clamav-users wrote: Grant suggested this, and the best option if dynamically adding to a firewall is to use ipset. You can write iptables rules, but the

Re: [clamav-users] Help! - ClamAV database IP addresses (at Cloudflare) blocked by firewall

2025-07-31 Thread lists--- via clamav-users
$blocktime Done. On Thu, 31 Jul 2025 01:16:36 -0400 Paul Kosinski via clamav-users wrote: > On Wed, 30 Jul 2025 12:38:29 -0500 > Nick Suan via clamav-users wrote: > > > On Wed, Jul 30, 2025, at 10:05 AM, Paul Kosinski via clamav-users > > wrote: > > > If I &#x

Re: [clamav-users] Help! - ClamAV database IP addresses (at Cloudflare) blocked by firewall

2025-07-30 Thread Paul Kosinski via clamav-users
On Wed, 30 Jul 2025 12:38:29 -0500 Nick Suan via clamav-users wrote: > On Wed, Jul 30, 2025, at 10:05 AM, Paul Kosinski via clamav-users wrote: > > > If I 'dig', I get: > > > > $ dig database.clamav.net > > ;database.clamav.net. IN

Re: [clamav-users] Help! - ClamAV database IP addresses (at Cloudflare) blocked by firewall

2025-07-30 Thread Grant Taylor via clamav-users
On 7/30/25 10:05 AM, Paul Kosinski via clamav-users wrote: This would seem to make it impractical to update my firewall rules often enough. What if you incorporate the firewall update into your ClamAV process? Is that possible? E.g. get a fresh (set of) IP(s), update your firewall, update

Re: [clamav-users] Help! - ClamAV database IP addresses (at Cloudflare) blocked by firewall

2025-07-30 Thread Nick Suan via clamav-users
On Wed, Jul 30, 2025, at 10:05 AM, Paul Kosinski via clamav-users wrote: > If I 'dig', I get: > > $ dig database.clamav.net > ;database.clamav.net. IN A > database.clamav.net.60 IN CNAME > database.c

Re: [clamav-users] Help! - ClamAV database IP addresses (at Cloudflare) blocked by firewall

2025-07-30 Thread Joel Esler via clamav-users
So, let me provide a bit of history since I’m the one who made the switch to Cloudflare. Long-time ClamAV users will recall that we had a series of donated mirrors. People would mirror our content and make it available in their respective countries. However, the issue with this setup was that

Re: [clamav-users] Help! - ClamAV database IP addresses (at Cloudflare) blocked by firewall

2025-07-30 Thread Paul Kosinski via clamav-users
On Wed, 30 Jul 2025 17:30:48 +0200 Benny Pedersen via clamav-users wrote: > Paul Kosinski via clamav-users skrev den 2025-07-30 17:05: > > How might I keep up to date on the *specific* IP addresses at > > Cloudflare for ClamAV database updates? They seem to change no

Re: [clamav-users] Help! - ClamAV database IP addresses (at Cloudflare) blocked by firewall

2025-07-30 Thread Benny Pedersen via clamav-users
Paul Kosinski via clamav-users skrev den 2025-07-30 17:05: How might I keep up to date on the *specific* IP addresses at Cloudflare for ClamAV database updates? They seem to change now and then. point is to have diffrent ips, so load is spread as much as possible, other reasons might be that

[clamav-users] Help! - ClamAV database IP addresses (at Cloudflare) blocked by firewall

2025-07-30 Thread Paul Kosinski via clamav-users
two current IPs and monitor the log files more carefully. After all, the previous two IPs (104.16.218.84 and 104.16.219.84) worked for quite a long time. Any thoughts? Thanks Paul Kosinski ___ Manage your clamav-users mailing list subscription

Re: [clamav-users] Time taken to complete scan recently doubled

2025-07-30 Thread Karl Pielorz via clamav-users
--On 30 July 2025 12:32 +0100 Steve Basford via clamav-users wrote: 4,539 signatures were dropped yesterday (daily: 27715) https://lists.clamav.net/pipermail/clamav-virusdb/2025-July/009100.html Looking in the discord channel, The ClamAV team are working on optimisation of the remaining

Re: [clamav-users] Time taken to complete scan recently doubled

2025-07-30 Thread Steve Basford via clamav-users
On 30 July 2025 10:42:58 lists--- via clamav-users wrote: Hi, Speaking to the recent new signatures, some of them are incredibly open ended, and don't seem quite viable. Hi, 4,539 signatures were dropped yesterday (daily: 27715) https://lists.clamav.net/pipermail/clamav-virusdb/2025

[clamav-users] Time taken to complete scan recently doubled

2025-07-30 Thread lists--- via clamav-users
le submitting signatures now, without human review? Regardless, if there's a binary blob that's troublesome, Vpty (as an example) isn't enough to prevent false positives. It needs to be a much larger string. ___ Manage your clamav-users

Re: [clamav-users] Time taken to complete scan recently doubled

2025-07-29 Thread Val Snyder (micasnyd) via clamav-users
stems, Inc. From: clamav-users on behalf of Steve Basford via clamav-users Sent: Tuesday, July 29, 2025 10:24 AM To: ClamAV users ML Cc: Steve Basford Subject: Re: [clamav-users] Time taken to complete scan recently doubled On 29 July 2025 10:58:51 Mark Alla

Re: [clamav-users] Time taken to complete scan recently doubled

2025-07-29 Thread Steve Basford via clamav-users
On 29 July 2025 10:58:51 Mark Allan via clamav-users wrote: We're seeing the same thing here. We mirror the DB for ClamXAV users but we do a Mac-specific FP test first which usually takes around 3.5 hours on a fast Mac. Daily DB version 27709 took 3 hours 20 minutes whereas version

Re: [clamav-users] Time taken to complete scan recently doubled

2025-07-29 Thread Mark Allan via clamav-users
9:22 am, Karl Pielorz via clamav-users > wrote: > > > --On 28 July 2025 16:33 -0700 Daniel Sotirhos via clamav-users > wrote: > >> Hi >> >> Starting July 25th we've seen the time taken to complete a scan of our >> system double, jumping fro

Re: [clamav-users] Time taken to complete scan recently doubled

2025-07-29 Thread Karl Pielorz via clamav-users
--On 28 July 2025 16:33 -0700 Daniel Sotirhos via clamav-users wrote: Hi Starting July 25th we've seen the time taken to complete a scan of our system double, jumping from 15 hours up to 34. We haven't changed the system's configuration, and the number of files scanned and

[clamav-users] Time taken to complete scan recently doubled

2025-07-28 Thread Daniel Sotirhos via clamav-users
one else seen a similar increase to their scan duration recently? Thanks! -daniel ___ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: htt

Re: [clamav-users] [EXTERNAL] Re: Need help on clamav database mirroring.

2025-07-25 Thread Kris Deugau via clamav-users
ing the database version using an HTTP Range-request to your server. -kgd Khedkar, Atish via clamav-users wrote: Hello @Joel Esler <mailto:joel.es...@me.com>, I have gone through the shared link before asking the question. I understood we can create mirror repo using freshclam or cvd

Re: [clamav-users] Need help on clamav database mirroring.

2025-07-25 Thread Benny Pedersen via clamav-users
Kris Deugau via clamav-users skrev den 2025-07-25 17:02: Not having needed this tool (yet) I haven't looked closely before this, but that link reports that cvdupdate grabs the *entire* CVD file every time (or at least daily). I thought one of the key reasons to introduce this tool w

Re: [clamav-users] [EXTERNAL] Re: Need help on clamav database mirroring.

2025-07-25 Thread Benny Pedersen via clamav-users
Khedkar, Atish via clamav-users skrev den 2025-07-25 16:20: Hello @Joel Esler, I have gone through the shared link before asking the question. I understood we can create mirror repo using freshclam or cvdupdate. The freshclam sync only cvd and cld files. However, I want use cvdupdate to sync cvd

Re: [clamav-users] Need help on clamav database mirroring.

2025-07-25 Thread Kris Deugau via clamav-users
g the entire signature definition file all the time... -kgd Joel Esler via clamav-users wrote: Atish — Have you read Brendan’s link? Hosting a Private Database Mirror - ClamAV Documentation <https://docs.clamav.net/appendix/CvdPrivateMirror.html?highlight=setting%20DatabaseMirror#use-cvdu

Re: [clamav-users] [EXTERNAL] Re: Need help on clamav database mirroring.

2025-07-25 Thread Khedkar, Atish via clamav-users
That’s why questions was around cvdupdate. As per the documentation, I believe that cvdupdate does not allow to customize the database URL and skip dns.txt file. Please let me know I had missed anything. Thanks, Atish Khedkar From: Joel Esler Sent: Thursday, July 24, 2025 9:59 PM To: ClamAV us

Re: [clamav-users] Need help on clamav database mirroring.

2025-07-24 Thread Joel Esler via clamav-users
025, at 01:45, Khedkar, Atish via clamav-users > wrote: > > Thanks @Brendan Bell (brebell) <mailto:breb...@cisco.com> for your help. > > I have understood the client side freshclam configuration. I had questions > regarding cvdupdate application. > How to set custom

Re: [clamav-users] Need help on clamav database mirroring.

2025-07-23 Thread Khedkar, Atish via clamav-users
rom: Brendan Bell (brebell) Sent: Tuesday, July 22, 2025 10:37 PM To: clamav-users@lists.clamav.net Cc: Khedkar, Atish Subject: [EXTERNAL] Re: Need help on clamav database mirroring. Hello Atish, Apologies for the delay. If I have correctly understood you question I believe you may want to look in

Re: [clamav-users] Need help on clamav database mirroring.

2025-07-22 Thread Brendan Bell (brebell) via clamav-users
te mirror relatively up to date (updating at least every 24 hours). ____ From: clamav-users on behalf of Khedkar, Atish via clamav-users Sent: Wednesday, July 16, 2025 11:48 AM To: clamav-users@lists.clamav.net Cc: Khedkar, Atish Subject: [clamav-users] Need help

Re: [clamav-users] Problem with "clamscan" and "ExcludePath"

2025-07-22 Thread Dr Rainer Woitok via clamav-users
ely, Rainer ___ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/Cisco-Talos/clamav-documentation https://docs.clamav.net/#mailing-lists-and-chat

[clamav-users] Problem with "clamscan" and "ExcludePath"

2025-07-20 Thread Dr Rainer Woitok via clamav-users
uot; doesn't and rather reports "EicarSigna- ture FOUND". Is this a known problem with version 1.4.3? Sincerely, Rainer ___ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/lis

Re: [clamav-users] ClamAV installation required?

2025-07-17 Thread Matus UHLAR - fantomas via clamav-users
On Wed, 16 Jul 2025, Newcomer01 via clamav-users wrote: inner my cronjob with 'freshclam start' on end 'freshclam stop' - not as daemon On 16.07.25 21:57, Andrew C Aitchison via clamav-users wrote: Do you have a good reason *not* to use the daemon ? This might be your p

Re: [clamav-users] ClamAV installation required?

2025-07-16 Thread Andrew C Aitchison via clamav-users
On Wed, 16 Jul 2025, Newcomer01 via clamav-users wrote: inner my cronjob with 'freshclam start' on end 'freshclam stop' - not as daemon Do you have a good reason *not* to use the daemon ? --- On Wed, 16 Jul 2025, Newcomer01 via clamav-users wrote: Then on each Upgrad

Re: [clamav-users] ClamAV installation required?

2025-07-16 Thread Newcomer01 via clamav-users
inner my cronjob with 'freshclam start' on end 'freshclam stop' - not as daemon Von / From: Callum.dommett100--- Via Clamav-Users <mailto:clamav-users@lists.clamav.net> An / To:Newcomer01 <mailto:newcome...@posteo.de> CC / CC:Matus Uhlar - Fa

Re: [clamav-users] ClamAV installation required?

2025-07-16 Thread Matus UHLAR - fantomas via clamav-users
On 16.07.25 16:59, Newcomer01 via clamav-users wrote: NO! I download the files only via freshclam and not manually and sure i give signal to clamd for sucessfull update How did you start freshclam? Von / From: Callum.dommett100--- Via Clamav-Users <mailto:clamav-us

Re: [clamav-users] ClamAV installation required?

2025-07-16 Thread Newcomer01 via clamav-users
NO! I download the files only via freshclam and not manually and sure i give signal to clamd for sucessfull update Von / From: Callum.dommett100--- Via Clamav-Users <mailto:clamav-users@lists.clamav.net> An / To:Newcomer01 <mailto:newcome...@posteo.de> CC / CC:

Re: [clamav-users] ClamAV installation required?

2025-07-16 Thread Matus UHLAR - fantomas via clamav-users
On 16.07.25 12:40, Newcomer01 via clamav-users wrote: yes Matus, you are absolutely right. I have paid for my stupidness and was needed to reinstall my Computer because of the "white screen of death". See the embedded Image what i mean: WSOD It seems the "Ubunturized"

[clamav-users] Need help on clamav database mirroring.

2025-07-16 Thread Khedkar, Atish via clamav-users
___ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/Cisco-Talos/clamav-documentation https://docs.clamav.net/#mailing-lists-and

Re: [clamav-users] ClamAV installation required?

2025-07-16 Thread Newcomer01 via clamav-users
ed for Ubuntu to change all and delete stuff. Marc Von / From: Clamav-Users <mailto:clamav-users@lists.clamav.net> An / To:Newcomer01 <mailto:newcome...@posteo.de> CC / CC:Tim Mcconnell <mailto:tmcconnell...@gmail.com> Gesendet / Sent:Mittwoch, Juli 1

Re: [clamav-users] ClamAV installation required?

2025-07-16 Thread Tim McConnell via clamav-users
Hi Newcomer,  Why not try what Unbuntu is based on? Debian testing is going to be the next stable release soon, I run it and never had any issues with ClamAV. Especially what you describe.   -- Tim On Wed, 2025-07-16 at 12:40 +, Newcomer01 via clamav-users wrote: > > yes Matus, y

Re: [clamav-users] ClamAV installation required?

2025-07-16 Thread Newcomer01 via clamav-users
my whole permissions for ClamAV and with this, ClamAV didn't work anymore, so I always need to restore my own Permissions to get ClamAV working again. Von / From: Clamav-Users <mailto:clamav-users@lists.clamav.net> An / To:Newcomer01 <mailto:newcome...@posteo

Re: [clamav-users] ClamAV installation required?

2025-07-16 Thread Matus UHLAR - fantomas via clamav-users
On 15.07.25 18:27, Newcomer01 via clamav-users wrote: I have now reinstalled my computer because white screen of death and am using the "Ubunturized" ClamAV version again. I seem to have no way to escape Ubuntu. Then I just have to live with restrictions, it doesn't seem to be

Re: [clamav-users] ClamAV installation required?

2025-07-15 Thread Newcomer01 via clamav-users
Hi, I have now reinstalled my computer because white screen of death and am using the "Ubunturized" ClamAV version again. I seem to have no way to escape Ubuntu. Then I just have to live with restrictions, it doesn't seem to be changeable on easy way. Marc Von / From: V

Re: [clamav-users] ClamAV installation required?

2025-07-15 Thread Matus UHLAR - fantomas via clamav-users
On 13.07.25 01:18, Newcomer01 via clamav-users wrote: What should I show? Have written a small shell script, which copies all folders an files from the extracted clamav-linux deb to /usr/local It's a simple for loop... So, instead of using ClamAV packaged by Ubuntu, supported by U

Re: [clamav-users] ClamAV installation required?

2025-07-12 Thread Masaru Nomiya via clamav-users
Hello, In the Message; Subject: Re: [clamav-users] ClamAV installation required? Message-ID : <198015cb670.2808.7d5f18f5145463d2dbf12ddb15651...@posteo.de> Date & Time: Sun, 13 Jul 2025 01:18:29 + [Marc] == Newcomer01 via clamav-users has written: Marc> What

Re: [clamav-users] ClamAV installation required?

2025-07-12 Thread Newcomer01 via clamav-users
What should I show? Have written a small shell script, which copies all folders an files from the extracted clamav-linux deb to /usr/local It's a simple for loop... Am 13. Juli 2025 02:30:34 schrieb Masaru Nomiya via clamav-users : Hello, In the Message; Subject : [clamav-

Re: [clamav-users] ClamAV installation required?

2025-07-12 Thread Masaru Nomiya via clamav-users
Hello, In the Message; Subject: [clamav-users] ClamAV installation required? Message-ID : Date & Time: Sat, 12 Jul 2025 21:47:02 + [Marc] == Newcomer01 via clamav-users has written: Marc> Hi @all, Marc> I’ve now decided to stop using (and uninstall) the he

[clamav-users] ClamAV installation required?

2025-07-12 Thread Newcomer01 via clamav-users
___ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/Cisco-Talos/clamav-documentation https://docs.clamav.net/#mailing-lists-and-chat

Re: [clamav-users] EXTERNAL: Re: EXTERNAL: Re: ** Offline database update. What is the proper approach?

2025-07-02 Thread Hayes, R. Scott via clamav-users
From: clamav-users on behalf of David Precious via clamav-users Sent: Wednesday, July 2, 2025 9:49 AM To: clamav-users@lists.clamav.net Cc: David Precious Subject: EXTERNAL: Re: [clamav-users] EXTERNAL: Re: ** Offline database update. What is the proper approach? It'

Re: [clamav-users] EXTERNAL: Re: ** Offline database update. What is the proper approach?

2025-07-02 Thread David Precious via clamav-users
cks)? On Wed, 2 Jul 2025 12:28:53 + "Hayes, R. Scott via clamav-users" wrote: > Thank you, > > > That solution may work for a machine that we local access to another > machine on same network. But, We may have isolated machines with > only physical ac

Re: [clamav-users] EXTERNAL: Re: ** Offline database update. What is the proper approach?

2025-07-02 Thread Hayes, R. Scott via clamav-users
Sent: Tuesday, July 1, 2025 4:31 PM To: ClamAV users ML Cc: Hayes, R. Scott Subject: EXTERNAL: Re: ** Offline database update. What is the proper approach? Hi Scott, Please take a look: https://docs.clamav.net/appendix/CvdPrivateMirror.html . From: clamav-users on behalf of Hayes, R. Scott

Re: [clamav-users] ** Offline database update. What is the proper approach?

2025-07-01 Thread Michael Orlitzky via clamav-users
On 2025-07-01 19:17:09, Hayes, R. Scott via clamav-users wrote: > > Approach 2: > > 1) Setup a like box with internet access install clamav startup the > clamav-refresh cron. > > 2) After cron runs.. copy all 4 files from /var/lib/clamav to the offline box > /var/lib/c

Re: [clamav-users] ** Offline database update. What is the proper approach?

2025-07-01 Thread Nikolay Belaevski via clamav-users
Hi Scott, Please take a look: https://docs.clamav.net/appendix/CvdPrivateMirror.html . From: clamav-users on behalf of Hayes, R. Scott via clamav-users Date: Tuesday, July 1, 2025 at 12:18 PM To: clamav-users@lists.clamav.net Cc: Hayes, R. Scott Subject: [clamav-users] ** Offline database

[clamav-users] ** Offline database update. What is the proper approach?

2025-07-01 Thread Hayes, R. Scott via clamav-users
unication in error please destroy all copies of this message and its attachments and notify the sender immediately. ___ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us bui

Re: [clamav-users] AIX and Clamd scan error, "Can't allocate memory ERROR"

2025-07-01 Thread Vu, Hong-Duc V. via clamav-users
FIPS enabled, I get "can't allocate memory" errors in the log file for the clamd@scan service. Hong-Duc Vu -Original Message- From: N.Sakai Sent: Monday, June 30, 2025 1:56 AM To: ClamAV users ML Subject: [clamav-users] AIX and Clamd scan error, "Can't allocate me

[clamav-users] AIX and Clamd scan error, "Can't allocate memory ERROR"

2025-06-29 Thread N.Sakai via clamav-users
asons for clamd returning this kind of error for all scan requests? Thank you in advance. ___ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV g

Re: [clamav-users] survey: is clamav-1.4.3 stable? (YES, SOLVED)

2025-06-25 Thread A. Schulze via clamav-users
A. Schulze via clamav-users: today I updated my clamav instances from 1.4.2 to 1.4.3 In the last hours 4 machines died unecpetedly and required a reboot. turns out, an other software started to go crazy and randomly crashed my machines. clamav-1.4.3 runs fine, STABLE as usual and

Re: [clamav-users] [ext] survey: is clamav-1.4.3 stable?

2025-06-25 Thread Ralf Hildebrandt via clamav-users
* A. Schulze via clamav-users : > today I updated my clamav instances from 1.4.2 to 1.4.3 > In the last hours 4 machines died unecpetedly and required a reboot. > > I can't say for sure that clamav was the reason and would like to ask others > about operational expierienc

Re: [clamav-users] survey: is clamav-1.4.3 stable?

2025-06-23 Thread A. Schulze via clamav-users
Jonathan, I just checked the machines that (not yet?) failed as well as the failing systems do /not/ show any unusual swap usage. Thanks for that hint! Andreas ___ Manage your clamav-users mailing list subscription / unsubscribe: https

Re: [clamav-users] survey: is clamav-1.4.3 stable?

2025-06-23 Thread Jonathan Lee via clamav-users
Jun 23, 2025, at 08:12, A. Schulze via clamav-users > wrote: > >  > Hello, > > today I updated my clamav instances from 1.4.2 to 1.4.3 > In the last hours 4 machines died unecpetedly and required a reboot. > > I can't say for sure that clamav was the reason a

[clamav-users] survey: is clamav-1.4.3 stable?

2025-06-23 Thread A. Schulze via clamav-users
dreas ___ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/Cisco-Talos/clamav-documentation https://docs.clamav.net/#mailing-list

Re: [clamav-users] Recent patch release questions

2025-06-22 Thread Zakaria via clamav-users
Val Snyder (she/they) ClamAV Development Talos Cisco Systems, Inc. ----- From: clamav-users on behalf of Zakaria via clamav-users Sent: Friday, June 20, 2025 5:51 PM To: clamav-users@lists.clamav.net Cc: Zakaria Subject: [clamav-users] Recent patch release questions Hi All,

Re: [clamav-users] Recent patch release questions

2025-06-21 Thread Val Snyder (micasnyd) via clamav-users
hose bug fixes. Best, Val Val Snyder (she/they) ClamAV Development Talos Cisco Systems, Inc. ____ From: clamav-users on behalf of Zakaria via clamav-users Sent: Friday, June 20, 2025 5:51 PM To: clamav-users@lists.clamav.net Cc: Zakaria Subject: [clamav-users] Recen

[clamav-users] Recent patch release questions

2025-06-20 Thread Zakaria via clamav-users
seems like its affected and if this conclusion is true, does anyone have any idea when 1.5 Beta will be patched? Looking forward for any answers, with thanks. Zak.___ Manage your clamav-users mailing list subscription / unsubscribe:

Re: [clamav-users] General usage question about warnings and errors

2025-06-20 Thread Abraham Chavez via clamav-users
than requiring log correlation. The SWF-related warnings we're seeing are caused by link files containing short random character sequences that trigger clamscan's SWF detection (possibly due to magic cookies like "ZWS"). On Mon, Jun 16, 2025 at 1:08 PM Newcomer01 via clamav-

[clamav-users] ClamAV 1.4.3 and 1.0.9 security patch versions published

2025-06-18 Thread Val Snyder (micasnyd) via clamav-users
ided by the Windows operating system. Val Snyder (she/they) ClamAV Development Talos Cisco Systems, Inc. _______ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehens

Re: [clamav-users] General usage question about warnings and errors

2025-06-16 Thread Newcomer01 via clamav-users
run clamscan with params |--verbose --debug| and check the log whats going on Von / From: Callum.dommett100--- Via Clamav-Users <mailto:clamav-users@lists.clamav.net> An / To:Newcomer01 <mailto:newcome...@posteo.de> CC / CC:Abraham Chavez <mailto:achav...@ucs

[clamav-users] General usage question about warnings and errors

2025-06-16 Thread Abraham Chavez via clamav-users
s code. ___ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/Cisco-Talos/clamav-documentation https://docs.clamav.net/#mailing-lists-and-chat

Re: [clamav-users] ClamAV 1.4 compatibilty with Azure Monitoring Agent

2025-06-13 Thread Brendan Bell (brebell) via clamav-users
Yes, ClamAV is compatible with Microsoft Azure Monitoring Agent. Brendan From: clamav-users on behalf of Andrea Nicole Mendoza via clamav-users Sent: Friday, June 13, 2025 5:44 AM To: clamav-users@lists.clamav.net Cc: Andrea Nicole Mendoza Subject: [clamav

[clamav-users] ClamAV 1.4 compatibilty with Azure Monitoring Agent

2025-06-13 Thread Andrea Nicole Mendoza via clamav-users
deprecated since August 2024. Thank you! Regards, *Andrea Nicole Mendoza* ___ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https

Re: [clamav-users] Invoke-Webrequest caused security alert (and blocking!)

2025-06-11 Thread Shulist, Victor (SSC/SPC) via clamav-users
network. Ok, so yes, will try that from my internet-connected home lab later today or tomorrow Thanks again for the quick response ! From: Brendan Bell (brebell) Sent: June 11, 2025 12:59 PM To: clamav-users@lists.clamav.net Cc: Shulist, Victor (SSC/SPC) Subject: Re: Invoke-Webrequest caused

Re: [clamav-users] Invoke-Webrequest caused security alert (and blocking!)

2025-06-11 Thread Lyle Giese via clamav-users
Look up how to set up a local mirror. Lyle Giese On 6/11/25 10:58, Shulist, Victor (SSC/SPC) via clamav-users wrote: Unclassified | Non classifié Unclassified | Non classifié Hello ClamAV support ! I was trying to download (using Edge browser) the *.cvd files from your site.  That failed

Re: [clamav-users] Invoke-Webrequest caused security alert (and blocking!)

2025-06-11 Thread Brendan Bell (brebell) via clamav-users
Hello, For this issue have you tried using CVDUpdate on the system you use to download files and then transfer to the air gapped network? Brendan ___ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman

[clamav-users] Invoke-Webrequest caused security alert (and blocking!)

2025-06-11 Thread Shulist, Victor (SSC/SPC) via clamav-users
e sécurité spécialisés Direction générale des services de connectivité et de sécurité (DGSCS) Services partagés Canada | Gouvernement du Canada victor.shul...@ssc-spc.gc.ca<mailto:victor.shul...@ssc-spc.gc.ca> | Tél: 613-227-1600 ___ Manage your c

Re: [clamav-users] manual download av definitions updates how long ?

2025-06-11 Thread Joel Esler via clamav-users
Well, it looks like the blocks I put in place have been altered then.  — Sent from my 📱iPhoneOn Jun 11, 2025, at 02:01, Dirk Nichterwitz via clamav-users wrote: Hello, Am 10.06.25 um 22:25 schrieb Joel Esler: Manual downloads of the definitions

Re: [clamav-users] manual download av definitions updates how long ?

2025-06-11 Thread Andrew C Aitchison via clamav-users
On Wed, 11 Jun 2025, Dirk Nichterwitz via clamav-users wrote: Am 10.06.25 um 22:25 schrieb Joel Esler: Manual downloads of the definitions were blocked about 5 years ago. That's not really true. You can already download it from here * |https://database.clamav.net/main.cvd| * |

Re: [clamav-users] manual download av definitions updates how long ?

2025-06-10 Thread Dirk Nichterwitz via clamav-users
https://database.clamav.net/bytecode.cvd| But the question is how long will that be possible — Sent from my 📱iPhone On Jun 10, 2025, at 04:39, Dirk Nichterwitz via clamav-users wrote: Hello, can someone tell how long the official manual download of AV definition files will be possible ? Is there a off

Re: [clamav-users] manual download av definitions updates how long ?

2025-06-10 Thread Joel Esler via clamav-users
Manual downloads of the definitions were blocked about 5 years ago. — Sent from my 📱iPhone > On Jun 10, 2025, at 04:39, Dirk Nichterwitz via clamav-users > wrote: > > Hello, > > can someone tell how long the official manual download of AV definition files > will

Re: [clamav-users] manual download av definitions updates how long ?

2025-06-10 Thread Brendan Bell (brebell) via clamav-users
Hello, We only offer the AV definition Files to be downloaded using Freshclam or CVDUpdate. These programs both include a check in them to ensure users are not downloading the same database over and over again. Thanks, Brendan From: clamav-users on behalf of

[clamav-users] manual download av definitions updates how long ?

2025-06-10 Thread Dirk Nichterwitz via clamav-users
Hello, can someone tell how long the official manual download of AV definition files will be possible ? Is there a official statement ? thank you ___ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net

Re: [clamav-users] Request for Extension of Virus Definition Updates for ClamAV Version 0.103

2025-06-06 Thread Brendan Bell (brebell) via clamav-users
eventually block 0.103, 0.104 and 0.105 versions from downloading updates in the same way that 0.102 is currently blocked. We recommend updating to the most current version to continue to have the best results. Brendan From: clamav-users on behalf of Michael Orlitzky

Re: [clamav-users] Request for Extension of Virus Definition Updates for ClamAV Version 0.103

2025-06-06 Thread Michael Orlitzky via clamav-users
On 2025-06-06 19:47:16, Val Snyder (micasnyd) via clamav-users wrote: > > By community request, we already extended the 0.103 LTS end-of-life (EOL) by > one year longer than originally planned > (https://blog.clamav.net/2023/05/end-of-life-eol-policy-change-0103-one.html). >

Re: [clamav-users] Request for Extension of Virus Definition Updates for ClamAV Version 0.103

2025-06-06 Thread Val Snyder (micasnyd) via clamav-users
-eol-policy-change-0103-one.html). Regrettably, we cannot extend the EOL further, not even just for database testing and download support alone. Respectfully, Val Val Snyder (she/they) ClamAV Development Talos Cisco Systems, Inc. From: clamav-users on behalf

Re: [clamav-users] Daily ClamAV cld files

2025-06-05 Thread Paul Kosinski via clamav-users
On Thu, 5 Jun 2025 16:29:32 + "Val Snyder \(micasnyd\) via clamav-users" wrote: > Due to caching weirdness, which we've been unable to resolve, it is possible > that the ".cvd" file you receive is not the latest version. I wonder if this is related to the

Re: [clamav-users] ClamAV 1.5 beta release

2025-06-05 Thread Val Snyder (micasnyd) via clamav-users
e interested, I left some additional details on release blockers/activities here https://github.com/Cisco-Talos/clamav/issues/564#issuecomment-2940397022 Respectfully, Val Val Snyder (she/they) ClamAV Development Talos Cisco Systems, Inc. ____ From: clamav-users on b

Re: [clamav-users] Daily ClamAV cld files

2025-06-05 Thread Val Snyder (micasnyd) via clamav-users
t ".cdiff" files to do the patch-based updated and so downloaded the entire ".cvd" file instead. In summary, ".cvd" and ".cld" are functionally equivalent. So long as you are able to receive the latest version of the daily, bytecode, and main databases

Re: [clamav-users] Daily ClamAV cld files

2025-06-05 Thread Newcomer01 via clamav-users
please have a try: https://database.clamav.net/daily.cvd https://database.clamav.net/bytecode.cvd https://database.clamav.net/main.cvd or https://packages.microsoft.com/clamav/ Von / From: Callum.dommett100--- Via Clamav-Users <mailto:clamav-users@lists.clamav.net> A

Re: [clamav-users] Daily ClamAV cld files

2025-06-05 Thread Steve Basford via clamav-users
On 5 June 2025 13:06:59 "Callum.Dommett100--- via clamav-users" wrote: To whom it may concern, Within our environment we update the antivirus using ClamAV. We are used to receiving 6 files from the freshclam.exe (bytecode.cdl, bytecode.cvd, daily.cld, daily.cvd, freshclam.dat, an

[clamav-users] Daily ClamAV cld files

2025-06-05 Thread Callum.Dommett100--- via clamav-users
. We've attempted to download manually but the site returns with a 404 error. I'm just wondering if this is a known issue or if there is a workaround to receive these files? Many thanks, Callum ___ Manage your clamav-users mailing list su

[clamav-users] Reminder: Sanesecurity mirror host change

2025-06-04 Thread Ralph Seichter via clamav-users
: The continued use of HTTP rather than HTTPS is deliberate. -Ralph ___ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/

Re: [clamav-users] ClamAV daemon restarts via/through systemd

2025-06-04 Thread Ben Argyle via clamav-users
t clear on the mechanism that this employs to do the chowning). Sorry for the noise in what is usually a pretty signal-ly list. Ben -- Servers and Storage Team, UIS, University of Cambridge -Original Message- From: Andrew C Aitchison Sent: 04 June 2025 11:39 To: Ben Argyle via clamav

Re: [clamav-users] Help with ClamAV 1.0.7 on Ubuntu

2025-06-04 Thread Andrew C Aitchison via clamav-users
On Wed, 4 Jun 2025, Perez Dominguez, Andres via clamav-users wrote: Hello, I wanted to know if there is a way to upgrade max file size scanning for ClamAV 1.0.7, I have seen that there is a limit at 4GB using clamdscan and that when I changed the value of max file size inside /etc/clamav

Re: [clamav-users] ClamAV daemon restarts via/through systemd

2025-06-04 Thread Andrew C Aitchison via clamav-users
On Mon, 2 Jun 2025, Ben Argyle via clamav-users wrote: We're running ClamAV on RHEL 8 from EPEL 8: clamd-1.0.8-1.el8.x86_64 clamav-freshclam-1.0.8-1.el8.x86_64 clamav-1.0.8-1.el8.x86_64 I know it's old, but that's what we've got to work with. Anyway, we're seeing

[clamav-users] Help with ClamAV 1.0.7 on Ubuntu

2025-06-04 Thread Perez Dominguez, Andres via clamav-users
if this is the full limit of ClamAV or of there is a way to avoid this resetting. Thanks in advance. ___ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a

Re: [clamav-users] ClamAV daemon restarts via/through systemd

2025-06-04 Thread Ben Argyle via clamav-users
ow that's happening. So now I have two problems (-: Ben -- Servers and Storage Team, UIS, University of Cambridge -Original Message- From: Kris Deugau Sent: 02 June 2025 22:01 To: ClamAV users ML Cc: Ben Argyle Subject: Re: [clamav-users] ClamAV daemon restarts via/through sy

Re: [clamav-users] ClamAV daemon restarts via/through systemd

2025-06-02 Thread Kris Deugau via clamav-users
Ben Argyle via clamav-users wrote: We're running ClamAV on RHEL 8 from EPEL 8: clamd-1.0.8-1.el8.x86_64 clamav-freshclam-1.0.8-1.el8.x86_64 clamav-1.0.8-1.el8.x86_64 I know it's old, but that's what we've got to work with. Anyway, we're seeing an issue where all of o

[clamav-users] ClamAV daemon restarts via/through systemd

2025-06-02 Thread Ben Argyle via clamav-users
ching restart in journalctl. So we don't think it's Freshclam. Thoughts? Ben -- Servers and Storage Team, UIS, University of Cambridge ___ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/li

[clamav-users] Request for Extension of Virus Definition Updates for ClamAV Version 0.103

2025-05-27 Thread ANDREJAK Thomas via clamav-users
k you very much for your time and consideration. Warm regards, Thomas ANDREJAK Defense & Security Chief Technology Officer (CTO) C2 - Usage restreint ___ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.ne

Re: [clamav-users] ClamAV 1.5.0 beta now available!

2025-05-03 Thread A. Schulze via clamav-users
Am 31.03.25 um 20:23 schrieb Val Snyder (micasnyd) via clamav-users: The ClamAV 1.5.0 beta is now available. Hello Val, today, I tried to build 1.5.0-beta on a Debian/Bookworm system with a downloaded rust-1.86.0-x86_64-unknown-linux-gnu and distribution's openssl-3.0.15. 1. ther

[clamav-users] ClamAV - Azure Monitoring Agent

2025-04-29 Thread Andrea Nicole Mendoza via clamav-users
* ___ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/Cisco-Talos/clamav-documentation https://docs.clamav.net/#mailing-lists-and-chat

[clamav-users] ClamAV 1.5 beta release

2025-04-28 Thread Javier Olayon via clamav-users
it. If you have received this message in error, please notify the sender immediately by e-mail and delete all copies of the message. ___ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-us

Re: [clamav-users] Local ClamAV cannot detect infected file, while VirusTotal ClamAV can

2025-04-25 Thread Gilles Van Vlasselaer via clamav-users
up-to-date (version: 336, sigs: 83, f-level: 90, builder: nrandolp) Greetings, - Gilles On 4/15/25 09:23, Tai Chan Dang via clamav-users wrote: I have a sample virus file that can be detected by ClamAV on VirusTotal: _https://www.virustotal.com/gui

  1   2   3   4   5   6   7   8   9   10   >