Re: [clamav-users] Where can I download the daily.cvd and main.cvd files

2014-09-09 Thread Joel Esler (jesler)

On Sep 9, 2014, at 1:44 PM, Leonardo Rodrigues 
mailto:leolis...@solutti.com.br>> wrote:

On 09/09/14 14:28, McCarthy, John D. wrote:
A million thanks.  This is what I needed.  Many of my systems do not connect to 
the internet.  This should be noted in an obvious place on the webpage where 
users can get the files.  I suspect this will be a hot issue for the users who 
have not been to the site in a month.



   The links are there on the download section of the site !!!

http://www.clamav.net/download.html


 If this is not viable, you may use these direct download links: main.cvd | 
daily.cvd | bytecode.cvd
(and the filenames linked to the URLs)


yes, we have them there, but we do not want to keep them there.  We’d much 
rather that people set up a local mirror (private mirror) to allow one machine 
that does have Internet access to download them from our mirror infrastructure, 
and you can distribute it from your machine.  We don’t want people downloading 
them directly from our local mirror.

--
Joel Esler
Open Source Manager
Threat Intelligence Team Lead
Talos
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] clamav-milter: Failed to create temporary file

2014-09-09 Thread Steven Morgan
Hi David,

Yes, I had sent you and Urban a patch last week to correct this problem.
This patch had been confirmed yesterday by Urban as working. This fix will
be included in the upcoming 0.98.5 release. Please confirm if possible.

Thanks,
Steve


On Tue, Sep 9, 2014 at 12:54 PM, J. David Rye of Roadtech <
d@roadtech.co.uk> wrote:

> On Tuesday 02 September 2014 23:12, Steven Morgan wrote:
> > Hi J. David,
> >
> > Thanks for the additional analysis and information. I've been looking at
> > this for a bit today. I have opened a ticket in the ClamAV bugzilla
> system
> > to track the issue. The ticket number is 11089. Hope to have an answer
> > soon.
> >
>
> Have been doing a bit of hacking around with the code.
> Have not been able to get the logging functions built in to libclamd
> functions such as  "cli_dbgmsg" to log reliably.
>
> freshcam and clamd appear to use a call back to intercept and route
> their output via their own function "logg". However clamav-milter
> seeems to be missing the necessary bits to do this.
>
> I ended up putting direct calls in to fprintf and fflush.
> problem is definitely in cl_hash_data. As a work round i have patched
> the function cli_md5buff in libclamav/others_common.c  to use the
> random data directly to create the file name when the call to
> cl_hash_data fails.
>
> [root@mailhost-c6 BUILD]# diff -Naur
> clamav-0.98.4.orig/libclamav/others_common.c
> clamav-0.98.4.rt/libclamav/others_common.c
> --- clamav-0.98.4.orig/libclamav/others_common.c2014-05-21
> 16:25:05.0 +0100
> +++ clamav-0.98.4.rt/libclamav/others_common.c  2014-09-08
> 19:27:00.458404432
> +0100
> @@ -825,21 +825,41 @@
>  {
> unsigned char digest[16];
> char *md5str, *pt;
> +const unsigned char *pt2;
> int i;
>
> -cl_hash_data("md5", buffer, len, digest, NULL);
> +if(!(md5str = (char *) cli_calloc(32 + 1, sizeof(char {
> +   cli_dbgmsg("cli_md5buff: out of memory\n");
> +   return NULL;
> +}
>
> -if(dig)
> -   memcpy(dig, digest, 16);
> +if ( cl_hash_data("md5", buffer, len, digest, NULL) == NULL ){
> +cli_dbgmsg("cli_md5buff: Call to cl_hash_data failed to return
> hash\n");
> +fprintf(stderr, "cli_md5buff:fprint Call to cl_hash_data failed to
> return hash\n");
> +
> +/* In the absence of hash use random data from buffer directly */
> +/* this is a nasty cludge based onthe fact that we are on called from
> cli_gentmp */
> +/* with 16 byes saved from last digest, and 32 bytes of fresh random data
> */
> +  pt = md5str;
> +  pt2 = buffer + 16 ;
> +  for(i = 0; i < 16; i++) {
> +   sprintf(pt, "%02x", *pt2);
> +   pt += 2;
> +   pt2 += 2;
> +  }
>
> -if(!(md5str = (char *) cli_calloc(32 + 1, sizeof(char
> -   return NULL;
> +} else { /* successful hash */
> +  fprintf(stderr, "cli_md5buff:fprint using hash returned from
> cl_hash_data\n");
>
> -pt = md5str;
> -for(i = 0; i < 16; i++) {
> +  if(dig)
> + memcpy(dig, digest, 16);
> +
> +  pt = md5str;
> +  for(i = 0; i < 16; i++) {
> sprintf(pt, "%02x", digest[i]);
> pt += 2;
> -}
> +  }
> +};
>
>  return md5str;
>  }
> @@ -889,11 +909,14 @@
>
>  if(!tmp) {
> free(name);
> -   cli_dbgmsg("cli_gentemp('%s'): out of memory\n", mdir);
> +   cli_dbgmsg("cli_gentemp('%s'): error from cli_md5buff\n", mdir);
> return NULL;
>  }
>
> snprintf(name, len, "%s"PATHSEP"clamav-%s.tmp", mdir, tmp);
> +/* log all names */
> +   cli_dbgmsg("cli_gentemp: filename %s"PATHSEP"clamav-%s.tmp\n",
> mdir,
> tmp);
> +   fprintf(stderr, "cli_gentemp: filename %s"PATHSEP"clamav-%s.tmp\n",
> mdir, tmp);
>  free(tmp);
>
>  return(name);
> @@ -915,7 +938,9 @@
>  free(*name);
>  *name = NULL;
>  return CL_ECREAT;
> -}
> +} else {
> +cli_errmsg("cli_gentempfd: Createed temporary file %s: %i\n",
> *name,
> *fd);
> +};
>
>  return CL_SUCCESS;
>  }
> [root@mailhost-c6 BUILD]#
>
> Diagnostic  output from my current version below.
> Note it is the call to EVP_get_digestbyname from cli_hash_data that fails.
>
> Reading the manual page on EVP_get_digestbyname, it will only work if
> OpenSSL_add_all_digests() or OpenSSL_add_all_algorithms() has been called
> first.
>
> It looks like these are only called from cl_initialize_crypto().
>
> Snag as far as I can see cl_initialize_crypto is not called from
> clamav-milter
>
>
> LibClamAV Info: cli_hash_data: Called
> LibClamAV Error: cli_hash_data: Call to EVP_get_digestbyname failed
> cli_md5buff:fprint Call to cl_hash_data failed to return hash
> cli_gentemp: filename /tmp/clamav-cc4ad42fc23e93aaf82a1acc428307d9.tmp
> LibClamAV Error: cli_gentempfd: Createed temporary
> file /tmp/clamav-cc4ad42fc23e93aaf82a1acc428307d9.tmp: 11
> LibClamAV Info: cli_hash_data: Called
> LibClamAV Error: cli_hash_data: Call to EVP_get_digestbyname failed
> cl

Re: [clamav-users] Where can I download the daily.cvd and main.cvd files

2014-09-09 Thread Leonardo Rodrigues

On 09/09/14 14:28, McCarthy, John D. wrote:

A million thanks.  This is what I needed.  Many of my systems do not connect to 
the internet.  This should be noted in an obvious place on the webpage where 
users can get the files.  I suspect this will be a hot issue for the users who 
have not been to the site in a month.




The links are there on the download section of the site !!!

http://www.clamav.net/download.html


  If this is not viable, you may use these direct download links: 
main.cvd | daily.cvd | bytecode.cvd

(and the filenames linked to the URLs)

--


Atenciosamente / Sincerily,
Leonardo Rodrigues
Solutti Tecnologia
http://www.solutti.com.br

Minha armadilha de SPAM, NÃO mandem email
gertru...@solutti.com.br
My SPAMTRAP, do not email it



___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Where can I download the daily.cvd and main.cvd files

2014-09-09 Thread McCarthy, John D.
These are government systems that either A: can only access certain sites or B: 
have not internet connection (both or security reasons)



On 2014-09-09 17:28, McCarthy, John D. wrote:
> A million thanks.  This is what I needed.  Many of my systems do not connect 
> to the internet.  This should be noted in an obvious place on the webpage 
> where users can get the files.  I suspect this will be a hot issue for the 
> users who have not been to the site in a month.

>
>
>
> Hope this get posted on the site not sure how to update and share with 
> everyone.
>
> On 2014-09-09 14:08, Ed Christiansen LX wrote:
> > ah... and what about those of us who use ClamAV on networks that can't
> > connect to the Internet?
> >
> > http://db.local.clamav.net/main.cvd
> > http://db.local.clamav.net/daily.cvd
> >
> > On 9/9/2014 9:40 AM, Alain Zidouemba wrote:
> > > By using the tool "freshclam" that comes with ClamAV.
> > >
> > > - Alain
> > >
> > > On Tue, Sep 9, 2014 at 8:08 AM, McCarthy, John D. <
> > > john.d.mccar...@leidos.com> wrote:
> > >
> > >>
> > >> ___
> > >> Help us build a comprehensive ClamAV guide:
> > >> https://github.com/vrtadmin/clamav-faq
> > >>
> > >> http://www.clamav.net/contact.html
>
> http://www.clamav.net/contact.html
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Where can I download the daily.cvd and main.cvd files

2014-09-09 Thread McCarthy, John D.
A million thanks.  This is what I needed.  Many of my systems do not connect to 
the internet.  This should be noted in an obvious place on the webpage where 
users can get the files.  I suspect this will be a hot issue for the users who 
have not been to the site in a month.



Hope this get posted on the site not sure how to update and share with everyone.

On 2014-09-09 14:08, Ed Christiansen LX wrote:
> ah... and what about those of us who use ClamAV on networks that can't
> connect to the Internet?
>
> http://db.local.clamav.net/main.cvd
> http://db.local.clamav.net/daily.cvd
>
> On 9/9/2014 9:40 AM, Alain Zidouemba wrote:
> > By using the tool "freshclam" that comes with ClamAV.
> >
> > - Alain
> >
> > On Tue, Sep 9, 2014 at 8:08 AM, McCarthy, John D. <
> > john.d.mccar...@leidos.com> wrote:
> >
> >>
> >> ___
> >> Help us build a comprehensive ClamAV guide:
> >> https://github.com/vrtadmin/clamav-faq
> >>
> >> http://www.clamav.net/contact.html
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] clamav-milter: Failed to create temporary file

2014-09-09 Thread J. David Rye of Roadtech
On Tuesday 02 September 2014 23:12, Steven Morgan wrote:
> Hi J. David,
>
> Thanks for the additional analysis and information. I've been looking at
> this for a bit today. I have opened a ticket in the ClamAV bugzilla system
> to track the issue. The ticket number is 11089. Hope to have an answer
> soon.
>

Have been doing a bit of hacking around with the code.
Have not been able to get the logging functions built in to libclamd 
functions such as  "cli_dbgmsg" to log reliably.

freshcam and clamd appear to use a call back to intercept and route 
their output via their own function "logg". However clamav-milter 
seeems to be missing the necessary bits to do this.

I ended up putting direct calls in to fprintf and fflush.
problem is definitely in cl_hash_data. As a work round i have patched 
the function cli_md5buff in libclamav/others_common.c  to use the 
random data directly to create the file name when the call to 
cl_hash_data fails.

[root@mailhost-c6 BUILD]# diff -Naur 
clamav-0.98.4.orig/libclamav/others_common.c 
clamav-0.98.4.rt/libclamav/others_common.c
--- clamav-0.98.4.orig/libclamav/others_common.c2014-05-21 
16:25:05.0 +0100
+++ clamav-0.98.4.rt/libclamav/others_common.c  2014-09-08 19:27:00.458404432 
+0100
@@ -825,21 +825,41 @@
 {
unsigned char digest[16];
char *md5str, *pt;
+const unsigned char *pt2;
int i;

-cl_hash_data("md5", buffer, len, digest, NULL);
+if(!(md5str = (char *) cli_calloc(32 + 1, sizeof(char {
+   cli_dbgmsg("cli_md5buff: out of memory\n");
+   return NULL;
+}

-if(dig)
-   memcpy(dig, digest, 16);
+if ( cl_hash_data("md5", buffer, len, digest, NULL) == NULL ){
+cli_dbgmsg("cli_md5buff: Call to cl_hash_data failed to return 
hash\n");
+fprintf(stderr, "cli_md5buff:fprint Call to cl_hash_data failed to 
return hash\n");
+
+/* In the absence of hash use random data from buffer directly */
+/* this is a nasty cludge based onthe fact that we are on called from 
cli_gentmp */
+/* with 16 byes saved from last digest, and 32 bytes of fresh random data */
+  pt = md5str;
+  pt2 = buffer + 16 ;
+  for(i = 0; i < 16; i++) {
+   sprintf(pt, "%02x", *pt2);
+   pt += 2;
+   pt2 += 2;
+  }

-if(!(md5str = (char *) cli_calloc(32 + 1, sizeof(char
-   return NULL;
+} else { /* successful hash */
+  fprintf(stderr, "cli_md5buff:fprint using hash returned from 
cl_hash_data\n");

-pt = md5str;
-for(i = 0; i < 16; i++) {
+  if(dig)
+ memcpy(dig, digest, 16);
+
+  pt = md5str;
+  for(i = 0; i < 16; i++) {
sprintf(pt, "%02x", digest[i]);
pt += 2;
-}
+  }
+};

 return md5str;
 }
@@ -889,11 +909,14 @@

 if(!tmp) {
free(name);
-   cli_dbgmsg("cli_gentemp('%s'): out of memory\n", mdir);
+   cli_dbgmsg("cli_gentemp('%s'): error from cli_md5buff\n", mdir);
return NULL;
 }

snprintf(name, len, "%s"PATHSEP"clamav-%s.tmp", mdir, tmp);
+/* log all names */
+   cli_dbgmsg("cli_gentemp: filename %s"PATHSEP"clamav-%s.tmp\n", mdir, 
tmp);
+   fprintf(stderr, "cli_gentemp: filename %s"PATHSEP"clamav-%s.tmp\n", 
mdir, tmp);
 free(tmp);

 return(name);
@@ -915,7 +938,9 @@
 free(*name);
 *name = NULL;
 return CL_ECREAT;
-}
+} else {
+cli_errmsg("cli_gentempfd: Createed temporary file %s: %i\n", *name, 
*fd);
+};

 return CL_SUCCESS;
 }
[root@mailhost-c6 BUILD]#

Diagnostic  output from my current version below.
Note it is the call to EVP_get_digestbyname from cli_hash_data that fails.

Reading the manual page on EVP_get_digestbyname, it will only work if  
OpenSSL_add_all_digests() or OpenSSL_add_all_algorithms() has been called 
first.

It looks like these are only called from cl_initialize_crypto().

Snag as far as I can see cl_initialize_crypto is not called from clamav-milter


LibClamAV Info: cli_hash_data: Called
LibClamAV Error: cli_hash_data: Call to EVP_get_digestbyname failed
cli_md5buff:fprint Call to cl_hash_data failed to return hash
cli_gentemp: filename /tmp/clamav-cc4ad42fc23e93aaf82a1acc428307d9.tmp
LibClamAV Error: cli_gentempfd: Createed temporary 
file /tmp/clamav-cc4ad42fc23e93aaf82a1acc428307d9.tmp: 11
LibClamAV Info: cli_hash_data: Called
LibClamAV Error: cli_hash_data: Call to EVP_get_digestbyname failed
cli_md5buff:fprint Call to cl_hash_data failed to return hash
cli_gentemp: filename /tmp/clamav-6296cff0b0f8e0d462e2a82ede5885ac.tmp
LibClamAV Error: cli_gentempfd: Createed temporary 
file /tmp/clamav-6296cff0b0f8e0d462e2a82ede5885ac.tmp: 13
LibClamAV Info: cli_hash_data: Called
LibClamAV Error: cli_hash_data: Call to EVP_get_digestbyname failed
cli_md5buff:fprint Call to cl_hash_data failed to return hash
cli_gentemp: filename /tmp/clamav-40f9e43c4dc6f6213d604a6c642bb738.tmp
LibClamAV Error: cli_gentempfd: Createed temporary 
file

Re: [clamav-users] clamav-milter: Failed to create temporary file

2014-09-09 Thread J. David Rye of Roadtech
On Tuesday 02 September 2014 23:12, Steven Morgan wrote:
> Hi J. David,
>
> Thanks for the additional analysis and information. I've been looking at
> this for a bit today. I have opened a ticket in the ClamAV bugzilla system
> to track the issue. The ticket number is 11089. Hope to have an answer
> soon.
>

Have been doing a bit of hacking around with the code.
Have not been able to get the logging functions built in to libclamd 
functions such as  "cli_dbgmsg" to log reliably.

freshcam and clamd appear to use a call back to intercept and route 
their output via their own function "logg". However clamav-milter 
seeems to be missing the necessary bits to do this.

I ended up putting direct calls in to fprintf and fflush.
problem is definitely in cl_hash_data. As a work round i have patched 
the function cli_md5buff in libclamav/others_common.c  to use the 
random data directly to create the file name when the call to 
cl_hash_data fails.

Diagnostic  output from my current version below.
Note it is the call to EVP_get_digestbyname from cli_hash_data that fails.

LibClamAV Info: cli_hash_data: Called
LibClamAV Error: cli_hash_data: Call to EVP_get_digestbyname failed
cli_md5buff:fprint Call to cl_hash_data failed to return hash
cli_gentemp: filename /tmp/clamav-cc4ad42fc23e93aaf82a1acc428307d9.tmp
LibClamAV Error: cli_gentempfd: Createed temporary file 
/tmp/clamav-cc4ad42fc23e93aaf82a1acc428307d9.tmp: 11
LibClamAV Info: cli_hash_data: Called
LibClamAV Error: cli_hash_data: Call to EVP_get_digestbyname failed
cli_md5buff:fprint Call to cl_hash_data failed to return hash
cli_gentemp: filename /tmp/clamav-6296cff0b0f8e0d462e2a82ede5885ac.tmp
LibClamAV Error: cli_gentempfd: Createed temporary file 
/tmp/clamav-6296cff0b0f8e0d462e2a82ede5885ac.tmp: 13
LibClamAV Info: cli_hash_data: Called
LibClamAV Error: cli_hash_data: Call to EVP_get_digestbyname failed
cli_md5buff:fprint Call to cl_hash_data failed to return hash
cli_gentemp: filename /tmp/clamav-40f9e43c4dc6f6213d604a6c642bb738.tmp
LibClamAV Error: cli_gentempfd: Createed temporary file 
/tmp/clamav-40f9e43c4dc6f6213d604a6c642bb738.tmp: 11
LibClamAV Info: cli_hash_data: Called
LibClamAV Error: cli_hash_data: Call to EVP_get_digestbyname failed
cli_md5buff:fprint Call to cl_hash_data failed to return hash
cli_gentemp: filename /tmp/clamav-45633b0b40207939c2acdc5d752f0862.tmp
LibClamAV Error: cli_gentempfd: Createed temporary file 
/tmp/clamav-45633b0b40207939c2acdc5d752f0862.tmp: 12
LibClamAV Info: cli_hash_data: Called
LibClamAV Error: cli_hash_data: Call to EVP_get_digestbyname failed
cli_md5buff:fprint Call to cl_hash_data failed to return hash
cli_gentemp: filename /tmp/clamav-876a73b889eb4308c4773efa6818933d.tmp
LibClamAV Error: cli_gentempfd: Createed temporary file 
/tmp/clamav-876a73b889eb4308c4773efa6818933d.tmp: 12
LibClamAV Info: cli_hash_data: Called
LibClamAV Error: cli_hash_data: Call to EVP_get_digestbyname failed
cli_md5buff:fprint Call to cl_hash_data failed to return hash
cli_gentemp: filename /tmp/clamav-6ed0e7970718b603f4125c9c920aecee.tmp
LibClamAV Error: cli_gentempfd: Createed temporary file 
/tmp/clamav-6ed0e7970718b603f4125c9c920aecee.tmp: 11
LibClamAV Info: cli_hash_data: Called
LibClamAV Error: cli_hash_data: Call to EVP_get_digestbyname failed
cli_md5buff:fprint Call to cl_hash_data failed to return hash
cli_gentemp: filename /tmp/clamav-0e1024e48ddf5d9245ec42cc366bba55.tmp
LibClamAV Error: cli_gentempfd: Createed temporary file 
/tmp/clamav-0e1024e48ddf5d9245ec42cc366bba55.tmp: 12



> Steve
>
> On Sun, Aug 31, 2014 at 5:52 AM, J. David Rye  wrote:
> > On Thu, 2014-08-21 at 19:22 -0400, Steven Morgan wrote:
> > > Hi Urban,
> > >
> > > I took a look at this code. The real problem is the inability to
> > > create a
> > > temporary file. The second message just results from the return code
> > > of the
> > > function that attempts to create the temp file. We need to find out
> > > why the
> > > temp file creation fails. There should also be a clamav error message
> > > written from:  cli_errmsg("cli_gentempfd: Can't create temporary file
> > > %s:
> > > %s\n", *name, strerror(errno)); Can you find this message?
> > >
> > > Otherwise, it is a memory allocation failure for space for the temp
> > > file
> > > name, which seems unlikely.
> > >
> > > Steve
> >
> > I am also seeing this issue. Mostly intermitant but see further down.
> >
> > cli_errmsg wont work if clamav-milter has daemonezed.
> > it only writes to STDERR and the function daemonize closes standard
> > error even if you recompile with CL_DEBUG set.
> >
> > Only way to get is to get the error messages from  cli_gentempfd seams
> > to be to uncomment the line
> >
> > "#Foreground yes"
> >
> > In clamav-milter.conf, then run in foreground from command line.
> >
> > As an aside I wonder why cli_gentempfd does not use the function logg()
> > and output to file or syslog depending on configuration file.
> >
> > I am running clamav-milter on a VM. OS is CentoOS 6.5
> > VM has 4

Re: [clamav-users] Where can I download the daily.cvd and main.cvd files

2014-09-09 Thread Ed Christiansen LX
Some networks, for a variety of legal and intellectual property reasons, 
may not have any exterior connectivity at all.  No firewalls, no NATing, 
nothing.  The only way to get .CVDs in is sneakernet.


On 9/9/2014 10:28 AM, Leonardo Rodrigues wrote:

On 09/09/14 11:08, Ed Christiansen LX wrote:

ah... and what about those of us who use ClamAV on networks that can't
connect to the Internet?

http://db.local.clamav.net/main.cvd
http://db.local.clamav.net/daily.cvd


 on that cases, you're supposed to be able to download it from your
local mirror.

 are you running clamav on a network that does not have internet
access and do not have a local mirror setup ?? Well ... that's
definitely not a good idea !



___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Where can I download the daily.cvd and main.cvd files

2014-09-09 Thread Leonardo Rodrigues

On 09/09/14 11:08, Ed Christiansen LX wrote:
ah... and what about those of us who use ClamAV on networks that can't 
connect to the Internet?


http://db.local.clamav.net/main.cvd
http://db.local.clamav.net/daily.cvd


on that cases, you're supposed to be able to download it from your 
local mirror.


are you running clamav on a network that does not have internet 
access and do not have a local mirror setup ?? Well ... that's 
definitely not a good idea !



--


Atenciosamente / Sincerily,
Leonardo Rodrigues
Solutti Tecnologia
http://www.solutti.com.br

Minha armadilha de SPAM, NÃO mandem email
gertru...@solutti.com.br
My SPAMTRAP, do not email it



___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Where can I download the daily.cvd and main.cvd files

2014-09-09 Thread Ed Christiansen LX
ah... and what about those of us who use ClamAV on networks that can't 
connect to the Internet?


http://db.local.clamav.net/main.cvd
http://db.local.clamav.net/daily.cvd

On 9/9/2014 9:40 AM, Alain Zidouemba wrote:

By using the tool "freshclam" that comes with ClamAV.

- Alain

On Tue, Sep 9, 2014 at 8:08 AM, McCarthy, John D. <
john.d.mccar...@leidos.com> wrote:



___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Where can I download the daily.cvd and main.cvd files

2014-09-09 Thread Benny Pedersen

Run freshclam
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Where can I download the daily.cvd and main.cvd files

2014-09-09 Thread Alain Zidouemba
By using the tool "freshclam" that comes with ClamAV.

- Alain

On Tue, Sep 9, 2014 at 8:08 AM, McCarthy, John D. <
john.d.mccar...@leidos.com> wrote:

>
> ___
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Problem with missing information

2014-09-09 Thread Matus UHLAR - fantomas

On 09.09.14 10:04, Denny Bortfeldt wrote:

thanks a lot. Found the error. I had two versions of libxml installed (but
don't know why).  Deleting the old one fixed the problem.



/usr/local/lib/libxml2.so.2: no version information available


packages in /usr/local/lib are not from debianm distribution. I would be
careful about those.

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Quantum mechanics: The dreams stuff is made of. 
___

Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


[clamav-users] Where can I download the daily.cvd and main.cvd files

2014-09-09 Thread McCarthy, John D.

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Problem with missing information

2014-09-09 Thread Denny Bortfeldt
Hey Steve,

thanks a lot. Found the error. I had two versions of libxml installed (but 
don't know why). Deleting the old one fixed the problem.

Cheers,
Denny

On Tue, September 9, 2014 9:48 am, Denny Bortfeldt wrote:
>
> I've got a little problem and don't know what happen to my system.
> Everytime I start "clamscan" or "freshclam" I get the following error:


Hi Denny,

There's a few posts with that sort of "no version information available"
error...

Google:

/usr/local/lib/libxml2.so.2: no version information available

Shows a few posts...

Cheers,

Steve
Sanesecurity.com

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Problem with missing information

2014-09-09 Thread Steve Basford

On Tue, September 9, 2014 9:48 am, Denny Bortfeldt wrote:
>
> I've got a little problem and don't know what happen to my system.
> Everytime I start "clamscan" or "freshclam" I get the following error:


Hi Denny,

There's a few posts with that sort of "no version information available"
error...

Google:

/usr/local/lib/libxml2.so.2: no version information available

Shows a few posts...

Cheers,

Steve
Sanesecurity.com

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


[clamav-users] Problem with missing information

2014-09-09 Thread Denny Bortfeldt
Hello everyone,

I've got a little problem and don't know what happen to my system.
Everytime I start "clamscan" or "freshclam" I get the following error:
clamscan: /usr/local/lib/libxml2.so.2: no version information available 
(required by /usr/lib/libclamav.so.6)
clamscan: /usr/local/lib/libxml2.so.2: no version information available 
(required by /usr/lib/libclamav.so.6)
clamscan: /usr/local/lib/libxml2.so.2: no version information available 
(required by /usr/lib/libclamav.so.6)
clamscan: /usr/local/lib/libxml2.so.2: no version information available 
(required by /usr/lib/libclamav.so.6)

I'm using Debian 7 - everything patched and up-to-date.
Tried also "apt-get purge clamav clamav-base clamav-freshclam libclamav6" and 
install it again.
I also removed and installed libxml2 but the error stay.

Does anyone have an answer for my little problem?

Thanks in advance.

Sincerely,
Denny
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


Re: [clamav-users] Hint for creating signatures

2014-09-09 Thread Hajo Locke

Hello,

Am 08.09.2014 um 16:58 schrieb Steve Basford:


Hi,

Tricky :(

Copy this into@ not_tested.ndb

test.ercynpr:7:*:3D7374725F726F74313328??636572745F657263796E7072??293B2024
test.cryptbot:7:*:3D22{12}225E22{40}3B2024



Thanks, this seems to work. I will try it. Hopefully only a few FP.

Thanks,
Hajo
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml