[clamav-users] Restriction of downloads

Sat Mar 13 18:44:51 UTC 2021

Now, I give a try on clamwin ! 

You have the latest version of ClamWin Free Antivirus (0.99.4). 
ClamWin Free Antivirus is a free software project 

So, it is outdated too ! 
No windows recent build too ! 

No windows, no ArcaOS... only linux based system seems to be updated 
Is ClamAV now linux only program ? 

" 

ClamAV update process started at Sat Mar 13 19:35:44 2021 
main.cld is up to date (version: 59, sigs: 4564902, f-level: 60, builder: sigmgr) 
WARNING: getfile: Unknown response from database.clamav.net (IP: 104.16.218.84) 
WARNING: getpatch: Can't download daily-26080.cdiff from database.clamav.net 
WARNING: getfile: Unknown response from database.clamav.net (IP: 104.16.219.84) 
WARNING: getpatch: Can't download daily-26080.cdiff from database.clamav.net 
WARNING: getpatch: Can't download daily-26080.cdiff from database.clamav.net 
WARNING: Can't download daily.cvd from database.clamav.net 
Trying again in 5 secs... 
ClamAV update process started at Sat Mar 13 19:35:51 2021 
main.cld is up to date (version: 59, sigs: 4564902, f-level: 60, builder: sigmgr) 
WARNING: getpatch: Can't download daily-26080.cdiff from database.clamav.net 
WARNING: getpatch: Can't download daily-26080.cdiff from database.clamav.net 
WARNING: getpatch: Can't download daily-26080.cdiff from database.clamav.net 
WARNING: Can't download daily.cvd from database.clamav.net 
Trying again in 5 secs... 
ClamAV update process started at Sat Mar 13 19:35:58 2021 
main.cld is up to date (version: 59, sigs: 4564902, f-level: 60, builder: sigmgr) 
WARNING: getpatch: Can't download daily-26080.cdiff from database.clamav.net 
WARNING: getpatch: Can't download daily-26080.cdiff from database.clamav.net 
ERROR: Can't download daily.cvd from database.clamav.net 
Giving up on database.clamav.net... 
Update failed. Your network may be down or none of the mirrors listed in o:\utilis~1\temp\clamwinportabletemp\tmpgtif1i is working. Check http://www.clamav.net/doc/mirrors-faq.html for possible reasons. 

-------------------------------------- 
Completed 
-------------------------------------- 

" 

"Ce message et toutes ses pièces jointes sont établis à l'intention exclusive de son/ses destinataire(s) et sont confidentiels. Si vous recevez ce message par erreur, merci de le détruire et d'en avertir immédiatement l'expéditeur. Toute utilisation de ce message et/ou de son contenu par une personne autre qu'un destinataire, et toute diffusion ou publication ultérieure du contenu de ce message, en totalité ou en partie, est interdite sauf autorisation préalable et écrite de l'émetteur" 
----- Mail original -----

De: "Rémy DODIN via clamav-users" <clamav-users at lists.clamav.net> 
À: "ClamAV users ML" <clamav-users at lists.clamav.net> 
Cc: "Rémy DODIN" <r.dodin at free.fr> 
Envoyé: Samedi 13 Mars 2021 14:30:31 
Objet: Re: [clamav-users] Restriction of downloads 

I'll contact Synology support team. 

Regards 
Rémy 

"Ce message et toutes ses pièces jointes sont établis à l'intention exclusive de son/ses destinataire(s) et sont confidentiels. Si vous recevez ce message par erreur, merci de le détruire et d'en avertir immédiatement l'expéditeur. Toute utilisation de ce message et/ou de son contenu par une personne autre qu'un destinataire, et toute diffusion ou publication ultérieure du contenu de ce message, en totalité ou en partie, est interdite sauf autorisation préalable et écrite de l'émetteur" 
----- Mail original -----

De: "Eero Volotinen" <eero.volotinen at iki.fi> 
À: "ClamAV users ML" <clamav-users at lists.clamav.net> 
Envoyé: Samedi 13 Mars 2021 14:19:22 
Objet: Re: [clamav-users] Restriction of downloads 

Synology. 

Eero 

On Sat, Mar 13, 2021 at 3:09 PM Rémy DODIN via clamav-users < clamav-users at lists.clamav.net > wrote: 

My synology Clamav is at "Upgraded ClamAV engine to 0.102.3" 
As it is written here and my packets are at latest update level. 

https://www.synology.com/fr-fr/releaseNote/AntiVirus?model=DS713%2B 

But virus signature is unabled to be refreshed as I wrote it ! 
It worked until last refresh from 03/06/21 and then, high CPU and storage utilisation and no refresh. 
It looks like it is going into a loop trying to get virus database updates.... (If it goes into a loop, then the refresh tool may have issue ! and may be you expected abuse due to high freshclam or virus database update is into a loop due incorrect process ? 

If a loop exist, who's the culprit ? (I'm not a developper and just end user with no skills) 
synology ? or Clamav ? 

I just run again database update option and after more than 4 minutes, it was always runing and I have to force a stop to not have it running 24/24h. 
Consuming a lot of CPU, energy (not eco friendly) - It is acting like a virus trying to kill a system, strange ! 

Very strange 

Regards 
Rémy 

"Ce message et toutes ses pièces jointes sont établis à l'intention exclusive de son/ses destinataire(s) et sont confidentiels. Si vous recevez ce message par erreur, merci de le détruire et d'en avertir immédiatement l'expéditeur. Toute utilisation de ce message et/ou de son contenu par une personne autre qu'un destinataire, et toute diffusion ou publication ultérieure du contenu de ce message, en totalité ou en partie, est interdite sauf autorisation préalable et écrite de l'émetteur" 

De: "Joel Esler (jesler) via clamav-users" < clamav-users at lists.clamav.net > 
À: "ClamAV users ML" < clamav-users at lists.clamav.net > 
Cc: "Joel Esler (jesler)" < jesler at cisco.com > 
Envoyé: Samedi 13 Mars 2021 13:47:08 
Objet: Re: [clamav-users] Restriction of downloads 

Team— 

The qnap and synology issues are a result of the EOL of <0.100. Not as a result of the abusive downloaders. Two separate issues. 

Our EOL policy that has been in place is “current version with all minor patches and one back with all minor patches”. This has been our policy for about 8–10 years. Our current version is 0.103.1, which means according to our EOL policy, we should allow .103, and .102. Everything below that we should block. 

It is becoming more and more necessary to enforce these cut off points because of many reasons. Load to the mirror network being one. So, .100, and .101 will continue to be supported for a bit, but soon, we’re going to have to cut those off too. 

The vast majority of ClamAV users are on 0.102.4. The outliners are people that haven’t upgraded to a latest version should start upgrading to get ahead of the curve. 

Sent from my  iPhone 

<blockquote>
On Mar 13, 2021, at 05:52, Matus UHLAR - fantomas < uhlar at fantomas.sk > wrote: 

<blockquote>

<blockquote>

<blockquote>

<blockquote>
I just found that my "antivirus essentiel" installed package 

</blockquote>

</blockquote>

</blockquote>

<blockquote>

<blockquote>

<blockquote>
provided by Synology is unable to update virus definition file since 

</blockquote>

</blockquote>

</blockquote>

<blockquote>

<blockquote>

<blockquote>
03/06/2021 ! 

</blockquote>

</blockquote>

</blockquote>

<blockquote>
On 13/03/2021 00:47, G.W. Haywood via clamav-users wrote: 

</blockquote>

<blockquote>

<blockquote>
Then should you not be talking to Synology? 

</blockquote>

</blockquote>

On 13.03.21 11:16, Paul Smith via clamav-users wrote: 

<blockquote>
Maybe Synology and QNAP, etc could run private mirrors for their devices which they don't provide up-to-date Freshclam for... 

</blockquote>

QNAP runs freshclam. checked now with my 419P+: 

ClamAV update process started at Sat Mar 13 12:47:36 2021 
WARNING: getpatch: Can't download main-55.cdiff from database.clamav.net 
ERROR: getpatch: Can't download main-55.cdiff from database.clamav.net 
WARNING: Incremental update failed, trying to download main.cvd 
ERROR: Can't download main.cvd from database.clamav.net 
Giving up on database.clamav.net... 
Update failed. Your network may be down or none of the mirrors listed in /etc/config/freshclam.conf is working. Check http://www.clamav.net/doc/mirrors-faq.html for possible reasons. 

However, many of QNAP devices have obsolete clamav version: 

[~] # freshclam -V 
ClamAV 0.99.3/17260/Wed May 22 12:40:22 2013 

-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/ 
Warning: I wish NOT to receive e-mail advertising to this address. 
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. 
Microsoft dick is soft to do no harm 

_______________________________________________ 

clamav-users mailing list 
clamav-users at lists.clamav.net 
https://lists.clamav.net/mailman/listinfo/clamav-users 

Help us build a comprehensive ClamAV guide: 
https://github.com/vrtadmin/clamav-faq 

http://www.clamav.net/contact.html#ml 

</blockquote>

_______________________________________________ 

clamav-users mailing list 
clamav-users at lists.clamav.net 
https://lists.clamav.net/mailman/listinfo/clamav-users 

Help us build a comprehensive ClamAV guide: 
https://github.com/vrtadmin/clamav-faq 

http://www.clamav.net/contact.html#ml 

_______________________________________________ 

clamav-users mailing list 
clamav-users at lists.clamav.net 
https://lists.clamav.net/mailman/listinfo/clamav-users 

Help us build a comprehensive ClamAV guide: 
https://github.com/vrtadmin/clamav-faq 

http://www.clamav.net/contact.html#ml 

</blockquote>

_______________________________________________ 

clamav-users mailing list 
clamav-users at lists.clamav.net 
https://lists.clamav.net/mailman/listinfo/clamav-users 

Help us build a comprehensive ClamAV guide: 
https://github.com/vrtadmin/clamav-faq 

http://www.clamav.net/contact.html#ml 

_______________________________________________ 

clamav-users mailing list 
clamav-users at lists.clamav.net 
https://lists.clamav.net/mailman/listinfo/clamav-users 

Help us build a comprehensive ClamAV guide: 
https://github.com/vrtadmin/clamav-faq 

http://www.clamav.net/contact.html#ml 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20210313/fa00d7bb/attachment.htm>