Re: [clamav-users] Blocked Access to ClamAV Database

2024-05-17 Thread Steve Basford via clamav-users
On 17 May 2024 13:26:27 Julia Korhonen via clamav-users wrote: Upon running command curl http://database.clamav.net, I received a message indicating that my access was blocked. However, upon reviewing my network settings and conducting diagnostic tests, I could not find any explicit

Re: [clamav-users] Failed to open file. ERROR.

2024-04-30 Thread Steve Basford via clamav-users
On 30 April 2024 10:42:39 Nathan Millard via clamav-users wrote: Hi, when I am scanning using clamav on windows I am getting lots of errors staying “Failed to open file. ERROR” Does anyone know how to solve this? Seems like it would be a permissions problem? Hi. While there is a windows

Re: [clamav-users] Announcing Fangfrisch release 1.9.0

2024-03-08 Thread Steve Basford via clamav-users
On 8 March 2024 13:20:53 Ralph Seichter via clamav-users wrote: I am also happy to report that the new HTTP mirror for SaneSecurity signature files is chugging along nicely. Over the last days, I have counted 4672 unique client connections accessing these files, with a slow but steady

Re: [clamav-users] ClamAV 1.3.0 release candidate published

2023-12-15 Thread Steve Basford via clamav-users
On 15 December 2023 16:49:49 "Micah Snyder \(micasnyd\) via clamav-users" wrote Fixed an issue decrypting some PDF's with an empty password. Hi Micah, Just tested and it's decoding URLs now :) I also wanted to say a huge Thank You for all the programming bug fixes/new features and support

Re: [clamav-users] since clamav version 1.2.0, false/positive pihole links?

2023-08-31 Thread Steve Basford via clamav-users
On 31 August 2023 09:30:46 energynorman--- via clamav-users wrote: Dear clamav Teams, we are using some Debian 12 servers with PiHole Systems: OS: Debian GNU/Linux 12 (bookworm) aarch64 Host: Raspberry Pi 4 Model B Rev 1.4 Kernel: 6.1.21-v8+ Uptime: 4 hours Packages: 2830 (dpkg), 14

Re: [clamav-users] since clamav version 1.2.0, false/positive pihole links?

2023-08-31 Thread Steve Basford via clamav-users
On 31 August 2023 09:33:24 energynorman--- via clamav-users wrote: ..additional, also these were found now by the version 1.2.0 (whitelisting?): --- SCAN SUMMARY --- Known viruses: 8862874 Engine version: 1.2.0 Scanned directories: 91 Scanned files: 416 Infected files: 0

[clamav-users] Unix.Malware.Kaiji-10003916-0

2023-06-07 Thread Steve Basford via clamav-users
Multi False Positive reports... Just a heads up. Cheers, Steve Sanesecurity.com Twitter: @sanesecurity ___ Manage your clamav-users mailing list subscription / unsubscribe: https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a

Re: [clamav-users] ClamAV 1.0.1

2023-05-24 Thread Steve Basford via clamav-users
On 24 May 2023 21:57:33 Steve Basford via clamav-users wrote: Could you do a ls of the clamav database folder... So I can see what databases you are using Sorry all should have been of list... Duh ;) Cheers, Steve Twitter: @sanesecurity ___ Manage

Re: [clamav-users] ClamAV 1.0.1

2023-05-24 Thread Steve Basford via clamav-users
2 2023 -> ERROR: accept() failed: Too many open files Mon May 22 13:45:02 2023 -> ERROR: accept() failed: Too many open files Mon May 22 13:45:02 2023 -> ERROR: accept() failed: Too many open files Mon May 22 13:45:02 2023 -> ERROR: accept() failed: Too many open files Mon May 22 13:

Re: [clamav-users] ClamAV 1.0.1

2023-05-24 Thread Steve Basford via clamav-users
On 24 May 2023 18:52:04 Paul Netpresto wrote: Hi I have found that 1.0.1 and 0.103.8 both behave badly if they find a malformed db. Agreed freshclam checks out the clamav/cisco db's. I have yet to determine what unofficial db caused the failure. They should all have been verified before

Re: [clamav-users] ClamAV 1.0.1

2023-05-24 Thread Steve Basford via clamav-users
On 24 May 2023 18:52:04 Paul Netpresto wrote: Hi I have found that 1.0.1 and 0.103.8 both behave badly if they find a malformed db. Agreed freshclam checks out the clamav/cisco db's. I have yet to determine what unofficial db caused the failure. They should all have been verified before

Re: [clamav-users] ClamAV 1.0.1

2023-05-24 Thread Steve Basford via clamav-users
On 23 May 2023 21:59:22 Paul Netpresto wrote: Hello What should the behaviour of a running clamd be when it comes across a malformed database during a signature-reload. Clamd.conf has setting "ConcurrentDatabaseReload no" Regards Paul Hi Paul, Is there is a malformed database freshclam

Re: [clamav-users] Fwd: Problem with current databases

2023-05-04 Thread Steve Basford via clamav-users
On 4 May 2023 14:04:26 newcomer01 via clamav-users wrote: Hi there, do we have currently a problem with the database files? my cronjob, stops without any error or something on scanning files and in case did not delete his tmp files. What version of clamav? What linux version? Memory/disk

Re: [clamav-users] Be wary of emails with attachments targeting clamav-users list members

2023-03-22 Thread Steve Basford via clamav-users
The attached file was some small HTML file containing malicious obfuscated javascript. Just to note that at my workplace 1 user received a similar email, using older email threads to make it look convincing and a with a single html attachment. 0/55 av's so far 6 hours after submitting..

Re: [clamav-users] clamscan exclude-dir on Windows

2023-01-28 Thread Steve Basford via clamav-users
On 28 January 2023 16:07:04 Richard Rosner via clamav-users wrote: Very interesting to know. Sadly that doesn't help. I added --exclude-dir="C:\\PROGRA~2\\" --exclude-dir="C:\\PROGRA~1\\" and tried running in both PowerShell and CMD, no success, it always ends up scanning Program Files.

Re: [clamav-users] Mail contains virus ? MBL_162040584.UNOFFICIAL and some errors.

2022-07-22 Thread Steve Basford via clamav-users
On 22 July 2022 10:15:27 Thomas Barth via clamav-users wrote: Hello, I use ClamAV unofficial signatures and it seems that I get a false positiv, I m not sure. A known person with a gmail-address and MS Outlook 16.0 X-Mailer tries to send me a mail with a link to google docs (Google Sheets)

Re: [clamav-users] MS Word Follina - CVE-2022-30190

2022-06-09 Thread Steve Basford via clamav-users
On 9 June 2022 13:17:29 Vangelis Katsikaros via clamav-users wrote: Hi I am not a security person so I apologize if the question sounds stupid. I'd like to ask if there is a signature in the clamav DB to recognise Microsoft word documents affected by the "Follina" - CVE-2022-30190 remote

Re: [clamav-users] Attachments

2018-05-15 Thread Steve Basford via clamav-users
--- Begin Message --- On Tue, May 15, 2018 12:57 pm, Todd Aiken via clamav-users wrote: > ___ > clamav-users mailing list clamav-users@lists.clamav.net > http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users > > > > Help us build a comprehensive