Re: [clamav-users] Are signatures for Windows only?

2019-03-25 Thread Joel Esler (jesler) via clamav-users
That’s super interesting. I’d be interested in what the 6500 signatures were. Just for a real world “what are you seeing” conversation. Sent from my  iPad > On Mar 25, 2019, at 18:07, Graeme Fowler via clamav-users > wrote: > > *decloaks* > > We (Loughborough University) use ClamAV on our

Re: [clamav-users] Are signatures for Windows only?

2019-03-25 Thread Graeme Fowler via clamav-users
*decloaks* We (Loughborough University) use ClamAV on our inbound and outbound mail servers, in front of and after Office 365 mailboxes. It sits in the middle of a fairly complex set of moving parts - another AV product, DNS blacklists, file hash checks, local 'reputation', several anti-spam to

Re: [clamav-users] Are signatures for Windows only?

2019-03-25 Thread J.R. via clamav-users
> People have been doing that kind of thing for years, I'm not sure how > much it's increasing. Most of the time it seems to me they don't know > why they're doing it nor even, if there is something in there to find, > how likely it is that a ClamAV scan will find it. I know people have been scan

Re: [clamav-users] Are signatures for Windows only?

2019-03-25 Thread SCOTT PACKARD via clamav-users
We use it to scan entire Unix and Linux hosts. Regards, Scott > -Original Message- > From: clamav-users On Behalf Of Joel > Esler (jesler) via clamav-users > Sent: Monday, March 25, 2019 12:37 PM > To: ClamAV users ML > Cc: Joel Esler (jesler) ; G.W. Haywood > > Subject: [External] R

Re: [clamav-users] Are signatures for Windows only?

2019-03-25 Thread Joel Esler (jesler) via clamav-users
Actually, from what we understand, ClamAV is mostly used to scan email. Sent from my  iPhone > On Mar 25, 2019, at 12:22, G.W. Haywood via clamav-users > wrote: > > Although we share files with Windows platforms we really > only use ClamAV to scan mail. I guess we're as untypical of a ClamA

Re: [clamav-users] Are signatures for Windows only?

2019-03-25 Thread G.W. Haywood via clamav-users
Hi there, On Mon, 25 Mar 2019, J.R. wrote: ... I've seen an increasing amount of people posting about their non-windows platforms that are scanning their *entire* system ... People have been doing that kind of thing for years, I'm not sure how much it's increasing. Most of the time it seems

Re: [clamav-users] Slow reload

2019-03-25 Thread Alessandro Vesely via clamav-users
On Fri 22/Mar/2019 16:14:28 +0100 Bowie Bailey wrote: > On 3/22/2019 10:54 AM, Bowie Bailey wrote: >> >> The only problem I have found is that >> since my databases take so long to load, avfilter_sig times out when >> reloading the >> virus definitions.  Is there a way to increase the timeout for

Re: [clamav-users] Scan very slow

2019-03-25 Thread Micah Snyder (micasnyd) via clamav-users
Hi Mark, all: I’m disappointed to hear that it is still slow for you. We found that the target-type of signatures used for PhishTank.Phishing signatures were causing a significant slowdown. We have dropped them as of this past Saturday ( https://lists.gt.net/clamav/virusdb/75279 ) and in the

Re: [clamav-users] clamav-0.101.1 - WARNING: [LibClamAV] cli_cvdload: Corrupted CVD header. ERROR: Verification: Malformed database

2019-03-25 Thread Micah Snyder (micasnyd) via clamav-users
Vladislav, The should have worked if the new version of zlib has been installed to /usr/local. On a side note, have you considered upgrading to a new version of Linux? Centos5 has passed End-of-Life. Micah From: clamav-users on behalf of Владислав Гришин Reply-To: ClamAV users ML Date: Fr

Re: [clamav-users] Scan very slow

2019-03-25 Thread Mark Allan via clamav-users
Cheers Steve, In the interest of completeness, here's the scan from today (TXT from DNS: 0.101.1:58:25399:1553509741:1:63:48528:328) showing a marked improvement in scan time, although at 6m 7s it's still almost twice what it used to be. Mark On Mon, 25 Mar 2019 at 12:56, Steve Basford wrote:

Re: [clamav-users] Are signatures for Windows only?

2019-03-25 Thread Joel Esler (jesler) via clamav-users
Our signatures cover all platforms. Sorry, can’t type on watch. :) Sent from my  iPad > On Mar 25, 2019, at 08:20, Joel Esler (jesler) via clamav-users > wrote: > > Our signature is cover all platforms. > > Sent from my Apple Watch > >> On Mar 25, 2019, at 08:13, J.R. via clamav-users >>

Re: [clamav-users] Scan very slow

2019-03-25 Thread Steve Basford
On 2019-03-25 10:52, Mark Allan via clamav-users wrote: Hi all, te. Hopefully this helps someone to narrow things down a bit. Mark 18/3/19 10m 49s TXT from DNS: 0.101.1:58:25392:1552904941:1:63:48507:328 *** Here's the changes for the above update: https://lists.gt.net/clamav/virusd

Re: [clamav-users] Are signatures for Windows only?

2019-03-25 Thread Joel Esler (jesler) via clamav-users
Our signature is cover all platforms. Sent from my Apple Watch On Mar 25, 2019, at 08:13, J.R. via clamav-users wrote: > I keep thinking about this from time to time, but keep forgetting to > post before I get sidetracked doing something else... > > Are the ClamAV default signature files gear

[clamav-users] Are signatures for Windows only?

2019-03-25 Thread J.R. via clamav-users
I keep thinking about this from time to time, but keep forgetting to post before I get sidetracked doing something else... Are the ClamAV default signature files geared towards Windows executables / malware / documents / (generic spam)? Or do they cover other platforms as well? Reason I'm asking,

Re: [clamav-users] Scan very slow

2019-03-25 Thread Mark Allan via clamav-users
Hi all, We've been experiencing this slowdown too. We run every DB update through an extra FP test against a number of recent Mac OS installs (OS X 10.6 - 10.14, as well as some well-known 3rd party apps) just to weed out any potentially overzealous signatures. On the new Mac Minis this FP test u