Re: [clamav-users] Heueristics.Structured.CreditCardNumber ???

On February 24, 2023 2:53:31 PM EST, Andrew C Aitchison wrote: >On Fri, 24 Feb 2023, musc via clamav-users wrote: > >> This is another frequent hit I get doing a clamdscan: >> Heueristics.Structured.CreditCardNumber >> >> I've read of a scam which prompts people to apply for a credit card, >>

Re: [clamav-users] Probably banned IP

Hi Łukasz, Looking at https://www.maxmind.com/en/geoip-demo, MaxMind seems to think your IP is in Poland. I looked checked in our (Cisco's) own regional address lists used to comply with sanctions. I see I don't see 91.220.164.0/24 block in the list. I do see that we block 91.220.163.0/24

Re: [clamav-users] Probably banned IP

oh and by the way: if you are using an russian ip, it can also be blocked and will not be unblocked. this you can find on a discussion on talos github Von / From: Clamav User Mailinglist An / To: Newcomer01 CC / CC: Łukasz

Re: [clamav-users] Probably banned IP

have you read this? https://docs.clamav.net/faq/faq-cvd.html?highlight=403#i-am-getting-error-codes-such-as-403-429-etc-when-freshclam-or-other-update-system-attempts-to-download-updates Von / From: Clamav User Mailinglist An / To: Newcomer01

[clamav-users] Heueristics.Structured.CreditCardNumber ???

This is another frequent hit I get doing a clamdscan: Heueristics.Structured.CreditCardNumber I've read of a scam which prompts people to apply for a credit card, or says falsely that a person has already a credit card... responding to either leads to a scam. Are eliminating these two scams

[clamav-users] clamdscan with --multiscan and --allmatch together

It appears that clamdscan with --multiscan and --allmatch together does not report multiple matches. Running without --multiscan reports all matches and then subsequent runs with both options together continues to report all matches until next restart. Example: # clamdscan test-file.zip

[clamav-users] Probably banned IP

Hi, some time ago I run freshclam on a lot of machines that are under one public IP, therefore I generated a lot of requests and my company IP was probably blocked. Now I created my own mirror of cvd, but it is on the same IP address and it is not updating daily.cvd. I get: cvdupdate-1.0.2 ERROR