Re: [clamav-users] ClamAV updates

2016-09-19 Thread Rafael Ferreira 
It’s not a mirror issue, there seems to be something up with the signature dbs 
and it seems to have started after a fairly large jump in the versions: 



22199 is the latest version available from http://db.us.clamav.net/daily.cvd 
 - so either it was moved or we stopped 
updating the daly db :( 

In all seriousness, I would say this is pretty bad since it means signatures 
haven’t been updated in 3 days. 

- Rafael 


> On Sep 9, 2016, at 6:05 AM, Ed Christiansen MS  wrote:
> 
> Ah.  Don't worry about the dead link... what possible use could a list of 
> mirror sites be anyway?
> 
> If you mean http://www.clamav.net/documents/official-mirror-faq, it lists 
> errors, but not any other mirrors to check.
> 
> On 9/9/2016 8:58 AM, Joel Esler (jesler) wrote:
>> That link has been dead for a couple years.   We're going to bring it back 
>> eventually.
>> 
>> That being said, there is an FAQ document on how to select a different 
>> mirror.
>> 
>> Sent from my iPhone
>> 
>> On Sep 9, 2016, at 8:42 AM, Ed Christiansen MS 
>> > wrote:
>> 
>> I go to the same spot every time.  However, when I went to check the mirrors 
>> today at http://www.clamav.net/mirrors.html it shows me a 404 error with a 
>> red rotating clam head.
>> 
>> On 9/8/2016 5:23 PM, Joel Esler (jesler) wrote:
>> What mirror are you getting it from?  The same one every time?  Or different 
>> mirrors every time.
>> 
>> Sent from my iPad
>> 
>> On Sep 8, 2016, at 5:22 PM, Ed Christiansen MS 
>> > 
>> wrote:
>> 
>> Greetings,
>> 
>> I have been getting the updates off 
>> database.clamav.net 
>> for a long time.  The daily.cvd doesn't seem to have changed size in the 
>> past couple days.  Is this normal?
>> 
>> Thanks,
>> 
>> Ed Christiansen
>> ___
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>> 
>> http://www.clamav.net/contact.html#ml
>> ___
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>> 
>> http://www.clamav.net/contact.html#ml
>> 
>> ___
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>> 
>> http://www.clamav.net/contact.html#ml
>> ___
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>> 
>> http://www.clamav.net/contact.html#ml
>> 
> ___
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] ClamAV updates

2016-09-10 Thread Rafael Ferreira 
Software is hard, but the issue was identified and fairly promptly resolved. 
Thanks to all the clamav folks that sorted this out on a Friday night. 

- Rafael 

> On Sep 10, 2016, at 3:17 AM, Steve basford  
> wrote:
> 
> 
> 
> 
> On 10 September 2016 10:05:47 Alan Forbes  wrote:
> 
>> I have since uninstalled CLAMAV and am now using COMODO, at least it
>> updates correctly.
> 
> Yep, it might update... but...
> 
> https://www.autoitscript.com/forum/topic/184066-solved-comodo-av-detected-a-virus-in-autoit-33120/
> 
> *All* AVs have connection issues, fps, update issues etc. at some point.. and 
> it shouldn't surprise anybody.
> 
> Cheers,
> 
> Steve
> Twitter: @sanesecurity
> 
> 
> ___
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] ClamAV updates

2016-09-10 Thread Reindl Harald 



Am 10.09.2016 um 11:04 schrieb Alan Forbes:

I have since uninstalled CLAMAV and am now using COMODO, at least it
updates correctly.


oh yeah each time with some peice of software something goes wrong you 
stop using that software? how old are you and how long can you play that 
game until finally you can't use anything? :-)



On 10 Sep 2016 09:44, "Al Varnell"  wrote:


Daily 22200 was just posted and from it's size (slightly larger than
44399+44400+44401) would appear to catch us up-to-date

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] ClamAV updates

2016-09-10 Thread Alan Forbes 
I have since uninstalled CLAMAV and am now using COMODO, at least it
updates correctly.
On 10 Sep 2016 09:44, "Al Varnell"  wrote:

> Daily 22200 was just posted and from it's size (slightly larger than
> 44399+44400+44401) would appear to catch us up-to-date.
>
> -Al-
>
> On Fri, Sep 09, 2016 at 08:19 PM, Al Varnell wrote:
> >
> > I have received daily 44399, 44400 and 44401 (the first relatively small
> and the last relatively large) via the clamav-virusdb mail list, so they do
> exist somewhere, just not in my daily.cld, the current daily.cvd or listed
> on DNS.
> >
> > The signature team is rather small and might not be back on-line until
> Monday, so we’ll just have to hope somebody will let them know ASAP.
> >
> > -Al-
> >
> > On Fri, Sep 09, 2016 at 08:09 PM, Rafael Ferreira wrote:
> >>
> >> Thanks Paul! Yeah as far as I can tell those newer databases just don't
> exist. If anyone from the signature team is reading this, it would be good
> if they could chime in.
> >>
> >>> On Sep 9, 2016, at 6:24 PM, Paul Kosinski 
> wrote:
> >>>
> >>> I just looked at my logs, and I agree it's bad. I haven't seen an
> >>> update since the one to 22199, which was 72 hours ago (see below).
> >>>
> >>> Paul
> >>>
> >>> --  Tuesday 06 September 2016 at 21:06:02
> --
> >>>
> >>> Current working dir is /opt/clamav.d/clamav.0.99.2/share/clamav
> >>> Max retries == 4
> >>> ClamAV update process started at Tue Sep  6 21:06:02 2016
> >>> Using IPv6 aware code
> >>> Querying current.cvd.clamav.net
> >>> TTL: 1800
> >>> Software version from DNS: 0.99.2
> >>> main.cvd version from DNS: 57
> >>> main.cvd is up to date (version: 57, sigs: 4218790, f-level: 60,
> builder: amishhammer)
> >>> daily.cvd version from DNS: 22199
> >>> Retrieving http://db.us.clamav.net/daily.cvd
> >>> Ignoring mirror 104.131.196.175 (due to previous errors)
> >>> Ignoring mirror 194.8.197.22 (due to previous errors)
> >>> Ignoring mirror 128.199.133.36 (due to previous errors)
> >>> nonblock_connect: connect timing out (30 secs)
> >>> Can't connect to port 80 of host db.us.clamav.net (IP: 207.57.106.31)
> >>> nonblock_connect: connect timing out (30 secs)
> >>> Can't connect to port 80 of host db.us.clamav.net (IP: 209.198.147.20)
> >>> Ignoring mirror 104.131.196.175 (due to previous errors)
> >>> Trying host db.us.clamav.net (172.110.204.67)...
> >>> nonblock_connect: connect timing out (30 secs)
> >>> Can't connect to port 80 of host db.us.clamav.net (IP: 172.110.204.67)
> >>> Ignoring mirror 194.8.197.22 (due to previous errors)
> >>> Trying host db.us.clamav.net (200.236.31.1)...
> >>> Trying to download http://db.us.clamav.net/daily.cvd (IP:
> 200.236.31.1)
> >>> Downloading daily.cvd [100%]
> >>> Loading signatures from daily.cvd
> >>> Properly loaded 596179 signatures from new daily.cvd
> >>> daily.cvd updated (version: 22199, sigs: 596178, f-level: 63, builder:
> neo)
> >>> Querying daily.22199.82.1.0.C8EC1F01.ping.clamav.net
> >>> bytecode.cvd version from DNS: 283
> >>> bytecode.cvd is up to date (version: 283, sigs: 53, f-level: 63,
> builder: neo)
> >>> Database updated (4815021 signatures) from db.us.clamav.net (IP:
> 200.236.31.1)
> >>> OnUpdateExecute: EXIT_1
> >>>
> >>> --  Tuesday 06 September 2016 at 21:08:57
> --
> >>>
> >>> TIME PASSES...
> >>>
> >>> --  Friday 09 September 2016 at 21:06:01
> --
> >>>
> >>> Current working dir is /opt/clamav.d/clamav.0.99.2/share/clamav
> >>> Max retries == 4
> >>> ClamAV update process started at Fri Sep  9 21:06:01 2016
> >>> Using IPv6 aware code
> >>> Querying current.cvd.clamav.net
> >>> TTL: 1800
> >>> Software version from DNS: 0.99.2
> >>> main.cvd version from DNS: 57
> >>> main.cvd is up to date (version: 57, sigs: 4218790, f-level: 60,
> builder: amishhammer)
> >>> daily.cvd version from DNS: 22199
> >>> daily.cvd is up to date (version: 22199, sigs: 596178, f-level: 63,
> builder: neo)
> >>> bytecode.cvd version from DNS: 283
> >>> bytecode.cvd is up to date (version: 283, sigs: 53, f-level: 63,
> builder: neo)
> >>>
> >>> --  Friday 09 September 2016 at 21:06:01
> --
> >>>
> >>>
> >>>
> >>>
> >>>
> >>> On Fri, 9 Sep 2016 17:58:52 -0700
> >>> Rafael Ferreira  wrote:
> >>>
>  It’s not a mirror issue, there seems to be something up with the
>  signature dbs and it seems to have started after a fairly large jump
>  in the versions between v22199 and v44399
>  (http://lists.clamav.net/pipermail/clamav-virusdb/2016-
> September/thread.html
>   September/thread.html>).
> 
>  22199 is the latest version available from
>  http://db.us.clamav.net/daily.cvd 
>  - so either it was

Re: [clamav-users] ClamAV updates

2016-09-10 Thread Al Varnell 
Daily 22200 was just posted and from it's size (slightly larger than 
44399+44400+44401) would appear to catch us up-to-date.

-Al-

On Fri, Sep 09, 2016 at 08:19 PM, Al Varnell wrote:
> 
> I have received daily 44399, 44400 and 44401 (the first relatively small and 
> the last relatively large) via the clamav-virusdb mail list, so they do exist 
> somewhere, just not in my daily.cld, the current daily.cvd or listed on DNS.
> 
> The signature team is rather small and might not be back on-line until 
> Monday, so we’ll just have to hope somebody will let them know ASAP.
> 
> -Al-
> 
> On Fri, Sep 09, 2016 at 08:09 PM, Rafael Ferreira wrote:
>> 
>> Thanks Paul! Yeah as far as I can tell those newer databases just don't 
>> exist. If anyone from the signature team is reading this, it would be good 
>> if they could chime in.
>> 
>>> On Sep 9, 2016, at 6:24 PM, Paul Kosinski  wrote:
>>> 
>>> I just looked at my logs, and I agree it's bad. I haven't seen an
>>> update since the one to 22199, which was 72 hours ago (see below).
>>> 
>>> Paul
>>> 
>>> --  Tuesday 06 September 2016 at 21:06:02  
>>> --
>>> 
>>> Current working dir is /opt/clamav.d/clamav.0.99.2/share/clamav
>>> Max retries == 4
>>> ClamAV update process started at Tue Sep  6 21:06:02 2016
>>> Using IPv6 aware code
>>> Querying current.cvd.clamav.net
>>> TTL: 1800
>>> Software version from DNS: 0.99.2
>>> main.cvd version from DNS: 57
>>> main.cvd is up to date (version: 57, sigs: 4218790, f-level: 60, builder: 
>>> amishhammer)
>>> daily.cvd version from DNS: 22199
>>> Retrieving http://db.us.clamav.net/daily.cvd
>>> Ignoring mirror 104.131.196.175 (due to previous errors)
>>> Ignoring mirror 194.8.197.22 (due to previous errors)
>>> Ignoring mirror 128.199.133.36 (due to previous errors)
>>> nonblock_connect: connect timing out (30 secs)
>>> Can't connect to port 80 of host db.us.clamav.net (IP: 207.57.106.31)
>>> nonblock_connect: connect timing out (30 secs)
>>> Can't connect to port 80 of host db.us.clamav.net (IP: 209.198.147.20)
>>> Ignoring mirror 104.131.196.175 (due to previous errors)
>>> Trying host db.us.clamav.net (172.110.204.67)...
>>> nonblock_connect: connect timing out (30 secs)
>>> Can't connect to port 80 of host db.us.clamav.net (IP: 172.110.204.67)
>>> Ignoring mirror 194.8.197.22 (due to previous errors)
>>> Trying host db.us.clamav.net (200.236.31.1)...
>>> Trying to download http://db.us.clamav.net/daily.cvd (IP: 200.236.31.1)
>>> Downloading daily.cvd [100%]
>>> Loading signatures from daily.cvd
>>> Properly loaded 596179 signatures from new daily.cvd
>>> daily.cvd updated (version: 22199, sigs: 596178, f-level: 63, builder: neo)
>>> Querying daily.22199.82.1.0.C8EC1F01.ping.clamav.net
>>> bytecode.cvd version from DNS: 283
>>> bytecode.cvd is up to date (version: 283, sigs: 53, f-level: 63, builder: 
>>> neo)
>>> Database updated (4815021 signatures) from db.us.clamav.net (IP: 
>>> 200.236.31.1)
>>> OnUpdateExecute: EXIT_1
>>> 
>>> --  Tuesday 06 September 2016 at 21:08:57  
>>> --
>>> 
>>> TIME PASSES...
>>> 
>>> --  Friday 09 September 2016 at 21:06:01  
>>> --
>>> 
>>> Current working dir is /opt/clamav.d/clamav.0.99.2/share/clamav
>>> Max retries == 4
>>> ClamAV update process started at Fri Sep  9 21:06:01 2016
>>> Using IPv6 aware code
>>> Querying current.cvd.clamav.net
>>> TTL: 1800
>>> Software version from DNS: 0.99.2
>>> main.cvd version from DNS: 57
>>> main.cvd is up to date (version: 57, sigs: 4218790, f-level: 60, builder: 
>>> amishhammer)
>>> daily.cvd version from DNS: 22199
>>> daily.cvd is up to date (version: 22199, sigs: 596178, f-level: 63, 
>>> builder: neo)
>>> bytecode.cvd version from DNS: 283
>>> bytecode.cvd is up to date (version: 283, sigs: 53, f-level: 63, builder: 
>>> neo)
>>> 
>>> --  Friday 09 September 2016 at 21:06:01  
>>> --
>>> 
>>> 
>>> 
>>> 
>>> 
>>> On Fri, 9 Sep 2016 17:58:52 -0700
>>> Rafael Ferreira  wrote:
>>> 
 It’s not a mirror issue, there seems to be something up with the
 signature dbs and it seems to have started after a fairly large jump
 in the versions between v22199 and v44399
 (http://lists.clamav.net/pipermail/clamav-virusdb/2016-September/thread.html
 ).
  
 
 22199 is the latest version available from
 http://db.us.clamav.net/daily.cvd 
 - so either it was moved or we stopped updating the daly db :( 
 
 In all seriousness, I would say this is pretty bad since it means
 signatures haven’t been updated in 3 days. 
 
 - Rafael
>>> 
 http://www.clamav.net/contact.html#ml
>>> ___
>>>

Re: [clamav-users] ClamAV updates

2016-09-09 Thread Al Varnell 
I have received daily 44399, 44400 and 44401 (the first relatively small and 
the last relatively large) via the clamav-virusdb mail list, so they do exist 
somewhere, just not in my daily.cld, the current daily.cvd or listed on DNS.

The signature team is rather small and might not be back on-line until Monday, 
so we’ll just have to hope somebody will let them know ASAP.

-Al-

On Fri, Sep 09, 2016 at 08:09 PM, Rafael Ferreira wrote:
> 
> Thanks Paul! Yeah as far as I can tell those newer databases just don't 
> exist. If anyone from the signature team is reading this, it would be good if 
> they could chime in.
> 
>> On Sep 9, 2016, at 6:24 PM, Paul Kosinski  wrote:
>> 
>> I just looked at my logs, and I agree it's bad. I haven't seen an
>> update since the one to 22199, which was 72 hours ago (see below).
>> 
>> Paul
>> 
>> --  Tuesday 06 September 2016 at 21:06:02  
>> --
>> 
>> Current working dir is /opt/clamav.d/clamav.0.99.2/share/clamav
>> Max retries == 4
>> ClamAV update process started at Tue Sep  6 21:06:02 2016
>> Using IPv6 aware code
>> Querying current.cvd.clamav.net
>> TTL: 1800
>> Software version from DNS: 0.99.2
>> main.cvd version from DNS: 57
>> main.cvd is up to date (version: 57, sigs: 4218790, f-level: 60, builder: 
>> amishhammer)
>> daily.cvd version from DNS: 22199
>> Retrieving http://db.us.clamav.net/daily.cvd
>> Ignoring mirror 104.131.196.175 (due to previous errors)
>> Ignoring mirror 194.8.197.22 (due to previous errors)
>> Ignoring mirror 128.199.133.36 (due to previous errors)
>> nonblock_connect: connect timing out (30 secs)
>> Can't connect to port 80 of host db.us.clamav.net (IP: 207.57.106.31)
>> nonblock_connect: connect timing out (30 secs)
>> Can't connect to port 80 of host db.us.clamav.net (IP: 209.198.147.20)
>> Ignoring mirror 104.131.196.175 (due to previous errors)
>> Trying host db.us.clamav.net (172.110.204.67)...
>> nonblock_connect: connect timing out (30 secs)
>> Can't connect to port 80 of host db.us.clamav.net (IP: 172.110.204.67)
>> Ignoring mirror 194.8.197.22 (due to previous errors)
>> Trying host db.us.clamav.net (200.236.31.1)...
>> Trying to download http://db.us.clamav.net/daily.cvd (IP: 200.236.31.1)
>> Downloading daily.cvd [100%]
>> Loading signatures from daily.cvd
>> Properly loaded 596179 signatures from new daily.cvd
>> daily.cvd updated (version: 22199, sigs: 596178, f-level: 63, builder: neo)
>> Querying daily.22199.82.1.0.C8EC1F01.ping.clamav.net
>> bytecode.cvd version from DNS: 283
>> bytecode.cvd is up to date (version: 283, sigs: 53, f-level: 63, builder: 
>> neo)
>> Database updated (4815021 signatures) from db.us.clamav.net (IP: 
>> 200.236.31.1)
>> OnUpdateExecute: EXIT_1
>> 
>> --  Tuesday 06 September 2016 at 21:08:57  
>> --
>> 
>> TIME PASSES...
>> 
>> --  Friday 09 September 2016 at 21:06:01  
>> --
>> 
>> Current working dir is /opt/clamav.d/clamav.0.99.2/share/clamav
>> Max retries == 4
>> ClamAV update process started at Fri Sep  9 21:06:01 2016
>> Using IPv6 aware code
>> Querying current.cvd.clamav.net
>> TTL: 1800
>> Software version from DNS: 0.99.2
>> main.cvd version from DNS: 57
>> main.cvd is up to date (version: 57, sigs: 4218790, f-level: 60, builder: 
>> amishhammer)
>> daily.cvd version from DNS: 22199
>> daily.cvd is up to date (version: 22199, sigs: 596178, f-level: 63, builder: 
>> neo)
>> bytecode.cvd version from DNS: 283
>> bytecode.cvd is up to date (version: 283, sigs: 53, f-level: 63, builder: 
>> neo)
>> 
>> --  Friday 09 September 2016 at 21:06:01  
>> --
>> 
>> 
>> 
>> 
>> 
>> On Fri, 9 Sep 2016 17:58:52 -0700
>> Rafael Ferreira  wrote:
>> 
>>> It’s not a mirror issue, there seems to be something up with the
>>> signature dbs and it seems to have started after a fairly large jump
>>> in the versions between v22199 and v44399
>>> (http://lists.clamav.net/pipermail/clamav-virusdb/2016-September/thread.html
>>> ).
>>>  
>>> 
>>> 22199 is the latest version available from
>>> http://db.us.clamav.net/daily.cvd 
>>> - so either it was moved or we stopped updating the daly db :( 
>>> 
>>> In all seriousness, I would say this is pretty bad since it means
>>> signatures haven’t been updated in 3 days. 
>>> 
>>> - Rafael
>> 
>>> http://www.clamav.net/contact.html#ml
>> ___
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>> 
>> http://www.clamav.net/contact.html#ml
> ___
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml

Re: [clamav-users] ClamAV updates

2016-09-09 Thread Rafael Ferreira 
Thanks Paul! Yeah as far as I can tell those newer databases just don't exist. 
If anyone from the signature team is reading this, it would be good if they 
could chime in.

> On Sep 9, 2016, at 6:24 PM, Paul Kosinski  wrote:
> 
> I just looked at my logs, and I agree it's bad. I haven't seen an
> update since the one to 22199, which was 72 hours ago (see below).
> 
> Paul
> 
> --  Tuesday 06 September 2016 at 21:06:02  
> --
> 
> Current working dir is /opt/clamav.d/clamav.0.99.2/share/clamav
> Max retries == 4
> ClamAV update process started at Tue Sep  6 21:06:02 2016
> Using IPv6 aware code
> Querying current.cvd.clamav.net
> TTL: 1800
> Software version from DNS: 0.99.2
> main.cvd version from DNS: 57
> main.cvd is up to date (version: 57, sigs: 4218790, f-level: 60, builder: 
> amishhammer)
> daily.cvd version from DNS: 22199
> Retrieving http://db.us.clamav.net/daily.cvd
> Ignoring mirror 104.131.196.175 (due to previous errors)
> Ignoring mirror 194.8.197.22 (due to previous errors)
> Ignoring mirror 128.199.133.36 (due to previous errors)
> nonblock_connect: connect timing out (30 secs)
> Can't connect to port 80 of host db.us.clamav.net (IP: 207.57.106.31)
> nonblock_connect: connect timing out (30 secs)
> Can't connect to port 80 of host db.us.clamav.net (IP: 209.198.147.20)
> Ignoring mirror 104.131.196.175 (due to previous errors)
> Trying host db.us.clamav.net (172.110.204.67)...
> nonblock_connect: connect timing out (30 secs)
> Can't connect to port 80 of host db.us.clamav.net (IP: 172.110.204.67)
> Ignoring mirror 194.8.197.22 (due to previous errors)
> Trying host db.us.clamav.net (200.236.31.1)...
> Trying to download http://db.us.clamav.net/daily.cvd (IP: 200.236.31.1)
> Downloading daily.cvd [100%]
> Loading signatures from daily.cvd
> Properly loaded 596179 signatures from new daily.cvd
> daily.cvd updated (version: 22199, sigs: 596178, f-level: 63, builder: neo)
> Querying daily.22199.82.1.0.C8EC1F01.ping.clamav.net
> bytecode.cvd version from DNS: 283
> bytecode.cvd is up to date (version: 283, sigs: 53, f-level: 63, builder: neo)
> Database updated (4815021 signatures) from db.us.clamav.net (IP: 200.236.31.1)
> OnUpdateExecute: EXIT_1
> 
> --  Tuesday 06 September 2016 at 21:08:57  
> --
> 
> TIME PASSES...
> 
> --  Friday 09 September 2016 at 21:06:01  
> --
> 
> Current working dir is /opt/clamav.d/clamav.0.99.2/share/clamav
> Max retries == 4
> ClamAV update process started at Fri Sep  9 21:06:01 2016
> Using IPv6 aware code
> Querying current.cvd.clamav.net
> TTL: 1800
> Software version from DNS: 0.99.2
> main.cvd version from DNS: 57
> main.cvd is up to date (version: 57, sigs: 4218790, f-level: 60, builder: 
> amishhammer)
> daily.cvd version from DNS: 22199
> daily.cvd is up to date (version: 22199, sigs: 596178, f-level: 63, builder: 
> neo)
> bytecode.cvd version from DNS: 283
> bytecode.cvd is up to date (version: 283, sigs: 53, f-level: 63, builder: neo)
> 
> --  Friday 09 September 2016 at 21:06:01  
> --
> 
> 
> 
> 
> 
> On Fri, 9 Sep 2016 17:58:52 -0700
> Rafael Ferreira  wrote:
> 
>> It’s not a mirror issue, there seems to be something up with the
>> signature dbs and it seems to have started after a fairly large jump
>> in the versions between v22199 and v44399
>> (http://lists.clamav.net/pipermail/clamav-virusdb/2016-September/thread.html
>> ).
>>  
>> 
>> 22199 is the latest version available from
>> http://db.us.clamav.net/daily.cvd 
>> - so either it was moved or we stopped updating the daly db :( 
>> 
>> In all seriousness, I would say this is pretty bad since it means
>> signatures haven’t been updated in 3 days. 
>> 
>> - Rafael
> 
>> http://www.clamav.net/contact.html#ml
> ___
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
> 
> http://www.clamav.net/contact.html#ml
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] ClamAV updates

2016-09-09 Thread Paul Kosinski 
I just looked at my logs, and I agree it's bad. I haven't seen an
update since the one to 22199, which was 72 hours ago (see below).

Paul

--  Tuesday 06 September 2016 at 21:06:02  
--

Current working dir is /opt/clamav.d/clamav.0.99.2/share/clamav
Max retries == 4
ClamAV update process started at Tue Sep  6 21:06:02 2016
Using IPv6 aware code
Querying current.cvd.clamav.net
TTL: 1800
Software version from DNS: 0.99.2
main.cvd version from DNS: 57
main.cvd is up to date (version: 57, sigs: 4218790, f-level: 60, builder: 
amishhammer)
daily.cvd version from DNS: 22199
Retrieving http://db.us.clamav.net/daily.cvd
Ignoring mirror 104.131.196.175 (due to previous errors)
Ignoring mirror 194.8.197.22 (due to previous errors)
Ignoring mirror 128.199.133.36 (due to previous errors)
nonblock_connect: connect timing out (30 secs)
Can't connect to port 80 of host db.us.clamav.net (IP: 207.57.106.31)
nonblock_connect: connect timing out (30 secs)
Can't connect to port 80 of host db.us.clamav.net (IP: 209.198.147.20)
Ignoring mirror 104.131.196.175 (due to previous errors)
Trying host db.us.clamav.net (172.110.204.67)...
nonblock_connect: connect timing out (30 secs)
Can't connect to port 80 of host db.us.clamav.net (IP: 172.110.204.67)
Ignoring mirror 194.8.197.22 (due to previous errors)
Trying host db.us.clamav.net (200.236.31.1)...
Trying to download http://db.us.clamav.net/daily.cvd (IP: 200.236.31.1)
Downloading daily.cvd [100%]
Loading signatures from daily.cvd
Properly loaded 596179 signatures from new daily.cvd
daily.cvd updated (version: 22199, sigs: 596178, f-level: 63, builder: neo)
Querying daily.22199.82.1.0.C8EC1F01.ping.clamav.net
bytecode.cvd version from DNS: 283
bytecode.cvd is up to date (version: 283, sigs: 53, f-level: 63, builder: neo)
Database updated (4815021 signatures) from db.us.clamav.net (IP: 200.236.31.1)
OnUpdateExecute: EXIT_1

--  Tuesday 06 September 2016 at 21:08:57  
--

TIME PASSES...

--  Friday 09 September 2016 at 21:06:01  
--

Current working dir is /opt/clamav.d/clamav.0.99.2/share/clamav
Max retries == 4
ClamAV update process started at Fri Sep  9 21:06:01 2016
Using IPv6 aware code
Querying current.cvd.clamav.net
TTL: 1800
Software version from DNS: 0.99.2
main.cvd version from DNS: 57
main.cvd is up to date (version: 57, sigs: 4218790, f-level: 60, builder: 
amishhammer)
daily.cvd version from DNS: 22199
daily.cvd is up to date (version: 22199, sigs: 596178, f-level: 63, builder: 
neo)
bytecode.cvd version from DNS: 283
bytecode.cvd is up to date (version: 283, sigs: 53, f-level: 63, builder: neo)

--  Friday 09 September 2016 at 21:06:01  
--





On Fri, 9 Sep 2016 17:58:52 -0700
Rafael Ferreira  wrote:

> It’s not a mirror issue, there seems to be something up with the
> signature dbs and it seems to have started after a fairly large jump
> in the versions between v22199 and v44399
> (http://lists.clamav.net/pipermail/clamav-virusdb/2016-September/thread.html
> ).
>  
> 
> 22199 is the latest version available from
> http://db.us.clamav.net/daily.cvd 
> - so either it was moved or we stopped updating the daly db :( 
> 
> In all seriousness, I would say this is pretty bad since it means
> signatures haven’t been updated in 3 days. 
> 
> - Rafael 

> http://www.clamav.net/contact.html#ml
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] ClamAV updates

2016-09-09 Thread Rafael Ferreira 
It’s not a mirror issue, there seems to be something up with the signature dbs 
and it seems to have started after a fairly large jump in the versions between 
v22199 and v44399 
(http://lists.clamav.net/pipermail/clamav-virusdb/2016-September/thread.html 
). 

22199 is the latest version available from http://db.us.clamav.net/daily.cvd 
 - so either it was moved or we stopped 
updating the daly db :( 

In all seriousness, I would say this is pretty bad since it means signatures 
haven’t been updated in 3 days. 

- Rafael 


> On Sep 9, 2016, at 6:05 AM, Ed Christiansen MS  > wrote:
> 
> Ah.  Don't worry about the dead link... what possible use could a list of 
> mirror sites be anyway?
> 
> If you mean http://www.clamav.net/documents/official-mirror-faq 
> , it lists errors, but 
> not any other mirrors to check.
> 
> On 9/9/2016 8:58 AM, Joel Esler (jesler) wrote:
>> That link has been dead for a couple years.   We're going to bring it back 
>> eventually.
>> 
>> That being said, there is an FAQ document on how to select a different 
>> mirror.
>> 
>> Sent from my iPhone
>> 
>> On Sep 9, 2016, at 8:42 AM, Ed Christiansen MS > > >> wrote:
>> 
>> I go to the same spot every time.  However, when I went to check the mirrors 
>> today at http://www.clamav.net/mirrors.html 
>>  it shows me a 404 error with a red 
>> rotating clam head.
>> 
>> On 9/8/2016 5:23 PM, Joel Esler (jesler) wrote:
>> What mirror are you getting it from?  The same one every time?  Or different 
>> mirrors every time.
>> 
>> Sent from my iPad
>> 
>> On Sep 8, 2016, at 5:22 PM, Ed Christiansen MS > > >> >> wrote:
>> 
>> Greetings,
>> 
>> I have been getting the updates off database.clamav.net 
>> > >> > for a long time.  The daily.cvd doesn't seem 
>> to have changed size in the past couple days.  Is this normal?
>> 
>> Thanks,
>> 
>> Ed Christiansen
>> ___
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq 
>> 
>> 
>> http://www.clamav.net/contact.html#ml
>> ___
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>> 
>> http://www.clamav.net/contact.html#ml
>> 
>> ___
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>> 
>> http://www.clamav.net/contact.html#ml
>> ___
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/vrtadmin/clamav-faq
>> 
>> http://www.clamav.net/contact.html#ml
>> 
> ___
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq 
> 
> 
> http://www.clamav.net/contact.html#ml

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] ClamAV updates

2016-09-09 Thread Ed Christiansen MS 
Ah.  Don't worry about the dead link... what possible use could a list 
of mirror sites be anyway?


If you mean http://www.clamav.net/documents/official-mirror-faq, it 
lists errors, but not any other mirrors to check.


On 9/9/2016 8:58 AM, Joel Esler (jesler) wrote:

That link has been dead for a couple years.   We're going to bring it back 
eventually.

That being said, there is an FAQ document on how to select a different mirror.

Sent from my iPhone

On Sep 9, 2016, at 8:42 AM, Ed Christiansen MS 
> wrote:

I go to the same spot every time.  However, when I went to check the mirrors 
today at http://www.clamav.net/mirrors.html it shows me a 404 error with a red 
rotating clam head.

On 9/8/2016 5:23 PM, Joel Esler (jesler) wrote:
What mirror are you getting it from?  The same one every time?  Or different 
mirrors every time.

Sent from my iPad

On Sep 8, 2016, at 5:22 PM, Ed Christiansen MS 
> 
wrote:

Greetings,

I have been getting the updates off 
database.clamav.net for 
a long time.  The daily.cvd doesn't seem to have changed size in the past couple days.  Is 
this normal?

Thanks,

Ed Christiansen
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] ClamAV updates

2016-09-09 Thread Joel Esler (jesler) 
That link has been dead for a couple years.   We're going to bring it back 
eventually.

That being said, there is an FAQ document on how to select a different mirror.

Sent from my iPhone

On Sep 9, 2016, at 8:42 AM, Ed Christiansen MS 
> wrote:

I go to the same spot every time.  However, when I went to check the mirrors 
today at http://www.clamav.net/mirrors.html it shows me a 404 error with a red 
rotating clam head.

On 9/8/2016 5:23 PM, Joel Esler (jesler) wrote:
What mirror are you getting it from?  The same one every time?  Or different 
mirrors every time.

Sent from my iPad

On Sep 8, 2016, at 5:22 PM, Ed Christiansen MS 
> 
wrote:

Greetings,

I have been getting the updates off 
database.clamav.net for 
a long time.  The daily.cvd doesn't seem to have changed size in the past 
couple days.  Is this normal?

Thanks,

Ed Christiansen
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] ClamAV updates

2016-09-09 Thread Ed Christiansen MS 
I go to the same spot every time.  However, when I went to check the 
mirrors today at http://www.clamav.net/mirrors.html it shows me a 404 
error with a red rotating clam head.


On 9/8/2016 5:23 PM, Joel Esler (jesler) wrote:

What mirror are you getting it from?  The same one every time?  Or different 
mirrors every time.

Sent from my iPad

On Sep 8, 2016, at 5:22 PM, Ed Christiansen MS 
> wrote:

Greetings,

I have been getting the updates off 
database.clamav.net for a long time.  The daily.cvd 
doesn't seem to have changed size in the past couple days.  Is this normal?

Thanks,

Ed Christiansen
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] ClamAV updates

2016-09-08 Thread Joel Esler (jesler) 
What mirror are you getting it from?  The same one every time?  Or different 
mirrors every time.

Sent from my iPad

On Sep 8, 2016, at 5:22 PM, Ed Christiansen MS 
> wrote:

Greetings,

I have been getting the updates off 
database.clamav.net for a long time.  The daily.cvd 
doesn't seem to have changed size in the past couple days.  Is this normal?

Thanks,

Ed Christiansen
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] ClamAV updates

2016-09-08 Thread Ed Christiansen MS 

Greetings,

I have been getting the updates off database.clamav.net for a long time. 
 The daily.cvd doesn't seem to have changed size in the past couple 
days.  Is this normal?


Thanks,

Ed Christiansen
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] ClamAv updates not being published properly?

2014-05-28 Thread Randal, Phil 
Latest from clamav-virusdb announcements:


ClamAV database updated (28 May 2014 04-17 -0400): daily.cvd



Yet freshclam says (with and without -no-dns)


# freshclam
ClamAV update process started at Wed May 28 09:33:52 2014
main.cvd is up to date (version: 55, sigs: 2424225, f-level: 60, builder: neo)
daily.cld is up to date (version: 19037, sigs: 970172, f-level: 63, builder: 
neo)
bytecode.cld is up to date (version: 241, sigs: 46, f-level: 63, builder: 
dgoddard)



Cheers,



Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: 
phil.ran...@hoopleltd.co.ukmailto:phil.ran...@hoopleltd.co.uk

Hoople Ltd, Registered in England and Wales No. 7556595
Registered office: Plough Lane, Hereford, HR4 0LE

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml

Re: [clamav-users] ClamAv updates not being published properly?

2014-05-28 Thread Randal, Phil 
Oops, left off the latest version of patterns - 19041, allegedly, yet we're 
stuck on 19037.

Cheers,

Phil

-Original Message-
From: clamav-users-boun...@lists.clamav.net 
[mailto:clamav-users-boun...@lists.clamav.net] On Behalf Of Randal, Phil
Sent: 28 May 2014 09:35
To: Clamav-Users (clamav-users@lists.clamav.net)
Subject: [clamav-users] ClamAv updates not being published properly?

Latest from clamav-virusdb announcements:


ClamAV database updated (28 May 2014 04-17 -0400): daily.cvd



Yet freshclam says (with and without -no-dns)


# freshclam
ClamAV update process started at Wed May 28 09:33:52 2014 main.cvd is up to 
date (version: 55, sigs: 2424225, f-level: 60, builder: neo) daily.cld is up to 
date (version: 19037, sigs: 970172, f-level: 63, builder: neo) bytecode.cld is 
up to date (version: 241, sigs: 46, f-level: 63, builder: dgoddard)



Cheers,



Phil

--
Phil Randal
Infrastructure Engineer
Hoople Ltd | Thorn Office Centre | Hereford HR2 6JT
Tel: 01432 260415 | Email: 
phil.ran...@hoopleltd.co.ukmailto:phil.ran...@hoopleltd.co.uk

Hoople Ltd, Registered in England and Wales No. 7556595 Registered office: 
Plough Lane, Hereford, HR4 0LE

Any opinion expressed in this e-mail or any attached files are those of the 
individual and not necessarily those of Hoople Ltd. You should be aware that 
Hoople Ltd. monitors its email service. This e-mail and any attached files are 
confidential and intended solely for the use of the addressee. This 
communication may contain material protected by law from being passed on. If 
you are not the intended recipient and have received this e-mail in error, you 
are advised that any use, dissemination, forwarding, printing or copying of 
this e-mail is strictly prohibited. If you have received this e-mail in error 
please contact the sender immediately and destroy all copies of it.
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml

Re: [clamav-users] ClamAv updates not being published properly?

2014-05-28 Thread Steve Basford 

On Wed, May 28, 2014 9:35 am, Randal, Phil wrote:

 Yet freshclam says (with and without -no-dns)


Hi Phil,

Same here...

freshclam...

ClamAV update process started at Wed May 28 10:13:11 2014
main.cld is up to date (version: 55, sigs: 2424225, f-level: 60, builder:
neo)
daily.cld is up to date (version: 19037, sigs: 970172, f-level: 63,
builder: neo

db updates...

http://lurker.clamav.net/list/clamav-virusdb.html


Cheers,

Steve
Sanesecurity

___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml

Re: [clamav-users] ClamAv updates not being published properly?

2014-05-28 Thread Jim Popovitch 
On Wed, May 28, 2014 at 4:39 AM, Randal, Phil
phil.ran...@hoopleltd.co.uk wrote:
 Oops, left off the latest version of patterns - 19041, allegedly, yet we're 
 stuck on 19037.

Same here.  DNS says 19037 is the latest:

~$ dig +short txt current.cvd.clamav.net
0.98.3:55:19037:1401269340:1:63:41971:241

-Jim P.
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml

Re: [clamav-users] ClamAv updates not being published properly?

2014-05-28 Thread Joel Esler (jesler) 
Thanks all. We'll take a look!

--
Joel Esler
Sent from my iPhone

 On May 28, 2014, at 6:34, Jim Popovitch jim...@gmail.com wrote:
 
 On Wed, May 28, 2014 at 4:39 AM, Randal, Phil
 phil.ran...@hoopleltd.co.uk wrote:
 Oops, left off the latest version of patterns - 19041, allegedly, yet we're 
 stuck on 19037.
 
 Same here.  DNS says 19037 is the latest:
 
 ~$ dig +short txt current.cvd.clamav.net
 0.98.3:55:19037:1401269340:1:63:41971:241
 
 -Jim P.
 ___
 Help us build a comprehensive ClamAV guide:
 https://github.com/vrtadmin/clamav-faq
 http://www.clamav.net/support/ml
___
Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq
http://www.clamav.net/support/ml

[Clamav-users] ClamAV updates - where is 7421?

2008-06-10 Thread Randal, Phil 
Last pattern posted to clamav-virusdb was:

ClamAV database updated (10 Jun 2008 14-18 +): daily.cvd
Version: 7421

Yet the DNS, clamav homepage, and mirrors still say 7417.

What gives?

Cheers,

Phil

--
Phil Randal
Networks Engineer
Herefordshire Council
Hereford, UK

___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] ClamAV updates - where is 7421?

2008-06-10 Thread Luca Gibelli 

Hello Randal,

 Last pattern posted to clamav-virusdb was:
 ClamAV database updated (10 Jun 2008 14-18 +): daily.cvd
 Version: 7421
 Yet the DNS, clamav homepage, and mirrors still say 7417.

the problem has been fixed shortly after your email.

Best regards

-- 
Luca Gibelli (luca _at_ clamav.net)   ClamAV, a GPL anti-virus toolkit
[Tel] +39 0187 1851862 [Fax] +39 0187 1852252 [IM] nervous/jabber.linux.it
PGP key id 5EFC5582 @ any key-server || http://www.clamav.net/gpg/luca.gpg
___
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] Clamav updates

2006-10-15 Thread Luca Gibelli 

Hello davet,

 ERROR: daily.cvd not found on remote server
 ERROR: Can't download daily.cvd from db.AU.clamav.net (IP: 203.28.142.36)
 ERROR: Mirrors are not fully synchronized. Please try again later.
 Anyone else getting this?
 Yes! Since last night on several sites :(

mind to contribute a mirror in .AU? Thanks,

Best regards

-- 
Luca Gibelli (luca _at_ clamav.net) - ClamAV, a GPL anti-virus toolkit 
[Tel] +44 2081239239 [Fax] +39 0187015046 [IM] nervous/jabber.linux.it
PGP key id 5EFC5582 @ key server || http://www.clamav.net/gpg/luca.gpg


signature.asc
Description: Digital signature
___
http://lurker.clamav.net/list/clamav-users.html

[Clamav-users] Clamav updates

2006-10-11 Thread davet 


For a number of hours I have been getting this on multiple sites I run
clamAV at

ERROR: daily.cvd not found on remote server
ERROR: Can't download daily.cvd from db.AU.clamav.net (IP: 203.28.142.36)
ERROR: Mirrors are not fully synchronized. Please try again later.


Anyone else getting this?


Yes! Since last night on several sites :(





David Tredinnick
IT Administrator - East Coast
Maptek Pty Ltd
Tel: +61 2 49687123
Fax: +61 2 49681344
Email: [EMAIL PROTECTED]

___
http://lurker.clamav.net/list/clamav-users.html

[Clamav-users] clamav updates - freshclam versus recompiling

2005-06-30 Thread Casey Allen Shobe 
Why do we have to recompile clamav all the time to get updates?  I 
thought that's what freshclam was for.

We were running clamav 0.86 with freshclam, and Worm.Mytob.FM was 
making it past the filter.  Compiling 0.86.1 fixed things, but I 
don't really understand why.  We generally like to test new 
releases of software on a test server for several days before 
upgrading production machines.

Cheers,
-- 
Casey Allen Shobe | http://casey.shobe.info
[EMAIL PROTECTED] | cell 425-443-4653
AIM  Yahoo:  SomeLinuxGuy | ICQ:  1494523
SeattleServer.com, Inc. | http://www.seattleserver.com
___
http://lurker.clamav.net/list/clamav-users.html

Re: [Clamav-users] clamav updates - freshclam versus recompiling

2005-06-30 Thread Jim Maul 

Casey Allen Shobe wrote:
Why do we have to recompile clamav all the time to get updates?  I 
thought that's what freshclam was for.




Because something is broken?  I've never had to to do that.

We were running clamav 0.86 with freshclam, and Worm.Mytob.FM was 
making it past the filter.  Compiling 0.86.1 fixed things, but I 
don't really understand why.



I dont know if this is the case for this particular virus, but sometimes 
older versions of clam can not detect some of the newer variants of 
viruses regardless of what version of the definitions you have.



  We generally like to test new
releases of software on a test server for several days before 
upgrading production machines.




Good idea.

-Jim

___
http://lurker.clamav.net/list/clamav-users.html