Re: [clamav-users] Freshclam to not write to syslog?

2023-04-05 Thread Brent Clark via clamav-users
On 2023/04/04 15:47, Marc wrote: My logging goes to syslog, maybe remove this UpdateLogFile? I have only this in my config. LogSyslog yes LogFacility LOG_MAIL Thanks Guys Stefano gave me a hint and to check systemd. Low and behold: cat ./multi-user.target.wants/clamav-freshclam.service

[clamav-users] Freshclam to not write to syslog?

2023-04-04 Thread Brent Clark via clamav-users
LogVerbose no (also tried false) LogSyslog no (also tried false) LogFacility LOG_MAIL Debug false Is my understand correct that it is not possible to not write to syslog? Many thanks in this regard. Regards Brent Clark ___ Manage your clamav-users

Re: [clamav-users] ClamAV 0.103.8, 0.105.2 and 1.0.1 patch versions published

2023-02-20 Thread Brent Clark via clamav-users
Good day Guys Anyone on Debian Buster and Bullseye? How serious is this? Does anyone have any suggestions. Cause there is no packages available. If anyone can share their thoughts / experiences. Regards Brent On 2023/02/18 21:13, unison.subject_0t--- via clamav-users wrote: Vulnerabilities*

Re: [clamav-users] Looks like we've gotten a new variant of Emotet getting through...

2020-12-21 Thread Brent Clark via clamav-users
Hiya Can you please submit to Sanesecurity too. https://sanesecurity.com/contact-us/ Regards Brent On 2020/12/21 18:44, eric-l...@truenet.com wrote: I’m going to start posting a few to https://www.clamav.net/reports/malware Sincerely, Eric Tykwinski TrueNet, Inc. P: 610-429-8300

Re: [clamav-users] ClamAV - Emotet - Malware not detected

2020-09-16 Thread Brent Clark via clamav-users
Hiya Thanks so much. I know the community and the internet as a whole, stands to gain from your efforts / work. Regards Brent On 2020/09/16 15:45, G.W. Haywood via clamav-users wrote: Hi there, On Wed, 16 Sep 2020, Brent Clark via clamav-users wrote: Did you submit to Sanesecurity too

Re: [clamav-users] ClamAV - Emotet - Malware not detected

2020-09-16 Thread Brent Clark via clamav-users
Hiya Did you submit to Sanesecurity too? If not. Can you please consider submitting there too. Please see: https://sanesecurity.com/contact-us/ Many thanks Regards Brent On 2020/09/16 15:04, G.W. Haywood via clamav-users wrote: Hi there, On Wed, 16 Sep 2020, Joel Esler (jesler) via

Re: [clamav-users] A better zip bomb

2019-11-08 Thread Brent Clark via clamav-users
Good day Arnaud Thanks so much for this. Really appreciate the fast reply and help. Regards Brent Clark On 2019/11/08 10:23, Arnaud Jacques wrote: Hello Brent, https://www.bamsoftware.com/hacks/zipbomb/ I took the liberty of spinning up a vagrant instance to find out for myself. Here

[clamav-users] A better zip bomb

2019-11-08 Thread Brent Clark via clamav-users
, regards Brent Clark ___ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net

Re: [clamav-users] Freshclam to only pull safebrowsing.cvd

2019-09-06 Thread Brent Clark via clamav-users
Thanks so much Regards Brent On 2019/09/06 11:01, G.W. Haywood via clamav-users wrote: Hi there, On Fri, 6 Sep 2019, Brent Clark via clamav-users wrote: We have project to have a to have freshclam *only* pull / update safebrowsing.cvd what I find is, when I run my custom freshclam.conf

[clamav-users] Freshclam to only pull safebrowsing.cvd

2019-09-06 Thread Brent Clark via clamav-users
Good day Guys We have project to have a to have freshclam *only* pull / update safebrowsing.cvd what I find is, when I run my custom freshclam.conf file it still pulls daily.cvd, main.cvd, bytecode.cvd Anyone know how I can switch this off? Many thanks Regards Brent

Re: [clamav-users] Possible FP Doc.Trojan.Agent-6923110-0

2019-04-10 Thread Brent Clark via clamav-users
To whitelist a specific signature from the database you just add the signature name into a local file with the .ign2 extension and store it inside /var/lib/clamav. i.e. echo 'Doc.Trojan.Agent-6923110-0' >> /var/lib/clamav/whitelist.ign2 HTH Regards Brent Clark On 2019/04/10 13:46,

Re: [clamav-users] [External] Re: Scan very slow

2019-04-10 Thread Brent Clark via clamav-users
2051 daily_Win.Trojan.ldb*     1967 daily_Win.Virus.ldb      966 daily_Win.Worm.ldb Malware and Trojan take the longest, but they also have a majority of the signatures. On Tue, Apr 9, 2019 at 11:19 AM Steve Basford mailto:steveb_cla...@sanesecurity.com>> wrote: On 2019-

Re: [clamav-users] [External] Re: Scan very slow

2019-04-09 Thread Brent Clark via clamav-users
Cant those be adopted / managed by Sanesecurity? For all you know, those are already in Sanesecurity. Regards Brent Clark On 2019/04/09 12:25, Mark Allan via clamav-users wrote: The scan times are definitely better than they were - in fact, they're back to how they were before last week's

Re: [clamav-users] ClamAV definitions vs LMD/maldet

2019-03-06 Thread Brent Clark via clamav-users
On 2019/03/06 05:01, J.R. via clamav-users wrote: I'm pretty sure the clamav-unofficial-sigs script downloads the same signature files as maldet. The maldet program itself gives you turn-key ability for various scanning, logging, and cleaning options... clamav-unofficial-sigs does

Re: [clamav-users] Disable MaxFileSize and MaxFileSize to scan the whole system

2018-11-27 Thread Brent Clark
Hiya Im sorry to have to tell you, what ever it is you are trying to do and are thinking, you are doing it wrong. I can only imagine how long it will take to scan a massive file. The poor CPU is gonna crap it self. Please do not do this. The default it is plenty. HTH Regards Brent On

Re: [clamav-users] Disable MaxFileSize and MaxFileSize to scan the whole system

2018-11-27 Thread Brent Clark
What Albert said! Regards Brent On 2018/11/28 02:27, Al Varnell wrote: If it were possible to scan any size, it would eventually crash your system and might even cause permanent damage to it. You don't have unlimited RAM, so you cannot do unlimited scans. Sent from my iPad -Al- On Nov 27,

Re: [clamav-users] Specify more servers for clamdscan to pass for scanning

2018-11-05 Thread Brent Clark
to facilitate an encrypted connection. Regards, Micah On Nov 5, 2018, at 7:48 AM, Brent Clark <mailto:brentgclarkl...@gmail.com>> wrote: Good day Guys I have setup two clamd servers. On my Webservers, I need to stream a file to the clamd for scanning. I would like to ask, how would I sp

[clamav-users] Specify more servers for clamdscan to pass for scanning

2018-11-05 Thread Brent Clark
Good day Guys I have setup two clamd servers. On my Webservers, I need to stream a file to the clamd for scanning. I would like to ask, how would I specify two TCPAddr. If I specify just one, server, everything works ok. Ive tried various options and google does not appears to be of assists.

[Clamav-users] (no subject)

2004-10-05 Thread Brent Clark
Hi all I just run a few mail test from www.gfi.com/emailsecuritytest and my clam antivirus failed miserably. I too ran the tests from testvirus.org, this second test was ok, only two got through. Could someone please share some help with this, Kind Regards Brent Clark

RE: [Clamav-users] (no subject)

2004-10-05 Thread Brent Clark
Hi mail:~# clamscan -V clamscan / ClamAV version 0.75-1 mail:~# Im using this with my Exim Mail server Thanks for your help ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

RE: [Clamav-users] (no subject)

2004-10-05 Thread Brent Clark
). = and 6 got through. Kind Regards Brent Clark ___ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users