Re: [clamav-users] ClamAV Update Authenticity?

2015-08-11 Thread Steve Basford
On 11 August 2015 21:31:40 Benny Pedersen m...@junc.eu wrote: there is download scripts that automate this, ironical http://sanesecurity.com/ is a wordpress site that is infacted with mailware popups :( Everything is kept up-to-date wordpress and plugins wise but think I've identified the

[clamav-users] ClamAV Update Authenticity?

2015-08-11 Thread Thomas Peterson
Is there a method to authenticate ClamAV updates? I see that GnuPG can be used to verify the signature of the ClamAV installation, what about the virus database updates. I use ClamAV completely offline and do not have the ability to connect directly to any network for updates. I use a

Re: [clamav-users] ClamAV Update Authenticity?

2015-08-11 Thread Benny Pedersen
Thomas Peterson skrev den 2015-08-11 21:59: Is there a method to authenticate ClamAV updates? I see that GnuPG can be used to verify the signature of the ClamAV installation, what about the virus database updates. I use ClamAV completely offline and do not have the ability to connect directly

[clamav-users] Is there a PUA warnings Database for ClamScan - Looking up PUA for Webmin

2015-08-11 Thread shane
Possibly a noob question but I'm a noob to this forum :) I know that scanning with --detect-oua in the command line is going to throw a few false positives. However is there a place that common false positives can be either registered or looked up? I've got an Ubuntu server with webmin