[Clamav-users] PUA.HTML.Infected.WebPage-2 too broad

2010-07-11 Thread Al Varnell
almost 1300 false alarms on my machine. Most of them are in the cache files of a Mac application called AppFresh. I would think a less common signature is needed here. The entry in the daily is: PUA.HTML.Infected.WebPage-2:3:*:3c2f626f64793e3c2f68746d6c3e3c736372697074 -Al- -- Al Varnell

Re: [Clamav-users] Trojan was not detected.

2010-07-28 Thread Al Varnell
Submit the file here http://www.clamav.net/lang/en/sendvirus Sent from my iPad -Al- -- Al Varnell On Jul 27, 2010, at 10:44 PM, ANANT S ATHAVALE a...@isac.gov.in wrote: We have received one mail with attachment 'Airforce_Base.rar' which actually contains one .scr file (windows executable

[Clamav-users] Suggestion

2010-09-03 Thread Al Varnell
Add a link to your home page database section for bytecode.cvd. Sent from my iPad -Al- -- Al Varnell ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

[Clamav-users] My Previous Suggestion

2010-09-12 Thread Al Varnell
Thanks for posting the other two databases on the home page. I did notice a couple of minor discrepancies, however. - The total signature count only includes main and daily. - The bytecode version number is the same as the daily, which is not correct. Sent from my iPad -Al- -- Al Varnell

[Clamav-users] Number of Signatures

2010-09-14 Thread Al Varnell
have PUA enabled (which currently adds 1187) and I have tried enabling other options, but none of them make any difference. -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http

Re: [Clamav-users] Again - clamav.whitelist file

2010-09-16 Thread Al Varnell
databases To whitelist a specific file use the MD5 signature format and place it inside a database file with the extension of .fp. To whitelist a specific signature from the database you just add its name into a local file called local.ign2 stored inside the database directory. -Al- -- Al

[Clamav-users] bytecode-54.cdiff not found on remote server

2010-09-23 Thread Al Varnell
update failed, trying to download bytecode.cvd Downloading bytecode.cvd [100%] bytecode.cvd updated (version: 61, sigs: 10, f-level: 53, builder: edwin) Database updated (836200 signatures) from db.US.clamav.net (IP: 194.47.250.218) -Al- -- Al Varnell Mountain View, CA

Re: [Clamav-users] ClamAV 96.2 does not compile on macintosh 10.4

2010-09-23 Thread Al Varnell
make: *** [install-recursive] Error 1 with Not much to go on. Lots of Tiger folks are currently using ClamXav 2.0.7 with clamav 0.96.2. As I recall the only compile issue Mark had was with intel Macs. -Al- -- Al Varnell Mountain View, CA ___ Help us

Re: [Clamav-users] Unable to install ClamAV 96.3.

2010-09-30 Thread Al Varnell
On 9/30/10 10:10 PM, Al Varnell wrote: Apple released an upgrade to bzip2 a few days ago - did you install it? I don't think so. I just checked the user and developer support downloads and there's no sign of it. It has been available from third party porting publishers, but nothing

Re: [Clamav-users] Unable to install ClamAV 96.3.

2010-10-01 Thread Al Varnell
(\/)\. http://www.ClamAV.net/gpg/tkojm.gpg \..._ 0DCA5A08407D5288279DB43454822DC8985A444B //\ /\ Wed Sep 22 20:09:50 CEST 2010 -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http

Re: [Clamav-users] Unable to install ClamAV 96.3.

2010-10-02 Thread Al Varnell
there to let the user know that he has a bugged version of bzip on his computer. Using a port to correct the bug is fine as long as the directory is included in the users path. If it isn't then you've defeated the purpose of the compilers check. -Al- -- Al Varnell Mountain View, CA

Re: [Clamav-users] Unable to install ClamAV 96.3.

2010-10-04 Thread Al Varnell
On 10/4/10 7:51 AM, Dennis Peterson denni...@inetnw.com wrote: On 10/1/10 11:30 PM, Al Varnell wrote: On 10/1/10 12:07 AM, Dennis Petersondenni...@inetnw.com wrote: A short term solution until Apple updates bzip2 is to install MacPorts if not already installed, and use it to install bzip2

Re: [Clamav-users] Unable to install ClamAV 96.3.

2010-10-04 Thread Al Varnell
On 10/4/10 9:39 AM, Erwan David er...@rail.eu.org wrote: On 04/10/10 18:25, Dennis Peterson wrote: On 10/4/10 9:20 AM, Al Varnell wrote: On 10/4/10 7:51 AM, Dennis Petersondenni...@inetnw.com wrote: On 10/1/10 11:30 PM, Al Varnell wrote: On 10/1/10 12:07 AM, Dennis Petersondenni

Re: [Clamav-users] Unable to install ClamAV 96.3.

2010-10-04 Thread Al Varnell
On Oct 4, 2010, at 5:08 PM, Dennis Peterson denni...@inetnw.com wrote: On 10/4/10 10:03 AM, Al Varnell wrote: On 10/4/10 9:39 AM, Erwan Davider...@rail.eu.org wrote: On 04/10/10 18:25, Dennis Peterson wrote: On 10/4/10 9:20 AM, Al Varnell wrote: On 10/4/10 7:51 AM, Dennis Petersondenni

Re: [Clamav-users] Unable to install ClamAV 96.3.

2010-10-04 Thread Al Varnell
On 10/4/10 6:10 PM, Dennis Peterson denni...@inetnw.com wrote: On 10/4/10 6:03 PM, Al Varnell wrote: I troubleshoot ClamXav for users and it's important for me to not get ahead of the ClamXav developer or Apple, so I must leave things as they are until Mark has a chance to compile

Re: [Clamav-users] Duplicate Database

2010-10-07 Thread Al Varnell
. Bottom line is that I don't think you can go wrong deleting any or both. Sent from my iPad -Al- -- Al Varnell On Oct 7, 2010, at 1:03 PM, Carlos Mennens carlosw...@gmail.com wrote: Everytime I run 'Clamscan', I get the following 'warning' notification: LibClamAV Warning: Detected duplicate

[Clamav-users] Mirror Issue

2010-10-24 Thread Al Varnell
¹re checking now to see if his mirrors.dat has been corrupted. I didn¹t get a chance to get a listing before he removed it, but will attempt to do that shortly. -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit

Re: [Clamav-users] Mirror Issue

2010-10-25 Thread Al Varnell
. -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] Freshclam oddity

2010-10-26 Thread Al Varnell
updates, not the case for 0.96.2 - if CVD's functionality level is higher, not the case for 0.96.2 So maybe what you saw was in error. -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http

[Clamav-users] OSX Boonana Trojan

2010-10-30 Thread Al Varnell
published containing 13 new signatures, but no sign of this one. Any idea what the holdup is? -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] OSX Boonana Trojan

2010-10-30 Thread Al Varnell
about right. -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

[Clamav-users] Exploit.PDF.Gen false positive

2010-11-08 Thread Al Varnell
f?67??? Kind of a sneaky way to get folks to update there software ;-) -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] Exploit.PDF.Gen false positive

2010-11-08 Thread Al Varnell
On 11/8/10 12:43 AM, Al Varnell alvarn...@mac.com wrote: A ClamXav user asked if the detection of the Exploit.PDF.Gen in a couple of his files was a False Positive. One of the files was the clamav 0.96.2 engine installer that comes with the previous version of ClamXav. The other was found

Re: [Clamav-users] (no subject)

2010-11-08 Thread Al Varnell
I had this issue last night. It was fixed between the time I first reported the problem and the time I successfully uploaded the file. I just updated the database one more time and no more false positives. Sent from Janet's iPad -Al- -- Al Varnell On Nov 8, 2010, at 1:21 PM, Eric Black ebl

Re: [Clamav-users] [Rkhunter-users] Please test rkhunter-CVS.tar.gz

2010-11-09 Thread Al Varnell
On 11/4/10 9:06 PM, Al Varnell alvarn...@mac.com wrote: [18:22:47] Info: Starting test name 'running_procs' [18:25:42] Checking running processes for suspicious files [ Warning ] [18:25:43] Warning: The following processes are using suspicious files: [18:25:44] Command: launchd

[Clamav-users] Fwd: APPLE-SA-2010-11-10-1 Mac OS X v10.6.5 and Security Update 2010-007

2010-11-10 Thread Al Varnell
this happened. And yes, I do know how to do it myself, but that's not really the point. Sent from Janet's iPad -Al- -- Al Varnell ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] [Rkhunter-users] Warning: Application 'gpg', version '1.4.10', is out of date, and possibly a security risk.

2010-11-19 Thread Al Varnell
to the RKH DB in conjunction with the rollout of the new version. You do know that v1.3.8 is out, right? Lots of good new stuff. Sent from Janet's iPad -Al- -- Al Varnell ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net

Re: [Clamav-users] [Rkhunter-users] Warning: Application 'gpg', version '1.4.10', is out of date, and possibly a security risk.

2010-11-19 Thread Al Varnell
Sorry, wrong user forum. -Al- ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] Upcoming release of Clamed (0.96.5)

2010-11-23 Thread Al Varnell
SKIP: check7_clamd_hg.sh SKIP: check8_clamd_hg.sh SKIP: check9_clamscan_vg.sh I had exactly the same results with OSX 10.5.8, except no .map warnings. -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit

Re: [clamav-users] ClamAV and Mal/Phish-A

2010-12-11 Thread Al Varnell
click() { if (event.button==2) { window.moveto(0, 0) window.moveto(1, 1) window.moveto(2, 2) window.moveto(3, 3) win so it would appear that clamav should be at least partially effective against this. -Al- -- Al Varnell Mountain View, CA ___ Help us

Re: [clamav-users] Improving Scan Speeds on OS X.4.11

2011-03-15 Thread Al Varnell
Add RAM if you haven't maxed it out yet. Purchase a faster, Intel Mac. Apple has not supported your OS since 2009 and seems to have removed support for PPC Macs from a software development standpoint. -Al- -- Al Varnell Mountain View, CA On 3/15/11 12:21 PM, Russ Tyndall fitz

[clamav-users] daily.cvd Corruption

2011-03-15 Thread Al Varnell
my database and reran with the same results they had. Seems that you daily.cvd is corrupt. -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [clamav-users] Improving Scan Speeds on OS X.4.11

2011-03-15 Thread Al Varnell
) after that. -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

[clamav-users] FW: APPLE-SA-2011-03-21-1 Mac OS X v10.6.7 and Security Update 2011-001

2011-03-27 Thread Al Varnell
to update to a third party bzip2 1.0.6 in the interim...I don't know what to tell you. -Al- -- Al Varnell Mountain View, CA -- Forwarded Message From: Apple Product Security product-security-nore...@lists.apple.com Date: Mon, 21 Mar 2011 13:30:57 -0700 To: security-annou...@lists.apple.com

[clamav-users] ClamXav

2011-03-29 Thread Al Varnell
Why is Mac OS X's ClamXav no longer listed on the Third Party Packages page? Sent from Janet's iPad -Al- -- Al Varnell ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [clamav-users] FW: APPLE-SA-2011-03-21-1 Mac OS X v10.6.7 and Security Update 2011-001

2011-03-30 Thread Al Varnell
On 3/29/11 11:39 AM, Tomasz Kojm tk...@clamav.net wrote: On Tue, 29 Mar 2011 10:06:09 -0700 Al Varnell alvarn...@mac.com wrote: I know clamav (freshclam) needs bzip2 to decompressing signature database .cvd files. The scanners undoubtedly use it to decompress .bz2 files they encounter

Re: [clamav-users] Compiling ClamAV for PPC on an Intel Machine

2011-06-02 Thread Al Varnell
Why not run ClamXav 2.1.1 on your PPC machines, or are they OS X Servers? Mark doesn't plan on supporting 10.4 much longer, but it works now. I'm sure I've seen answers to this question on ClamXav's forum http://markallan.co.uk/BB/viewforum.php?f=1 if you don't get an answer here. -Al- -- Al

Re: [clamav-users] Compiling ClamAV for PPC on an Intel Machine

2011-06-02 Thread Al Varnell
On 6/2/11 3:37 PM, Russ Tyndall fitz...@redshanksoftware.com wrote: On Jun 2, 2011, at 2:31 PM, Al Varnell wrote: I'm sure I've seen answers to this question on ClamXav's forum http://markallan.co.uk/BB/viewforum.php?f=1 if you don't get an answer here. Oh, yes, Mark very kindly tried

[clamav-users] Mirror Issues

2011-06-17 Thread Al Varnell
to be working. I have attempted to summarize my discussions, but there are many more details with one of these users here http://markallan.co.uk/BB/viewtopic.php?t=2349 -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide

[clamav-users] Mirror Issues

2011-06-17 Thread Al Varnell
out error not considered a Failure for the purpose of ignoring a server? - How many failures before ignore? I have attempted to summarize my discussions, but there are many more details with one of these users here http://markallan.co.uk/BB/viewtopic.php?t=2349 -Al- -- Al Varnell Mountain

Re: [clamav-users] Mirror Issues

2011-06-22 Thread Al Varnell
straight and is only 1 hour behind, so it would seem that your monitoring tool is no longer being blocked. I see just now that it has worked it's way up to the top of my rr list, so I expect I'll be seeing something from it soon. -Al- -- Al Varnell Mountain View, CA - 69.163.100.14

Re: [clamav-users] Virus database in tarball

2011-06-24 Thread Al Varnell
to download the entire database every time there is an update. -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [clamav-users] connect_error: getsockopt(SO_ERROR): fd=5 error=111: Connection refused

2011-07-14 Thread Al Varnell
to the mix, replacing one in Virginia that must have been dropped. It seems to have recovered at this time according to http://www.clamav.net/mirrors.html -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http

Re: [clamav-users] Reporting infected spam

2011-07-23 Thread Al Varnell
as intermediary mail handlers often scan and remove attachments that are recognized malware. -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

[clamav-users] Phishing.Heuristics.Email.SpoofedDomain

2011-07-26 Thread Al Varnell
Is there something going on with subject infections? I see that it's listed on the clamav home page as a Current Threat. We got several users asking about this in the ClamXav Forum (including a Linux user?) and I can't seem to find it in the signature database any more. -Al- -- Al Varnell

Re: [clamav-users] Heuristics.Phishing.Email.SpoofedDomain

2011-07-26 Thread Al Varnell
On 7/26/11 2:06 PM, Török Edwin ed...@clamav.net wrote: On 07/26/2011 11:59 PM, Al Varnell wrote: Is there something going on with subject infections? I see that it's listed on the clamav home page as a Current Threat. We got several users asking about this in the ClamXav Forum (including

Re: [clamav-users] [Clamav-users] Heuristics.Phishing.Email.SpoofedDomain

2011-07-28 Thread Al Varnell
spare you the details, but can provide if necessary. I'm pretty certain that somewhere between those ISP's is a clamav mail scanner that is flagging your email. -Al- -- Al Varnell Mountain View, CA On 7/28/11 4:02 PM, ExodusNZ pradipda...@xtra.co.nz wrote: Hi It appears that when im

Re: [clamav-users] Phishing.Heuristics.Email.SpoofedDomain

2011-08-01 Thread Al Varnell
On Jul 26, 2011, at 2:06 PM, Török Edwin ed...@clamav.net wrote: On 07/26/2011 11:59 PM, Al Varnell wrote: Is there something going on with subject infections? I see that it's listed on the clamav home page as a Current Threat. We got several users asking about this in the ClamXav Forum

Re: [clamav-users] outdated message notice disappeared

2011-08-12 Thread Al Varnell
notice when the version 0.97.2 is available. They only show that message for critical updates. -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

[clamav-users] US Mirror

2011-08-13 Thread Al Varnell
with this one? -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [clamav-users] Clarification of report needed

2011-09-01 Thread Al Varnell
or directory Don't include the trailing : -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

[clamav-users] Database not updating

2011-09-03 Thread Al Varnell
: 186326; new: 1 author: arnaud) on 02 Sep 2011 11-24 -0400 2 Sep clamav ClamAV Daily CVD 13538 (sigs: 186325; new: 17 author: arnaud) on 02 Sep 2011 10-05 -0400 2 Sep -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive

Re: [clamav-users] Database not updating

2011-09-04 Thread Al Varnell
All seems to have returned to normal as of my 1545 local update yesterday. Sent from Janet's iPad -Al- -- Al Varnell On Sep 3, 2011, at 11:12 AM, Al Varnell alvarn...@mac.com wrote: Both current.cvd.clamav.net and your home page say the latest version of daily.cvd is 13538, but according

Re: [clamav-users] potential FP on Trojan.Rootkit-3041?

2011-09-05 Thread Al Varnell
That's strange I am unable to locate Trojan.Rootkit-3041 in the current clamav db or on VirusTotal. When I Google that name the only thing I find is your message. Do you have the VirusTotal ID? -Al- -- Al Varnell Mountain View, CA On 9/4/11 6:57 PM, Jason Haar jason_h...@trimble.com wrote

[clamav-users] Yet Another US Mirror Issue

2011-09-06 Thread Al Varnell
seeing. I can ping the server, but can not find it with my browser. When I enter clamav.akxnet.de I am currently taken to a different IP address, I believe (46.4.61.241). The 88.198.67.125 address comes back to mx00.akxnet.de -Al- -- Al Varnell Mountain View, CA

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-07 Thread Al Varnell
On 9/7/11 4:21 AM, sys...@ra-schaal.de sys...@ra-schaal.de wrote: Am 07.09.2011 05:11, schrieb Al Varnell: According to my mirrors.dat file the last time I successfully connected to the US Mirror at akxnet.de (IP: 88.198.67.125) (obviously located in DE) was on 29 Aug, but when I check my log

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-07 Thread Al Varnell
On 9/7/11 11:19 AM, sys...@ra-schaal.de sys...@ra-schaal.de wrote: Am 07.09.2011 19:59, schrieb Al Varnell: You can use 46.4.61.241 and 88.198.67.125 - both systems are always in sync. I don't really get a choice, I must use whatever is handed off to me. I have never seen the 46 IP on our

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-07 Thread Al Varnell
blacklisting that server. I suggested to him that he file a bug report to thst effect, but the problem at that time was resolved, so elected not to bother. Sent from Janet's iPad -Al- -- Al Varnell ___ Help us build a comprehensive ClamAV guide: visit

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-08 Thread Al Varnell
trying to solve here is simply to improve the reliability of the CVD mirror network for US users. Sent from Janet's iPad -Al- -- Al Varnell ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-09 Thread Al Varnell
, and there are several other improvements that I feel are more important right now. -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-12 Thread Al Varnell
they sell comes with clavav, so they are already invested and have plenty of capacity world-wide. Sent from Janet's iPad -Al- -- Al Varnell ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Al Varnell
in the list. This morning was the first time a different server appeared first this month. Sent from Janet's iPad -Al- -- Al Varnell ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Al Varnell
else going on with it. My guess is that if the network was working as designed the user would never had lodged his initial complaint. -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Al Varnell
On 9/13/11 10:18 AM, sys...@ra-schaal.de sys...@ra-schaal.de wrote: Am 13.09.2011 18:01, schrieb Al Varnell: On Sep 13, 2011, at 8:15 AM, Dan dantear...@gmail.com wrote: Yet more failure on 88.198.67.125, this morning. This one is a double. I was going to wait a few more days to mention

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Al Varnell
if someone can give me a list of everybody that needs to be part of the discussion. P.S. - My goal is to try to limit the scope of this thread a little more, so it stays focused and relevant. As a side-line user on this list, I feel it had long since gotten out-of-hand. -Al- -- Al

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Al Varnell
signatures) from db.US.clamav.net (IP: 194.8.197.22) -- -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Al Varnell
On 9/13/11 6:31 PM, Nathan Gibbs nat...@cmpublishers.com wrote: On 9/13/2011 7:07 PM, Al Varnell wrote: On 9/13/11 2:28 PM, Bryan Burke bbu...@eecs.utk.edu wrote: Since freshclam doesn't seem to log the IP (by default, at least) when the update succeeds (or there is no update), I have

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Al Varnell
¹t open the page ³http://db.us.big.clamav.net/² because Safari can¹t connect to the server ³db.us.big.clamav.net². No matter how many times I try it. Was there anything else I need to try before restoring the hosts file? -Al- -- Al Varnell Mountain View, CA

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Al Varnell
. Or possibly http://validator.w3.org? -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-13 Thread Al Varnell
On 9/13/11 8:34 PM, Dennis Peterson denni...@inetnw.com wrote: On 9/13/11 8:31 PM, Al Varnell wrote: Sounds like the server will be pulled, so you may not care, but since I went through the effort. Made changes to the hosts file. Ran dig $ db.us.clamav.net Does your dig use

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-14 Thread Al Varnell
it does for everybody else. Sent from Janet's iPad -Al- -- Al Varnell ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [clamav-users] Yet Another US Mirror Issue

2011-09-14 Thread Al Varnell
mirror. So whatever you did to the firewall seems to have solved at least that part of the problem. Now if I can just get freshclam to pick another mirror once in a while our problems should be over. -Al- -- Al Varnell Mountain View, CA

[clamav-users] Yet Another US Mirror Issue-Solved

2011-09-14 Thread Al Varnell
on the first attempt. -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [clamav-users] Yet Another US Mirror Issue-Solved

2011-09-15 Thread Al Varnell
) Database updated (1039263 signatures) from db.US.clamav.net (IP: 207.57.106.31) Looks to be OK. -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [clamav-users] Yet Another US Mirror Issue-Solved

2011-09-15 Thread Al Varnell
Sep 13 07:45:07 2011 Ignore: No - Mirror #15 IP: 204.109.62.22 Successes: 5 Failures: 0 Last access: Thu Sep 8 15:45:17 2011 Ignore: No Note: Mirror #11 had Successes: 1 until yesterday. -Al- -- Al Varnell Mountain View, CA

Re: [clamav-users] Yet Another US Mirror Issue-Solved

2011-09-15 Thread Al Varnell
it immediately checked and connected and updated from another mirror, but the next update went right back to .125 in all but 2 cases. One Can't connect was followed by a second Can't connect. -Al- -- Al Varnell Mountain View, CA ___ Help us build

[clamav-users] clamav.akxnet.de Status

2011-09-18 Thread Al Varnell
Just wondering if the status page http://www.clamav.net/mirrors.html should show two entries for clamav.akxnet.de since it represents two IP addresses; 46.4.61.241 88.198.67.125. It seems to me that you would not get an accurate reading on the actual mirror status the way it is. -Al- -- Al

[clamav-users] ClamAV Virus Database Search

2011-09-24 Thread Al Varnell
but is not in the above list. Any idea why it wouldn't show up? -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [clamav-users] ClamAV Virus Database Search

2011-09-25 Thread Al Varnell
On Sep 25, 2011, at 12:36 AM, Török Edwin edwinto...@gmail.com wrote: On 09/25/2011 03:52 AM, Al Varnell wrote: When I go to http://clamav-du.securesites.net/cgi-bin/clamgrok and enter OSX I get a list of 34 hits for Mac OS signatures, but at least one is missing. When I open my

Re: [clamav-users] Value too large for defined data type

2011-10-14 Thread Al Varnell
, but if you run clamconf it will tell you all the settings. -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [clamav-users] Value too large for defined data type

2011-10-14 Thread Al Varnell
. # Default: 1 #MaxFiles 15000 and clamconf doesn't seem to exist either. Should be in a /bin -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [clamav-users] Virus Signature queries

2011-12-05 Thread Al Varnell
within an archive, etc. Files that exceed these maximums are included as read but not scanned. I do not believe the database is included in these numbers. -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http

Re: [clamav-users] undetected virus

2012-01-24 Thread Al Varnell
Janet's iPad -Al- -- Al Varnell Grateful user from Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [clamav-users] [Clamav-users] no GUI update

2012-02-02 Thread Al Varnell
On 2/2/12 10:50 AM, joeclem111 joeclem...@uk2.net wrote: Clamav 097.3 shows GUI is out of date, check for updates in help shows new GUI available but there is no way to do the update. How do I do this please? GUI for what OS? -Al- -- Al Varnell Mountain View, CA

Re: [clamav-users] virusdb updates

2012-02-12 Thread Al Varnell
without a lot of research. It drives end-users crazy when they get an infection name that is totally unique to clamav and there is no information about what it is, what it does and how to get rid of any extended infection. -Al- -- Al Varnell Mountain View, CA

Re: [clamav-users] ClamAV - question about symlink issue

2012-02-25 Thread Al Varnell
manually what to scan (as suggested here http://www.clamxav.com/faq.php#Q7) doesn't seem a very good option Please come to the ClamXav forum http://markallan.co.uk/BB/viewforum.php?f=1 and someone will help you figure this out. -Al- -- Al Varnell Mountain View, CA

Re: [clamav-users] My outdated Clam

2012-03-06 Thread Al Varnell
by the developer. I also recommend that you bring your questions about this to the ClamXav Forum http://markallan.co.uk/BB/viewforum.php?f=1 and somebody can help you there. -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide

Re: [clamav-users] My outdated Clam.

2012-03-07 Thread Al Varnell
with ClamXav, to include the engine installation, is http://markallan.co.uk/BB/viewforum.php?f=1 -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [clamav-users] My outdated Clam.

2012-03-14 Thread Al Varnell
. I'm quite confident that those folks on the Apple Community Discussion Forum recommend the use of ClamXav which is for average Mac users and why I keep saying that the appropriate place for help in this matter is the ClamXav Forum and not this list. -Al- -- Al Varnell Mountain View, CA

Re: [clamav-users] Virus information database?

2012-05-07 Thread Al Varnell
: Virus Total Sender: Anonymous Added: Trojan.Agent-281708 This says it originated at VirusTotal. When I do a Google search for 74da9128149f4e678783b4125095d396 +site:virustotal.com I get 6 hits, several of which show a VBA32 detection of TrojanBanker.Qhost.aaji -Al- -- Al Varnell Mountain View

Re: [clamav-users] Virus information database?

2012-05-07 Thread Al Varnell
On 5/7/12 5:35 PM, Pepijn Schmitz cla...@pepsoft.org wrote: On 07-05-12 20:44, Al Varnell wrote: And is there no place where I can find more information about the trojan ClamAV thinks it is detecting? Surely there is more information than a hex string, somewhere? The only one that might know

Re: [clamav-users] False positive suspicion - Fax Server Plus

2012-05-08 Thread Al Varnell
/faxserverplusevl.exe Why would you be asking clamav-users to check out something BitDefender finds? Shouldn't you be contacting them? -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net

Re: [clamav-users] Major new false positive? BC.Exploit.CVE_2012_0184

2012-05-24 Thread Al Varnell
The previous issue around 11 May were with BC.Exploit.CVE_2012_0184 (without -3) so I think this may be something new. -Al- -- Al Varnell Mountain View, CA On 5/24/12 2:03 AM, Henry Jensen hjen...@gmx.de wrote: Hello I still got many BC.Exploit.CVE_2012_0184-3 false positives, mainly MS

Re: [clamav-users] How to get the source code

2012-06-05 Thread Al Varnell
On 6/5/12 12:30 AM, suvendu mohapatra suvenduproj...@gmail.com wrote: I am newbie to this list. Kindly tell me where to get the source code for CLAMAV project. http://www.clamav.net/lang/en/download/sources/ -Al- -- Al Varnell Mountain View, CA

Re: [clamav-users] Understanding of Antivirus concept

2012-06-08 Thread Al Varnell
as an antivirus solution and on what platform and operating system? Or if you are just trying to understand anti-virus start with http://en.wikipedia.org/wiki/Anti-virus. Sent from Janet's iPad -Al- -- Al Varnell ___ Help us build a comprehensive ClamAV guide

Re: [clamav-users] Understanding of Antivirus concept

2012-06-08 Thread Al Varnell
. Best information for the former can be found at http://www.clamwin.com/ -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [clamav-users] WARNING: Your ClamAV installation is OUTDATED!

2012-06-13 Thread Al Varnell
On Jun 13, 2012, at 4:38 PM, Bill Landry b...@inetmsg.com wrote: When will the new release be available for download? Looks to be here http://sourceforge.net/projects/clamav/files/OldFiles/. Sent from Janet's iPad -Al- -- Al Varnell ___ Help us

Re: [clamav-users] Can't update Clamav on RHEL 5

2012-06-22 Thread Al Varnell
on RHEL 5.1? For a couple of days after 0.97.5 was known to exist, it was not actually posted to the web page. Even after the hyperlink title was changed, the older version was still what downloaded. Double check to make certain what you downloaded was clamav-0.97.5.tar.gz. -Al- -- Al Varnell

Re: [clamav-users] freshclam taking a long time, multiple failures?

2012-07-17 Thread Al Varnell
I don't see any timeouts or mirror failures here, only a bad safe browsing.cdiff file followed by complete recovery. Probably Google's fault, anyway. If this is a one time thing than I don't understand what you expect be done. Sent from Janet's iPad -Al- -- Al Varnell On Jul 17, 2012, at 2

Re: [clamav-users] Virus decscriptions ?

2012-07-20 Thread Al Varnell
they got uploaded? sigtool --find Exploit.PDF.Dropped-20 | sigtool --decode-sig -Al- -- Al Varnell Mountain View, CA ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

  1   2   3   4   5   6   7   8   9   10   >