Re: [clamav-users] is clamav.securiteinfo.com no more?

2018-12-04 Thread Paul Kosinski
I agree. I don't like undecipherable short URLs either: you can't tell what they lead to. (And a preview feature just slows you down.) On Tue, 4 Dec 2018 21:38:14 -0800 Al Varnell wrote: > Not official, but it's a pretty standard response from those of us in > the computer security business

Re: [clamav-users] is clamav.securiteinfo.com no more?

2018-12-04 Thread Dennis Peterson
All the "tiny" url hosts are blacklisted here because I don't need the grief they disguise. But he did answer my question. I haven't subscribed to those BL's in a very long time and was surprised to see them pop up in my log file. dp On 12/4/18 9:38 PM, Al Varnell wrote: Not official, but

Re: [clamav-users] is clamav.securiteinfo.com no more?

2018-12-04 Thread Dennis Peterson
I think it must have gotten re-activated when I upgraded ClamAV to 0.100.2 recently. I haven't seen those log entries until today. Thanks. dp On 12/4/18 7:17 PM, Arnaud Jacques wrote: Hello Dennis, Yes it is dead since years. It has been replaced by this : http://ow.ly/LqfdL Le 05/12/2018

Re: [clamav-users] is clamav.securiteinfo.com no more?

2018-12-04 Thread Arnaud Jacques
Thank you for your answer Al. I am not offended, I'm just asking question to be sure to understand. Have a good day ! Le 05/12/2018 à 06:38, Al Varnell a écrit : Not official, but it's a pretty standard response from those of us in the computer security business when we see it. I'm surprised

Re: [clamav-users] is clamav.securiteinfo.com no more?

2018-12-04 Thread Al Varnell
Not official, but it's a pretty standard response from those of us in the computer security business when we see it. I'm surprised that you haven't observed it before, but I posted it publicly as a PSA to anybody else who might be subscribed to this list. Sorry if you were offended by my doing

Re: [clamav-users] is clamav.securiteinfo.com no more?

2018-12-04 Thread Arnaud Jacques
Al, Did you speak the official voice of Cisco/Sourcefire/ClamAV ? Is it official rule of this mailing list ? If not, then your personal point of view could be sent directly to my email. Thank you, Al. Anyway I don't understand why securiteinfo.com related questions are not sent to

Re: [clamav-users] is clamav.securiteinfo.com no more?

2018-12-04 Thread Al Varnell
Arnaud, Please don't use url shortness here, especially one that apparently doesn't allow previews of the actual url I'm being redirected to. Way too many phishing attempts use such tools. Sent from my iPad -Al- On Dec 4, 2018, at 19:17, Arnaud Jacques wrote: > Hello Dennis, > > Yes it is

Re: [clamav-users] is clamav.securiteinfo.com no more?

2018-12-04 Thread Arnaud Jacques
Hello Dennis, Yes it is dead since years. It has been replaced by this : http://ow.ly/LqfdL Le 05/12/2018 à 04:09, Dennis Peterson a écrit : I don't see a dns response for that site and logs show no recent connection. dp -- Cordialement / Best regards, Arnaud Jacques Gérant de

[clamav-users] is clamav.securiteinfo.com no more?

2018-12-04 Thread Dennis Peterson
I don't see a dns response for that site and logs show no recent connection. dp ___ clamav-users mailing list clamav-users@lists.clamav.net http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide:

Re: [clamav-users] .exe installer question (Win32)

2018-12-04 Thread Brian Fluet
Thank you Micah. I'll uninstall and then start using the portable version files. This won't be a problem. I used extracted files from the .msi for years only recently doing an actual install (don't remember why though). Brian ___ clamav-users

Re: [clamav-users] Disable MaxFileSize and MaxFileSize to scan the whole system

2018-12-04 Thread Ángel
On 2018-12-03 at 09:58 -0800, Dennis Peterson wrote: > If it is a big concern you can use the split command to create > "splits" of the suspect file. Split accepts various size arguments > (bytes, lines...) and will create as many files as it takes to split > the entire large file. These can be

Re: [clamav-users] .exe installer question (Win32)

2018-12-04 Thread Micah Snyder (micasnyd)
I haven't done any testing to know what happens if you try to install overtop of an existing installation from a previous version. I am not optimistic that it would be a good experience. I always uninstall first, then install the newer version. The new .exe installer can install to a

[clamav-users] .exe installer question (Win32)

2018-12-04 Thread Brian Fluet
Will the new .exe installer automatically update a ClamAV for Win32 that is installed in a non-standard location (not in \Program files)? Brian ___ clamav-users mailing list clamav-users@lists.clamav.net

Re: [clamav-users] Can ClamAV detect LKM rootkits?

2018-12-04 Thread Micah Snyder (micasnyd)
Hi Zhuang, You already mentioned kernel and application types of rootkits, so you probably already understand this - but I wanted to chime in since you specifically mentioned different types of rootkits. The TL;DR is that ClamAV is not a rootkit detector, and does not inspect and scan the

Re: [clamav-users] freshclam. Service exited with abnormal code: 1

2018-12-04 Thread Robert Chalmers
Of course. Sorry. I should know that. It’s time I went home … > On 4 Dec 2018, at 15:25, Joel Esler (jesler) wrote: > > You'd have to talk to the maintainer for homebrew for ClamAV. To my > knowledge, we don't control that. > >> On Dec 4, 2018, at 10:23 AM, Robert Chalmers >

Re: [clamav-users] freshclam. Service exited with abnormal code: 1

2018-12-04 Thread Joel Esler (jesler)
You'd have to talk to the maintainer for homebrew for ClamAV. To my knowledge, we don't control that. > On Dec 4, 2018, at 10:23 AM, Robert Chalmers wrote: > > @Mica Snyder, > > Is there any chance that this update will make it to the Homebrew repo soon? > It’s not causing me any problems

Re: [clamav-users] freshclam. Service exited with abnormal code: 1

2018-12-04 Thread Robert Chalmers
@Mica Snyder, Is there any chance that this update will make it to the Homebrew repo soon? It’s not causing me any problems here, but the Error 1 in the log is getting annoying :-) Cheers Robert > On 7 Nov 2018, at 21:34, Micah Snyder (micasnyd) wrote: > > The change to actually pass