Re: [clamav-users] ClamAV to detect exploits for the Equation Editor vulnerability in DOC files

2021-01-27 Thread Micah Snyder (micasnyd) via clamav-users
Hi Chamindra, Generally speaking we'd like it if you would upload malware which ClamAV fails to alert on by using the `clamsubmit` tool, or via this webpage https://www.clamav.net/reports/malware These feed into an automated system that will attempt to determine if it thinks they're malicious

Re: [clamav-users] How to exclude specific files from clamdscan

2021-01-27 Thread G.W. Haywood via clamav-users
Hi there, On Wed, 27 Jan 2021, Michael Kyriacou via clamav-users wrote: Hello, thank you for the response. I tried to reinstall clamav after I saw that there was a new update, but when I install it, it installs version 0.102.4. One of the problems with using packages is that they tend to be

Re: [clamav-users] How to exclude specific files from clamdscan

2021-01-27 Thread Andrew C Aitchison via clamav-users
On Wed, 27 Jan 2021, G.W. Haywood via clamav-users wrote: Hi there, On Wed, 27 Jan 2021, Michael Kyriacou via clamav-users wrote: > ... I am using clamav version 0.102.4, on Ubuntu 20.04. You really should be upgrading to the latest version. Sadly, 0.102.4 *is* the latest packaged

Re: [clamav-users] How to exclude specific files from clamdscan

2021-01-27 Thread Michael Kyriacou via clamav-users
Hello, thank you for the response. I tried to reinstall clamav after I saw that there was a new update, but when I install it, it installs version 0.102.4. Could you give me an example of an ‘ExcludePath’ that could do the following: Exclude a file in /path/to/file Exclude a file in

Re: [clamav-users] How to exclude specific files from clamdscan

2021-01-27 Thread G.W. Haywood via clamav-users
Hi there, On Wed, 27 Jan 2021, Michael Kyriacou via clamav-users wrote: ... I am using clamav version 0.102.4, on Ubuntu 20.04. You really should be upgrading to the latest version. I want clamd to exclude all pagefile.sys files it finds when scanning mounted filesystems. Currently, it

Re: [clamav-users] Problem with private mirror and cld, inc files

2021-01-27 Thread Kris Deugau
Vangelis Katsikaros via clamav-users wrote: Hi Joel, thanks for the quick response. We already download once every hour (the default ubuntu 18.04 behavior). However, we are using auto scaling and we might be running a large number of EC2 instances (a few hundreds), that could try to download

Re: [clamav-users] Problem with private mirror and cld, inc files

2021-01-27 Thread Joel Esler (jesler) via clamav-users
As long as you are using fresh clam, which handles incremental delta updates, and the instances are running correctly (not stuck in a loop or something silly), the best place to get updates is from database.clamav.net > On Jan 27, 2021, at 5:45 AM, Vangelis

[clamav-users] How to exclude specific files from clamdscan

2021-01-27 Thread Michael Kyriacou via clamav-users
Hello again! I am using clamav version 0.102.4, on Ubuntu 20.04. I want clamd to exclude all pagefile.sys files it finds when scanning mounted filesystems. Currently, it scans them. Is there anyway to do this? I know on the source version you can add “Exclude Path”, but I’m not sure if it works

Re: [clamav-users] Problem with private mirror and cld, inc files

2021-01-27 Thread Vangelis Katsikaros via clamav-users
Thanks for the actions Joel, my IPs are now unblocked. I'd be interested to continue the discussion on a) how to find the main & daily .inc and .cld files b) why in ubuntu 18.04 there is a systemd condition for the clamav-daemon to run, but the files are not available for download I am afraid

[clamav-users] [RE] clamd not reading directory/file, when permissions are ok?

2021-01-27 Thread Paul Claridge
Just to help anyone who may stumble across this as I did the culprit was apparmor (ubunto 20.04LTS). No I had never heard of it either! Sigh ___ clamav-users mailing list clamav-users@lists.clamav.net