Re: [clamav-users] db.at.clamav.net

2016-12-01 Thread Joel Esler (jesler)
Thanks. -- Joel Esler | Talos: Manager | jes...@cisco.com On Dec 1, 2016, at 6:52 AM, Al Varnell > wrote: Confirming no response to Ping, Traceroute or Port Scan. Lookup 81.223.20.171 ->

Re: [clamav-users] FP Pdf.Exploit.CVE_2016_1091-2

2016-12-01 Thread Joel Esler (jesler)
Thanks for the feedback Jeff. -- Joel Esler | Talos: Manager | jes...@cisco.com On Nov 30, 2016, at 6:16 PM, Jeff Dyke > wrote: Just a user or not Al, thanks for the quick update!! Also thank you to the folks that

Re: [clamav-users] db.at.clamav.net

2016-12-01 Thread Al Varnell
Confirming no response to Ping, Traceroute or Port Scan. Lookup 81.223.20.171 -> clamav.inode.at whois 81.223.20.171: > % Abuse contact for '81.223.20.160 - 81.223.20.175' is 'ab...@upc.at' > > inetnum:81.223.20.160 - 81.223.20.175 > netname:SIGNA-Informationstechnologie >

Re: [clamav-users] Whitelist based on sign *and* filename?

2016-12-01 Thread Mathieu D.
Le lundi 28 novembre 2016, 10:28:03 CET Paul Kosinski a écrit : > Of course, if anybody is able to find out what the magic filename is, > they could mount a targeted attack. Of course, but thanks for the warning. > How are the PDFs generated? Would it be possible to attach a > cryptographic

Re: [clamav-users] Whitelist based on sign *and* filename?

2016-12-01 Thread Mathieu D.
Le lundi 28 novembre 2016, 14:28:11 CET Steve Basford a écrit : > I guess this *might* be an option. Thanks for your reply and this idea. > 1. Find something common in your pdf you want to "whitelist", say "Your > company name or department", convert this to hex. Let's say "My Safe PDF" →

[clamav-users] db.at.clamav.net

2016-12-01 Thread Walter H.
Hello, please remove 81.223.20.171, as this host doesn't respond ... Thanks, Walter ___ clamav-users mailing list clamav-users@lists.clamav.net http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: