Re: [clamav-users] Spam No Longer ID'd as Virus

2012-08-21 Thread Steve Basford
> Unless something has changed again that I missed, the INetMsg signatures > are no > longer maintained. That's still correct... just in case anyone else missed the updates, here's the last two announcements, as there were a few new databases too: http://www.freelists.org/post/sanesecurity/data

[clamav-users] Anomaly Detected by OSSEC

2012-08-21 Thread teres vir
Hi, For me, OSSEC is continuously triggering the following alert message when it is doing its daily rootkit checks : OSSEC HIDS Notification. 2012 Aug 19 04:33:47 Received From: (web-agent) 192.168.0.115->rootcheck Rule: 510 fired (level 7) -> "Host-based anomaly detection event (rootcheck)." Po

Re: [clamav-users] Anomaly Detected by OSSEC

2012-08-21 Thread David Raynor
On Tue, Aug 21, 2012 at 6:25 AM, teres vir wrote: > Hi, > > For me, OSSEC is continuously triggering the following alert message when > it is doing its daily rootkit checks : > > OSSEC HIDS Notification. > 2012 Aug 19 04:33:47 > > Received From: (web-agent) 192.168.0.115->rootcheck > Rule: 510 fi

[clamav-users] local mirror update fail

2012-08-21 Thread infelectromed . mtz
hello people, this is my first mail cause Im new in clamAV . . . i read some info to update my local machines from a local web server, from www.clamav.net i download the 4 archives main.cvd daily.cvd bytecode.cvd safebrowsing.cvd and put in my local web server under the following link http:

Re: [clamav-users] local mirror update fail

2012-08-21 Thread Benny Pedersen
Den 2012-08-21 16:45, infelectromed@infomed.sld.cu skrev: DatabaseMirror http://ftp.sld.cu/pub/antivirus/clamav/actualizaciones/ this is a http url, but DatabaseMirror is a dns name that resolves to multiple ips Tue Aug 21 10:40:00 2012 -> WARNING: Local version: 0.96.5 time to upgra

Re: [clamav-users] Detection of Win32 Trojan / Dorifel

2012-08-21 Thread Rob Sterenborg (lists)
On 08/20/2012 02:43 PM, Joel Esler wrote: > On Aug 20, 2012, at 7:46 AM, "Birgelen, Jeroen van" > wrote: > >> LS, >> >> I would kindly like to request some information on whether ClamAV is >> detecting the Dorifel Trojan/virus which is currently spreading (at least in >> The Netherlands), sinc

Re: [clamav-users] Detection of Win32 Trojan / Dorifel

2012-08-21 Thread Alain Zidouemba
I'll provide an answer shortly on this. Thanks, - Alain ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml