Re: [clamav-users] How to get rid of or Fix clamonacc error

2023-03-22 Thread Tim McConnell via clamav-users
So Marc, you're saying do something like this: #/bin/bash declare clammy.sh /usr/bin/clamscan --exclude ="^/home/tmick/.clamtk/viruses" --exclude ="^/home/tmick/Documents/ACI_Learning/CEH/" --exclude = "^/home/tmick/Nextcloud/Documents/ACI_Learning/*" --exclude ="^/home/tmick/Nextcloud/*"

Re: [clamav-users] How to get rid of or Fix clamonacc error

2023-03-22 Thread newcomer01 via clamav-users
exact but please check your path's - some will so not work aner the asterik "*" i think will also not work  cron: 0 1 * * * clammy.sh - always space between the values Von / From: Clamav User Mailinglist An / To: Newcomer01

Re: [clamav-users] Be wary of emails with attachments targeting clamav-users list members

2023-03-22 Thread Al Varnell via clamav-users
Just a note that in my experience, e-mail phishing detection is routinely disabled, perhaps because of excessive false positives, but also because signature maintenance appears to be a low priority. Sent from my iPad -Al- On Mar 22, 2023, at 10:44, newcomer01 via clamav-users wrote: > Hi

Re: [clamav-users] How to get rid of or Fix clamonacc error

2023-03-22 Thread newcomer01 via clamav-users
try this, but check my ** COMMENTS ** please --- #!/bin/bash PATH=/bin:/usr/bin:/sbin:/usr/sbin /usr/bin/clamscan --exclude ="^/home/tmick/.clamtk/viruses/" \ --exclude="^/home/tmick/Documents/ACI_Learning/CEH/" \ --exclude="^/home/tmick/Nextcloud/Documents/ACI_Learning/*" ** HERE I DON'T

Re: [clamav-users] How to get rid of or Fix clamonacc error

2023-03-22 Thread newcomer01 via clamav-users
and please note: your own sh script needs chmod 0775 - it must be run as program for all users! your log folder should have chmod 0775 and your log files inside chmod 0644 - bust this are suggestions only Von / From: Clamav User Mailinglist An / To:

Re: [clamav-users] How to get rid of or Fix clamonacc error

2023-03-22 Thread Andrew C Aitchison via clamav-users
[ My previous reply did not reach the list, for reasons I do understand. ] On Tue, 21 Mar 2023, Tim McConnell wrote: Hi Andrew, So maybe I'm mis understanding something. I'm expecting the scan to run once daily at 01:00. Is that not what clamonacc does? I keep getting told to remove it but

Re: [clamav-users] How to get rid of or Fix clamonacc error

2023-03-22 Thread Musc via clamav-users
On 3/22/23 6:22 AM, Andrew C Aitchison via clamav-users wrote: be careful to make sure false positives do no harm, I've had so many positives that I couldn't examine them all. Does this happen to others? What do you do for that? and remember that false negatives do happen frequently

Re: [clamav-users] Funny --include-dir behaviour

2023-03-22 Thread Marc via clamav-users
Sorry, the attachment i will not open! You send over an .de Domain and the descriptions are in french only and contanins ONLY javascript Codes! NO! @Admin: maybe we should block the user from list? Von / From: Clamav Users Ml An / To: Newcomer01

[clamav-users] Be wary of emails with attachments targeting clamav-users list members

2023-03-22 Thread Micah Snyder (micasnyd) via clamav-users
All, Some users have reported receiving emails that appear to be a reply to a clamav-users mailing list thread but are in fact a phishing attempt have attached malware. Most recently, Marc reported receiving an email that appeared to be a reply to an older clamav-users mailing list thread but

Re: [clamav-users] Be wary of emails with attachments targeting clamav-users list members

2023-03-22 Thread Paul Kosinski via clamav-users
I have just started getting these claiming to be relevant to ClamAV, but I have *also* been receiving this sort of thing claiming to be from the Firefox ESR list for months now. I am posting (one of) the HTMLs "about" ClamAV to https://www.clamav.net/reports/malware. Should I also post (one

Re: [clamav-users] How to get rid of or Fix clamonacc error

2023-03-22 Thread Micah Snyder (micasnyd) via clamav-users
> by the way: if you find another anti-virus for linux without using the > terminal (with GUI), let me know, have searched really long time and found > nothing (freeware or commerical). > some companies (e.g eset) had linux version but now they stopped the > development. If you need something

Re: [clamav-users] Be wary of emails with attachments targeting clamav-users list members

2023-03-22 Thread newcomer01 via clamav-users
Hi Paul, yes, submit all files. Maybe ClamAV need different Phising - Sigs for each file or something ... For my submitted file, ClamAV currently not warn ... kind greetings Marc Von / From: Clamav User Mailinglist An / To: Newcomer01

Re: [clamav-users] How to get rid of or Fix clamonacc error

2023-03-22 Thread Tim McConnell via clamav-users
Thanks Micah, This is for Home use so that might be like hunting flies with a Nuclear Warhead. For what it's worth, I did get the scan to complete in 15 hours. Okay well it is a big drive. Now I have a real question:  Using ClamTK to schedule a scan, How do I exclude a Directory? I've tried

Re: [clamav-users] How to get rid of or Fix clamonacc error

2023-03-22 Thread newcomer01 via clamav-users
Hi Tim, äähhmmm why you escape the slash? This is not needed. Try to set follow: --include="^/home/Folder/Folder/Folder/..." ends up with slash! Its better to include as to exclude much more then include. All Path's starts with --include="^/home/..." will be scanned and all others not. Please

Re: [clamav-users] How to get rid of or Fix clamonacc error

2023-03-22 Thread newcomer01 via clamav-users
and please refer the clamscan --help --detect-pua needs "=yes/no" Von / From: Clamav User Mailinglist An / To: Newcomer01 CC / CC: Tim Mcconnell Gesendet / Sent: Mittwoch, März 22, 2023 um

Re: [clamav-users] How to get rid of or Fix clamonacc error

2023-03-22 Thread Tim McConnell via clamav-users
On Wed, 2023-03-22 at 18:15 +, newcomer01 via clamav-users wrote: > äähhmmm why you escape the slash? This is not needed. I didn't set that it was done by ClamTK (the GUI Interface) not me. so from the pointers you gave (Marc) ClamTK has bugs? and I should just schedule the cronjob manually?

Re: [clamav-users] How to get rid of or Fix clamonacc error

2023-03-22 Thread newcomer01 via clamav-users
Additional: if you really want only to exclude didn't use the "-dir" parameters, with this I had lot of trouble in the past. Use instead --exclude="^/home/Folder/Folder/..." and yes, you always need the complete path! Von / From: Clamav User Mailinglist

Re: [clamav-users] How to get rid of or Fix clamonacc error

2023-03-22 Thread newcomer01 via clamav-users
Tim, it's not heavy write a own bash/sh script - to apply code to execute in cronjob isn't the best way. Write a small script and this start with your cronjob - that's all. If i can help, then i will do this. I had at the beginning clamTK too, but the complete tool didn't work here (but for

Re: [clamav-users] Be wary of emails with attachments targeting clamav-users list members

2023-03-22 Thread Steve Basford via clamav-users
The attached file was some small HTML file containing malicious obfuscated javascript. Just to note that at my workplace 1 user received a similar email, using older email threads to make it look convincing and a with a single html attachment. 0/55 av's so far 6 hours after submitting..