Re: [clamav-users] lost the thread, but my ipv6 noise in the freshclam log has vanished

[Gene Heskett]

On Tuesday 03 July 2018 06:59:59 Joel Esler (jesler) wrote:

> What does that mean?
>
The failure to access the outside world via ipv6 report has now vanished 
from the logs.

Here is a paste from a couple days back:
nonblock_connect: connect(): fd=4 errno=101: Network is unreachable
Can't connect to port 80 of host db.us.clamav.net (IP: 
2400:cb00:2048:1::6810:bb8a)

So now I see only the real failures but there haven't been any since.
Normal log looks like this:

Tue Jul  3 06:50:51 2018 -> Received signal: wake up
Tue Jul  3 06:50:51 2018 -> ClamAV update process started at Tue Jul  3 
06:50:51 2018
Tue Jul  3 06:50:51 2018 -> WARNING: Your ClamAV installation is OUTDATED!
Tue Jul  3 06:50:51 2018 -> WARNING: Local version: 0.99.4 Recommended version: 
0.100.0
Tue Jul  3 06:50:51 2018 -> DON'T PANIC! Read 
http://www.clamav.net/documents/upgrading-clamav
Tue Jul  3 06:50:51 2018 -> main.cld is up to date (version: 58, sigs: 4566249, 
f-level: 60, builder: sigmgr)
Tue Jul  3 06:50:52 2018 -> Downloading daily-24718.cdiff [100%]
Tue Jul  3 06:50:59 2018 -> daily.cld updated (version: 24718, sigs: 2002049, 
f-level: 63, builder: neo)
Tue Jul  3 06:50:59 2018 -> bytecode.cld is up to date (version: 322, sigs: 90, 
f-level: 63, builder: neo)
Tue Jul  3 06:51:05 2018 -> Database updated (6568388 signatures) from 
db.us.clamav.net (IP: 104.16.187.138)
Tue Jul  3 06:51:05 2018 -> Clamd successfully notified about the update.

Thanks Joel.

-- 
Cheers, Gene Heskett
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] lost the thread, but my ipv6 noise in the freshclam log has vanished

[Joel Esler (jesler)]

What does that mean?

Sent from my iPhone

> On Jul 3, 2018, at 06:39, Gene Heskett  wrote:
> 
> 
> -- 
> Cheers, Gene Heskett
> --
> "There are four boxes to be used in defense of liberty:
> soap, ballot, jury, and ammo. Please use in that order."
> -Ed Howdershelt (Author)
> Genes Web page 
> ___
> clamav-users mailing list
> clamav-users@lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users
> 
> 
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] lost the thread, but my ipv6 noise in the freshclam log has vanished

[Gene Heskett]

-- 
Cheers, Gene Heskett
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 
___
clamav-users mailing list
clamav-users@lists.clamav.net
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] lost

[G.W. Haywood]

Hi there,

On Wed, 18 Dec 2013, David Grant wrote:


I can barely understand the home page.


You haven't made it clear which home page you mean.


I don't know if I use Unix


Maybe ClamAV is not for you. [1]


(I'm using an iMac).


ClamAV is probably not for you. [2]


I was told that ClamAV was the best virus protection


Whoever told you that, don't listen to them any more.  There is no
'best' virus protection, except perhaps using Linux/FreeBSD/OpenBSD or
similar.  Do you know how many anti-virus packages there are Out There?
Did your adviser even ask you if you were using a Windows machine?  Did
he point you to something like Jotti's malware scan?

http://virusscan.jotti.org/en-gb

Do you know the differences between viruses, ransomware, worms, trojan
horses, rootkits, keyloggers, dialers, spyware, adware, malicious BHOs
and rogue security software in general?

http://en.wikipedia.org/wiki/Malware


so I signed up ? or did I download?


How are we supposed to know?! :)


In any case, every day at the same time my work is interrupted by a report from 
Console.


Mr. Esler already asked you about this.  Mr. Esler is, well, very
polite because he works for Sourcefire, the people who are (now)
primarily responsible for ClamAV.  He's saying he doesn't know what
you're talking about because ClamAV itself doesn't do what you
describe.  In fact, unless you tell it what to do after you've done
the installation, it does nothing at all.


Is there a really simple explanation of ClamAV somewhere?


ClamAV is not a simple product, but in simple terms it is a kit of
tools which can be used in a variety of ways.  ClamAV is supplied with
documentation.  You should read it, but it does make some assumptions
about your level of skill.  Exactly how you use it will depend on your
circumstances.  For example, I use it to scan for email-borne garbage
on the mail servers which I run.  Because my own machines are Linux
boxes, and I run no Windows machines at all, I have no great interest
in scanning them for viruses -- my machines are, to all intents and
purposes, not affected by them.  However it really wouldn't do for one
of my people unwittingly to forward any malicious software to someone
outside our organization, so there is an incentive to scan both
incoming and outgoing mail.  The third-party databases which ClamAV
can use to scan email messages for things like 'phishing' make it much
more useful to me than if it could only scan for viruses.  See also [2].


Can I stop that daily interruption of Console, but still keep the virus 
protection?


Yes. [3]

Notes:

[1] Open Source is as much about helping yourself, by doing some
homework, as it is about asking people what they think you did because
you have no idea.  There is a (to be honest, bewildering) amount of
information about Macs available to you for the price of a search
engine query.  This will tell you for example about the operating
system that is used.  If you don't know what an operating system is,
now might be a good time to look at some articles on Wikipedia:

http://en.wikipedia.org/wiki/Operating_system
http://en.wikipedia.org/wiki/Imac
http://en.wikipedia.org/wiki/Mac_OS

[2] There are a couple of million viruses in the wild which currently
affect Windows machines.  I don't know how many there are currently
for the various Macs, but I think it's in the order of a single digit.

[3] You can do whatever you like of course, but you have some work to
do before you will know how to do it.  As Mr. Varnell has explained,
here is probably the wrong place for questions about ClamXAV.

--

73,
Ged.
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml

[clamav-users] lost

[David Grant]

I can barely understand the home page. I don't know if I use Unix (I'm using an 
iMac).

I was told that ClamAV was the best virus protection, so I signed up … or did I 
download?

In any case, every day at the same time my work is interrupted by a report from 
Console.

I think the upshot is that everything is OK.

QUESTIONS: 
1) Is there a really simple explanation of ClamAV somewhere?
2) Can I stop that daily interruption of Console, but still keep the 
virus protection?

Thank you.
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml

Re: [clamav-users] lost

[Joel Esler (jesler)]

What is this “daily interruption of Console” that you are referring to?  Can 
you give us a screenshot or something so we can reference?

Also, ClamXav is probably one of the best GUI clients for ClamAV that I’ve seen 
so far.

--
Joel Esler
Intelligence Lead
Open Source Manager
Vulnerability Research Team
Jabber: jes...@cisco.commailto:jes...@cisco.com

On Dec 17, 2013, at 6:38 PM, David Grant 
dgr...@thecommonlot.commailto:dgr...@thecommonlot.com wrote:

I can barely understand the home page. I don't know if I use Unix (I'm using an 
iMac).

I was told that ClamAV was the best virus protection, so I signed up … or did I 
download?

In any case, every day at the same time my work is interrupted by a report from 
Console.

I think the upshot is that everything is OK.

QUESTIONS:
1) Is there a really simple explanation of ClamAV somewhere?
2) Can I stop that daily interruption of Console, but still keep the virus 
protection?

Thank you.
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml

Re: [clamav-users] lost

[Al Varnell]

On Tue, Dec 17, 2013 at 03:38 PM, David Grant wrote:
 I can barely understand the home page. I don't know if I use Unix (I'm using 
 an iMac).
 
 I was told that ClamAV was the best virus protection, so I signed up … or did 
 I download?
 
 In any case, every day at the same time my work is interrupted by a report 
 from Console.
 
 I think the upshot is that everything is OK.
 
 QUESTIONS: 
   1) Is there a really simple explanation of ClamAV somewhere?
   2) Can I stop that daily interruption of Console, but still keep the 
 virus protection?

Sounds like you are in the wrong place.  I suspect you downloaded ClamXav which 
uses the ClamAV® scan engine.

Support for ClamXav can be found here 
http://www.clamxav.com/BB/viewforum.php?f=1.

Also, didn't I just answer this question for you in the Apple Support 
Communities forum?


-Al-
-- 
Al Varnell
Mountain View, CA




___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml