Re: [clamav-users] reported before, makes no sense

2014-05-16 Thread Benny Pedersen
Gene Heskett skrev den 2014-05-16 08:03: On Friday 16 May 2014 00:59:44 Al Varnell did opine And Gene did reply: UNOFFICIAL means it did not come from ClamAV® Now what? Shut down my daily scan? clamconf | grep -i database make sure this dir does not contain unofficial sigs not possible t

Re: [clamav-users] reported before, makes no sense

2014-05-16 Thread Benny Pedersen
Gene Heskett skrev den 2014-05-16 06:38: Can we please get this FP removed? 3dr party sigs does not make sense to blame on clamav maillist ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/su

Re: [clamav-users] reported before, makes no sense

2014-05-16 Thread Bowie Bailey
On 5/16/2014 9:52 AM, Kris Deugau wrote: Bowie Bailey wrote: I highly recommend the Sanesecurity signatures. They catch much more than the stock signatures. They also catch spam, scam, phishing, and other misc junk emails. I haven't had any problems with false positives. Here's the breakdown

Re: [clamav-users] reported before, makes no sense

2014-05-16 Thread Kris Deugau
Bowie Bailey wrote: > I highly recommend the Sanesecurity signatures. They catch much more > than the stock signatures. They also catch spam, scam, phishing, and > other misc junk emails. I haven't had any problems with false positives. > > Here's the breakdown from my recent logs: > > 818 Tot

Re: [clamav-users] reported before, makes no sense

2014-05-16 Thread Bowie Bailey
On 5/16/2014 6:39 AM, Steve Basford wrote: -rw-r--r-- 1 clamav adm 5958972 2013-05-03 07:51 junk.ndb That's a bit out of date ;) -rw-r--r-- 1 clamav adm 567741 2013-05-04 01:48 mbl.ndb JUST NUKED I'll see if the one I just nuked comes back. Yep, that'll be the one to watch out for.

Re: [clamav-users] reported before, makes no sense

2014-05-16 Thread Steve Basford
>-rw-r--r-- 1 clamav adm 5958972 2013-05-03 07:51 junk.ndb That's a bit out of date ;) > -rw-r--r-- 1 clamav adm 567741 2013-05-04 01:48 mbl.ndb JUST NUKED > I'll see if the one I just nuked comes back. Yep, that'll be the one to watch out for... Current download scripts are here,

Re: [clamav-users] reported before, makes no sense

2014-05-16 Thread Gene Heskett
On Friday 16 May 2014 02:37:08 Steve Basford did opine And Gene did reply: > >> UNOFFICIAL means it did not come from ClamAV®. > >> You need to take it up with whomever maintains the MBL database. > >> MalwarePatrol? > > > > I don't recall every subscribing to that s

Re: [clamav-users] reported before, makes no sense

2014-05-16 Thread Gene Heskett
On Friday 16 May 2014 02:36:28 Greg Folkert did opine And Gene did reply: > On Fri, 2014-05-16 at 02:03 -0400, Gene Heskett wrote: > > On Friday 16 May 2014 00:59:44 Al Varnell did opine > > > > And Gene did reply: > > > UNOFFICIAL means it did not come from ClamAVآ®. > > > > > > You need to take

Re: [clamav-users] reported before, makes no sense

2014-05-15 Thread Steve Basford
>> UNOFFICIAL means it did not come from ClamAV®. >> You need to take it up with whomever maintains the MBL database. >> MalwarePatrol? > I don't recall every subscribing to that service, and the clamav- > unofficial sigs database is not installed, and never has bee

Re: [clamav-users] reported before, makes no sense

2014-05-15 Thread Greg Folkert
On Fri, 2014-05-16 at 02:03 -0400, Gene Heskett wrote: > On Friday 16 May 2014 00:59:44 Al Varnell did opine > And Gene did reply: > > UNOFFICIAL means it did not come from ClamAV®. > > > > You need to take it up with whomever maintains the MBL database. > > MalwarePatrol?

Re: [clamav-users] reported before, makes no sense

2014-05-15 Thread Gene Heskett
On Friday 16 May 2014 00:59:44 Al Varnell did opine And Gene did reply: > UNOFFICIAL means it did not come from ClamAV®. > > You need to take it up with whomever maintains the MBL database. > MalwarePatrol? I don't recall every subscribing to that service, and the

Re: [clamav-users] reported before, makes no sense

2014-05-15 Thread Al Varnell
UNOFFICIAL means it did not come from ClamAV®. You need to take it up with whomever maintains the MBL database. MalwarePatrol? -Al- -- Al Varnell Mountain View, CA On May 15, 2014, at 9:38 PM, Gene Heskett wrote: > /home/gene/.cxoffice/tie/crossover.tieVIRI: M

[clamav-users] reported before, makes no sense

2014-05-15 Thread Gene Heskett
/home/gene/.cxoffice/tie/crossover.tieVIRI: MBL_343814.UNOFFICIAL FOUND /home/gene/.cxoffice/tie/download/crossover.tie.gz: MBL_343814.UNOFFICIAL FOUND --- SCAN SUMMARY --- Known viruses: 3752049 Engine version: 0.98.1 Scanned directories: 16112 Scanned files: 191474 Infected file