Re: [clamav-users] Question about Urlhaus.Malware.452652-9766253-0

2021-01-04 Thread Lilia Gonzalez Medina
Hi Orion! Thank you for reporting this. URLhaus is a partner that generates a list of ClamAV signatures to target malicious URLs. Signature Urlhaus.Malware.452652-9766253-0 looks for a malicious URL inside HTML files, which is why it is alerting on the URLs you mentioned. We found these FPs some w

Re: [clamav-users] freshclam can't download updates due to SSL issue

2021-01-04 Thread Micah Snyder (micasnyd) via clamav-users
Chris, Is the date/time correct on your machine? You can get this error if the time is incorrect. Eg if I set my date back to 2012: ❯ sudo date 010417352012 [sudo] password for micasnyd: Wed Jan 4 17:35:00 PST 2012 ❯ ~/.clamav/bin/freshclam ClamAV update process started at Wed Jan 4 17:35:0

Re: [clamav-users] Terminate clamscan after specific time

2021-01-04 Thread Micah Snyder (micasnyd) via clamav-users
Zvi, Yes, clamscan has a --max-scantime=#n option, which is measured in milliseconds. Clamscan will check the time limit periodically and abort the scan if the time limit has been exceeded. There is a similar config option for clamd in clamd.conf. Disclaimer: the limit is not precise as clam