Re: [clamav-users] Trouble getting cvd files from private local mirror

2017-12-11 Thread John Kennedy
Thanks for the suggestion. Unfortunately in this case, that is not it. Not exactly sure why it was in the original that I copied - I am better with Apache than nginx - but I am leaving it out anyway. John Kennedy (_8(|) If I'm a sarcastic asshole when I talk to you it's either because I really

Re: [clamav-users] Cannot send virus sample through https://www.clamav.net/reports/malware

2017-12-11 Thread Matteo Italia
Yay, it worked! Thank you! Il 11/12/2017 15:08, Joel Esler (jesler) ha scritto: > I’ve adjusted some settings. Please try again. > > -- > Joel Esler | Talos: Manager | jes...@cisco.com > > > > > > > On Dec 11, 2017, at 9:02 AM, Matteo Italia >

Re: [clamav-users] Cannot send virus sample through https://www.clamav.net/reports/malware

2017-12-11 Thread Joel Esler (jesler)
I’ve adjusted some settings. Please try again. -- Joel Esler | Talos: Manager | jes...@cisco.com On Dec 11, 2017, at 9:02 AM, Matteo Italia > wrote: Hello Joel, I receive a page containing this information: Sorry,

Re: [clamav-users] Cannot send virus sample through https://www.clamav.net/reports/malware

2017-12-11 Thread Matteo Italia
Ah, the attachment in this case was an encrypted .7z containing the virus sample; as said above, I tried with a .tar.gz, a .tar.bz2 and the plain .dll and it didn't change a thing. The text is essentially the same of my second email (the one containing the virustotal links). Il 11/12/2017 15:02,

Re: [clamav-users] Cannot send virus sample through https://www.clamav.net/reports/malware

2017-12-11 Thread Matteo Italia
Hello Joel, I receive a page containing this information: Sorry, you have been blocked You are unable to access clamav.net Why have I been blocked? This website is using a security service to protect itself from online attacks. The action you just performed triggered the

Re: [clamav-users] Cannot send virus sample through https://www.clamav.net/reports/malware

2017-12-11 Thread Joel Esler (jesler)
What is the error you are receiving from Cloudflare? I need some details. -- Joel Esler | Talos: Manager | jes...@cisco.com On Dec 11, 2017, at 3:48 AM, Matteo Italia > wrote: Hello, I'm trying to submit a virus

Re: [clamav-users] Local Mirror error "Can't download daily.cvd"

2017-12-11 Thread Reindl Harald
Am 11.12.2017 um 12:50 schrieb Al Varnell: Did you ever read the documentation on Private Local Mirrors ? It would appear you are trying to use solution number "2" and that you haven't added the following line to freshclam.conf on the

Re: [clamav-users] Local Mirror error "Can't download daily.cvd"

2017-12-11 Thread Al Varnell
Did you ever read the documentation on Private Local Mirrors ? It would appear you are trying to use solution number "2" and that you haven't added the following line to freshclam.conf on the mirror: "ScriptedUpdates no"' -Al- On Mon,

Re: [clamav-users] Local Mirror error "Can't download daily.cvd"

2017-12-11 Thread Reindl Harald
Am 11.12.2017 um 12:07 schrieb Emanuel: i solved my problem, i adding in to the freshclam config from client server, this rules: HTTPProxyServer 168.181.185.235 HTTPProxyPort 80 but into the client server i see this error: ClamAV update process started at Mon Dec 11 08:05:22 2017

Re: [clamav-users] Local Mirror error "Can't download daily.cvd"

2017-12-11 Thread Emanuel
i solved my problem, i adding in to the freshclam config from client server, this rules: HTTPProxyServer 168.181.185.235 HTTPProxyPort 80 but into the client server i see this error: ClamAV update process started at Mon Dec 11 08:05:22 2017 Connecting via 168.181.185.235 main.cld is up to

Re: [clamav-users] Cannot send virus sample through https://www.clamav.net/reports/malware

2017-12-11 Thread Matteo Italia
Hi Al, thank you for your reply, there it is. https://www.virustotal.com/#/file/5005acda657bc9b612ce4b7a2369856c737f39855d4923c03289915acdc17075/detection and another sample (looking at it in IDA, it seems that it adds random garbage at the end)

Re: [clamav-users] Cannot send virus sample through https://www.clamav.net/reports/malware

2017-12-11 Thread Al Varnell
While you are waiting for an answer, upload it to VirusTotal and return here with a link to the analysis , they can pick it up from there if necessary. -Al- On Mon, Dec 11, 2017 at 12:48 AM, Matteo Italia wrote: > Hello, > > I'm trying to submit a

[clamav-users] Cannot send virus sample through https://www.clamav.net/reports/malware

2017-12-11 Thread Matteo Italia
Hello, I'm trying to submit a virus sample through the web interface (https://www.clamav.net/reports/malware), but it keeps getting refused by CloudFlare. I tried several variations of the message text, putting the virus sample in various archives (not archived, .tar.gz, .7z with password), but