Re: [clamav-users] freshclam can't download updates due to SSL issue

2020-12-23 Thread G.W. Haywood via clamav-users
Hi there, On Wed, 23 Dec 2020, Chris via clamav-users wrote: I'm using ClamAV version 0.103.0 and recently whenever I try to update ClamAV with freshclam, for some reason it ... WARNING: Message: SSL peer certificate or SSH remote key was not OK Is there a firewall or a proxy or something bet

Re: [clamav-users] freshclam can't download updates due to SSL issue

2020-12-23 Thread Joel Esler (jesler) via clamav-users
Nothing has changed on our end. Sent from my  iPhone > On Dec 23, 2020, at 13:57, Chris via clamav-users > wrote: > >  > Hello > > I'm using ClamAV version 0.103.0 and recently whenever I try to update ClamAV > with freshclam, for some reason it spits out this error: > > WARNING: Downloa

Re: [clamav-users] Question about Urlhaus.Malware.452652-9766253-0

2020-12-23 Thread Kris Deugau
Orion Poplawski wrote: Can anyone give me some details about the Urlhaus.Malware.452652-9766253-0 signature? We're seeing following URLs trigger it: https://curben.gitlab.io/malware-filter/urlhaus-filter-online.txt https://raw.githubusercontent.com/curbengh/urlhaus-filter/master/urlhaus-filter-

[clamav-users] freshclam can't download updates due to SSL issue

2020-12-23 Thread Chris via clamav-users
Hello I'm using ClamAV version 0.103.0 and recently whenever I try to update ClamAV with freshclam, for some reason it spits out this error: WARNING: Download failed (60) WARNING:  Message: SSL peer certificate or SSH remote key was not OK WARNING: getpatch: Can't download daily-26002.cdiff fro

Re: [clamav-users] Question about Urlhaus.Malware.452652-9766253-0

2020-12-23 Thread eric-list
Here's the signature decoded: # sigtool --find-sig Urlhaus.Malware.452652-9766253-0 | sigtool --decode-sig VIRUS NAME: Urlhaus.Malware.452652-9766253-0 FUNCTIONALITY LEVEL: >=48 TARGET TYPE: HTML OFFSET: * DECODED SIGNATURE: aboveandbelow.com.au/cgi-bin/http:/sites/b4q7eajmmm2moxgkq/ Sincerely, E

[clamav-users] Question about Urlhaus.Malware.452652-9766253-0

2020-12-23 Thread Orion Poplawski
Can anyone give me some details about the Urlhaus.Malware.452652-9766253-0 signature? We're seeing following URLs trigger it: https://curben.gitlab.io/malware-filter/urlhaus-filter-online.txt https://raw.githubusercontent.com/curbengh/urlhaus-filter/master/urlhaus-filter-online.txt https://gitcdn

Re: [clamav-users] [External] xlsm files

2020-12-23 Thread Kevin A. McGrail via clamav-users
On 12/22/2020 6:08 PM, Joe Acquisto-j4 wrote: Joe, you might look at enabling the OLEVBMacro plugin and adding the KAM Ruleset,https://mcgrail.com/template/kam.cf_channel, which has rules to help combat these type of spam emails. Regards, KAM Kevin, I hesitate to ask here, but, you refer to SA