Re: clamav-users Digest, Vol 258, Issue 1

Paul Netpresto via clamav-users <[email protected]> Wed, 20 May 2026 17:37:32 +0100
Newsgroups gmane.comp.security.virus.clamav.user
Message-ID <[email protected]>
This is a multi-part message in MIME format.
--===============6021813196320475937==
Content-Type: multipart/alternative;
 boundary="------------wzzAtApyg0sQfsFzcPH1vbF8"
Content-Language: en-GB

This is a multi-part message in MIME format.
--------------wzzAtApyg0sQfsFzcPH1vbF8
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit

Hello

Try removing /var/lib/clamav/freshclam.dat then run freshclam again.

Paul

On 20/05/2026 16:58, Newcomer01 via clamav-users wrote:
> bugzilla.clamav.net <http://bugzilla.clamav.net> returns a timeout at 
> present, maybe a issue ticket 
> https://github.com/Cisco-Talos/clamav/issues on github ist the better 
> place?
> No current.cvd.clamav.net itself isn't down, i got every day my 
> updates from there
>> Wed May 20 14:33:33 2026 -> --------------------------------------
>> Wed May 20 14:33:33 2026 -> daily database available for download 
>> (remote version: 28006)
>> Wed May 20 14:33:46 2026 -> daily.cvd updated (version: 28006, sigs: 
>> 355458, f-level: 90, builder: svc.clamav-publisher)
>> Wed May 20 14:33:46 2026 -> main database available for download 
>> (remote version: 63)
>> Wed May 20 14:34:08 2026 -> main.cvd updated (version: 63, sigs: 
>> 3287027, f-level: 90, builder: tomjudge)
>> Wed May 20 14:34:08 2026 -> bytecode database available for download 
>> (remote version: 339)
>> Wed May 20 14:34:10 2026 -> bytecode.cvd updated (version: 339, sigs: 
>> 80, f-level: 90, builder: nrandolp)
>> Wed May 20 15:00:02 2026 -> --------------------------------------
>> Wed May 20 15:00:02 2026 -> daily.cvd database is up-to-date 
>> (version: 28006, sigs: 355458, f-level: 90, builder: 
>> svc.clamav-publisher)
>> Wed May 20 15:00:02 2026 -> main.cvd database is up-to-date (version: 
>> 63, sigs: 3287027, f-level: 90, builder: tomjudge)
>> Wed May 20 15:00:02 2026 -> bytecode.cvd database is up-to-date 
>> (version: 339, sigs: 80, f-level: 90, builder: nrandolp)
>> Wed May 20 16:00:02 2026 -> --------------------------------------
>> Wed May 20 16:00:02 2026 -> daily.cvd database is up-to-date 
>> (version: 28006, sigs: 355458, f-level: 90, builder: 
>> svc.clamav-publisher)
>> Wed May 20 16:00:02 2026 -> main.cvd database is up-to-date (version: 
>> 63, sigs: 3287027, f-level: 90, builder: tomjudge)
>> Wed May 20 16:00:02 2026 -> bytecode.cvd database is up-to-date 
>> (version: 339, sigs: 80, f-level: 90, builder: nrandolp)
>> Wed May 20 17:00:02 2026 -> --------------------------------------
>> Wed May 20 17:00:02 2026 -> daily.cvd database is up-to-date 
>> (version: 28006, sigs: 355458, f-level: 90, builder: 
>> svc.clamav-publisher)
>> Wed May 20 17:00:02 2026 -> main.cvd database is up-to-date (version: 
>> 63, sigs: 3287027, f-level: 90, builder: tomjudge)
>> Wed May 20 17:00:02 2026 -> bytecode.cvd database is up-to-date 
>> (version: 339, sigs: 80, f-level: 90, builder: nrandolp)
>
>
> Von / From: 	clamav-users ML <mailto:[email protected]>
> An / To: 	Newcomer01 <mailto:[email protected]>
> CC / CC: 	DWCC Computers <mailto:[email protected]>
> Gesendet / Sent: 	Mittwoch, Mai 20, 2026 um 04:00 (at 04:00 AM) +0200
> Betreff / Subject: 	Re: [clamav-users] clamav-users Digest, Vol 258, 
> Issue 1
>
>> Hi Steve,
>>
>> The error is:
>>
>> Your network is explicitly denied by the fresh clam CDN.
>> In order to rectify this please check that you are:
>> a. Running an up-to-date version of fresh clam
>> b. Running fresh clam no more than once an hour
>> c. If you have checked a and b, please open a ticket at 
>> bugzilla.clamav.net <http://bugzilla.clamav.net> under the mirrors 
>> component and we will investigate while your network is blocked.
>> ERROR: Database uptech process failed: forbidden, blocked by CDN.
>> ERROR: Update failed.
>>
>> Seems to me last time I checked clamav.net <http://clamav.net>, that 
>> URL was down completely, or bugzilla was down at least.
>>
>> So how do I fix that CDN error which is prohibiting downloads?
>>
>> Thanks,
>> Dave
>> ---
>>
>>
>> On Tue, May 12, 2026, 08:04 <[email protected]> 
>> wrote:
>>
>>
>>     ---------- Forwarded message ----------
>>     Date: Mon, 11 May 2026 22:09:09 -0400
>>     Subject: [clamav-users] Help with ClamWin AV Definitions
>>     Hello,
>>
>>     I have seen postings on various places about ClamWin Antivirus
>>     definitions not working lately. It looks to me like a certificate
>>     that was set up to allow Windoze permissions to access the
>>     database on some Linux Server has expired as of last year, and
>>     therefore, definitions do not automatically (or manually)
>>     download. I am feeling very computer illiterate at this point,
>>     but I am sure some of you have a solution for how an old Windows
>>     user can get their machines to update the Clamwin Antivirus
>>     definitions either manually or automatically.
>>
>>     I used to write to one of the ClamWin administrators "Alex" when
>>     I needed help, but with most of the ClamWin stuff on Sourceforge
>>     taken down, he is no longer reachable either.
>>
>>     Can someone please tell me in precise detail how to update the
>>     virus definitions on a dozen different Windows computers of
>>     various ages (Win98SE thru Win 11). A complete list of steps
>>     please. Do I need a local Linux server to do this, or can I just
>>     pull them off of a server already existing by changing some local
>>     settings?
>>
>>     Thanks in advance for your help!
>>
>>     Dave
>>
>>     ---------- Forwarded message ----------
>>     From: Steve Basford <[email protected]>
>>
>>
>>     On 12 May 2026 03:10:19 DWCC Computers via clamav-users
>>     <[email protected]> wrote:
>>
>>>     Hello,
>>>
>>>     I have seen postings on various places about ClamWin Antivirus
>>>     definitions not working lately. It looks to me like a
>>>     certificate that was set up to allow Windoze permissions to
>>>     access the database on some Linux Server has expired as of last
>>>     year, and therefore, definitions do not automatically (or
>>>     manually) download. I am feeling very computer illiterate at
>>>     this point, but I am sure some of you have a solution for how an
>>>     old Windows user can get their machines to update the Clamwin
>>>     Antivirus definitions either manually or automatically.
>>>
>>
>>     ClamWin probably uses an outdated engine.
>>
>>     You maybe able to use their updated engine from here....
>>
>>     https://oss.netfarm.it/clamav/
>>
>>     eg. clamav-1.5.2-legacy-x64.7z
>>
>>     "You can use updated version of clamav binaries with ClamWin,
>>     download 32bit version, extract and replace all files in ClamWin
>>     bin directory, you also need to replace clamwin.zip in the
>>     ClamWin lib folder with this one."
>>
>>     Obviously this doesn't use the official engine so you'll probably
>>     need to get more help here...
>>
>>     https://forums.clamwin.com/
>>
>>     Cheers,
>>
>>     Steve
>>     Sanesecurity
>>
>>
>> _______________________________________________
>>
>> Manage your clamav-users mailing list subscription / unsubscribe:
>> https://lists.clamav.net/mailman/listinfo/clamav-users
>>
>>
>> Help us build a comprehensive ClamAV guide:
>> https://github.com/Cisco-Talos/clamav-documentation
>>
>> https://docs.clamav.net/#mailing-lists-and-chat
>
>
> _______________________________________________
>
> Manage your clamav-users mailing list subscription / unsubscribe:
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/Cisco-Talos/clamav-documentation
>
> https://docs.clamav.net/#mailing-lists-and-chat
--------------wzzAtApyg0sQfsFzcPH1vbF8
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit

<!DOCTYPE html>
<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <p>Hello </p>
    <p>Try removing /var/lib/clamav/freshclam.dat then run freshclam
      again.</p>
    <p>Paul</p>
    <div class="moz-cite-prefix">On 20/05/2026 16:58, Newcomer01 via
      clamav-users wrote:<br>
    </div>
    <blockquote type="cite"
      cite="mid:[email protected]">
      <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
      <div id="smartTemplate4-template"
        data-smarttemplate-hash="47148ae4"><a
          href="http://bugzilla.clamav.net" moz-do-not-send="true">bugzilla.clamav.net</a> returns
        a timeout at present, maybe a issue ticket <a
          class="moz-txt-link-freetext"
          href="https://github.com/Cisco-Talos/clamav/issues"
          moz-do-not-send="true">https://github.com/Cisco-Talos/clamav/issues</a>
        on github ist the better place?<br>
        No current.cvd.clamav.net itself isn't down, i got every day my
        updates from there<br>
        <blockquote type="cite">Wed May 20 14:33:33 2026 -&gt;
          --------------------------------------<br>
          Wed May 20 14:33:33 2026 -&gt; daily database available for
          download (remote version: 28006)<br>
          Wed May 20 14:33:46 2026 -&gt; daily.cvd updated (version:
          28006, sigs: 355458, f-level: 90, builder:
          svc.clamav-publisher)<br>
          Wed May 20 14:33:46 2026 -&gt; main database available for
          download (remote version: 63)<br>
          Wed May 20 14:34:08 2026 -&gt; main.cvd updated (version: 63,
          sigs: 3287027, f-level: 90, builder: tomjudge)<br>
          Wed May 20 14:34:08 2026 -&gt; bytecode database available for
          download (remote version: 339)<br>
          Wed May 20 14:34:10 2026 -&gt; bytecode.cvd updated (version:
          339, sigs: 80, f-level: 90, builder: nrandolp)<br>
          Wed May 20 15:00:02 2026 -&gt;
          --------------------------------------<br>
          Wed May 20 15:00:02 2026 -&gt; daily.cvd database is
          up-to-date (version: 28006, sigs: 355458, f-level: 90,
          builder: svc.clamav-publisher)<br>
          Wed May 20 15:00:02 2026 -&gt; main.cvd database is up-to-date
          (version: 63, sigs: 3287027, f-level: 90, builder: tomjudge)<br>
          Wed May 20 15:00:02 2026 -&gt; bytecode.cvd database is
          up-to-date (version: 339, sigs: 80, f-level: 90, builder:
          nrandolp)<br>
          Wed May 20 16:00:02 2026 -&gt;
          --------------------------------------<br>
          Wed May 20 16:00:02 2026 -&gt; daily.cvd database is
          up-to-date (version: 28006, sigs: 355458, f-level: 90,
          builder: svc.clamav-publisher)<br>
          Wed May 20 16:00:02 2026 -&gt; main.cvd database is up-to-date
          (version: 63, sigs: 3287027, f-level: 90, builder: tomjudge)<br>
          Wed May 20 16:00:02 2026 -&gt; bytecode.cvd database is
          up-to-date (version: 339, sigs: 80, f-level: 90, builder:
          nrandolp)<br>
          Wed May 20 17:00:02 2026 -&gt;
          --------------------------------------<br>
          Wed May 20 17:00:02 2026 -&gt; daily.cvd database is
          up-to-date (version: 28006, sigs: 355458, f-level: 90,
          builder: svc.clamav-publisher)<br>
          Wed May 20 17:00:02 2026 -&gt; main.cvd database is up-to-date
          (version: 63, sigs: 3287027, f-level: 90, builder: tomjudge)<br>
          Wed May 20 17:00:02 2026 -&gt; bytecode.cvd database is
          up-to-date (version: 339, sigs: 80, f-level: 90, builder:
          nrandolp)</blockquote>
        <br>
      </div>
      <div id="smartTemplate4-quoteHeader"><br>
        <table
style="border-collapse: collapse; width: 100%; border-top: 2px solid #808080; font-family: Verdana, Arial, sans-serif; color: #000000; font-size: 13px; background-color: #eeeeee;">
          <tbody>
            <tr style="vertical-align: top;">
              <td style="width: 120px; vertical-align: middle;"><span
                  style="color: #cc0000;">Von / From:</span></td>
              <td style="vertical-align: middle;"><a
                  style="text-decoration: none;"
                  href="mailto:[email protected]"
                  moz-do-not-send="true">clamav-users ML</a></td>
            </tr>
            <tr style="vertical-align: top;">
              <td style="width: 120px; vertical-align: middle;"><span
                  style="color:#cc0000;">An / To:</span></td>
              <td style="vertical-align: middle;"><a
                  style="text-decoration: none;"
                  href="mailto:[email protected]"
                  moz-do-not-send="true">Newcomer01</a></td>
            </tr>
            <tr style="vertical-align: top;">
              <td style="width: 120px; vertical-align: middle;"><span
                  style="color: #cc0000;">CC / CC:</span></td>
              <td style="vertical-align: middle;"><a
                  style="text-decoration: none;"
                  href="mailto:[email protected]"
                  moz-do-not-send="true">DWCC Computers</a></td>
            </tr>
            <tr style="vertical-align: top;">
              <td style="width: 120px; vertical-align: middle;"><span
                  style="color: #cc0000;">Gesendet / Sent:</span></td>
              <td style="vertical-align: middle;"> Mittwoch, Mai 20,
                2026 um 04:00 (at 04:00 AM) +0200</td>
            </tr>
            <tr style="vertical-align: top;">
              <td style="width: 120px; vertical-align: middle;"><span
                  style="color: #cc0000;">Betreff / Subject:</span></td>
              <td style="vertical-align: middle;">Re: [clamav-users]
                clamav-users Digest, Vol 258, Issue 1</td>
            </tr>
          </tbody>
        </table>
      </div>
      <blockquote type="cite"
cite="mid:CAFmLKsWk4n8gDM+LXTs1DM5EnzvL+ZXqnpE60cXoOTzBu4EbMQ@mail.gmail.com">
        <meta http-equiv="content-type"
          content="text/html; charset=UTF-8">
        <div dir="auto">
          <div>Hi Steve,
            <div dir="auto"><br>
            </div>
            <div dir="auto">The error is:</div>
            <div dir="auto"><br>
            </div>
            <div dir="auto">Your network is explicitly denied by the
              fresh clam CDN.</div>
            <div dir="auto">In order to rectify this please check that
              you are:</div>
            <div dir="auto">a. Running an up-to-date version of fresh
              clam</div>
            <div dir="auto">b. Running fresh clam no more than once an
              hour</div>
            <div dir="auto">c. If you have checked a and b, please open
              a ticket at <a href="http://bugzilla.clamav.net"
                moz-do-not-send="true">bugzilla.clamav.net</a> under the
              mirrors component and we will investigate while your
              network is blocked.</div>
            <div dir="auto">ERROR: Database uptech process failed:
              forbidden, blocked by CDN.</div>
            <div dir="auto">ERROR: Update failed.</div>
            <div dir="auto"><br>
            </div>
            <div dir="auto">Seems to me last time I checked <a
                href="http://clamav.net" moz-do-not-send="true">clamav.net</a>,
              that URL was down completely, or bugzilla was down at
              least.</div>
            <div dir="auto"><br>
            </div>
            <div dir="auto">So how do I fix that CDN error which is
              prohibiting downloads?</div>
            <div dir="auto"><br>
            </div>
            <div dir="auto">Thanks,</div>
            <div dir="auto">Dave</div>
            <div dir="auto">---</div>
            <br>
            <br>
            <div class="gmail_quote gmail_quote_container">
              <div dir="ltr" class="gmail_attr">On Tue, May 12, 2026,
                08:04 &lt;<a
                  href="mailto:[email protected]"
                  moz-do-not-send="true" class="moz-txt-link-freetext">[email protected]</a>&gt;
                wrote:<br>
              </div>
              <blockquote class="gmail_quote"
style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><br>
                ---------- Forwarded message ----------<br>
                Date: Mon, 11 May 2026 22:09:09 -0400<br>
                Subject: [clamav-users] Help with ClamWin AV Definitions<br>
                <div dir="auto">Hello,
                  <div dir="auto"><br>
                  </div>
                  <div dir="auto">I have seen postings on various places
                    about ClamWin Antivirus definitions not working
                    lately. It looks to me like a certificate that was
                    set up to allow Windoze permissions to access the
                    database on some Linux Server has expired as of last
                    year, and therefore, definitions do not
                    automatically (or manually) download. I am feeling
                    very computer illiterate at this point, but I am
                    sure some of you have a solution for how an old
                    Windows user can get their machines to update the
                    Clamwin Antivirus definitions either manually or
                    automatically.</div>
                  <div dir="auto"><br>
                  </div>
                  <div dir="auto">I used to write to one of the ClamWin
                    administrators "Alex" when I needed help, but with
                    most of the ClamWin stuff on Sourceforge taken down,
                    he is no longer reachable either.</div>
                  <div dir="auto"><br>
                  </div>
                  <div dir="auto">Can someone please tell me in precise
                    detail how to update the virus definitions on a
                    dozen different Windows computers of various ages
                    (Win98SE thru Win 11). A complete list of steps
                    please. Do I need a local Linux server to do this,
                    or can I just pull them off of a server already
                    existing by changing some local settings?</div>
                  <div dir="auto"><br>
                  </div>
                  <div dir="auto">Thanks in advance for your help!</div>
                  <div dir="auto"><br>
                  </div>
                  <div dir="auto">Dave</div>
                </div>
                <br>
                ---------- Forwarded message ----------<br>
                From: Steve Basford &lt;<a
                  href="mailto:[email protected]"
                  target="_blank" rel="noreferrer"
                  moz-do-not-send="true" class="moz-txt-link-freetext">[email protected]</a>&gt;<br>
                <br>
                <div>
                  <div dir="auto">
                    <div dir="auto"><br>
                    </div>
                    <div id="m_-5503972665658463610aqm-original"
                      style="color:black">
                      <div>
                        <div style="color:black">
                          <p
style="color:black;font-size:10pt;font-family:sans-serif;margin:8pt 0px">On
                            12 May 2026 03:10:19 DWCC Computers via
                            clamav-users &lt;<a
href="mailto:[email protected]" target="_blank"
                              rel="noreferrer" moz-do-not-send="true"
                              class="moz-txt-link-freetext">[email protected]</a>&gt;
                            wrote:</p>
                          <blockquote type="cite" class="gmail_quote"
style="margin:0px 0px 0px 0.75ex;border-left:1px solid rgb(128,128,128);padding-left:0.75ex">
                            <div dir="auto">Hello,
                              <div dir="auto"><br>
                              </div>
                              <div dir="auto">I have seen postings on
                                various places about ClamWin Antivirus
                                definitions not working lately. It looks
                                to me like a certificate that was set up
                                to allow Windoze permissions to access
                                the database on some Linux Server has
                                expired as of last year, and therefore,
                                definitions do not automatically (or
                                manually) download. I am feeling very
                                computer illiterate at this point, but I
                                am sure some of you have a solution for
                                how an old Windows user can get their
                                machines to update the Clamwin Antivirus
                                definitions either manually or
                                automatically.</div>
                              <div dir="auto"><br>
                              </div>
                            </div>
                          </blockquote>
                        </div>
                      </div>
                    </div>
                    <div dir="auto"><br>
                    </div>
                    <div dir="auto">ClamWin probably uses an outdated
                      engine.</div>
                    <div dir="auto"><br>
                    </div>
                    <div dir="auto">You maybe able to use their updated
                      engine from here....</div>
                    <div dir="auto"><br>
                    </div>
                    <div dir="auto"><a
                        href="https://oss.netfarm.it/clamav/"
                        target="_blank" rel="noreferrer"
                        moz-do-not-send="true"
                        class="moz-txt-link-freetext">https://oss.netfarm.it/clamav/</a></div>
                    <div dir="auto"><br>
                    </div>
                    <div dir="auto">eg. clamav-1.5.2-legacy-x64.7z</div>
                    <div dir="auto"><br>
                    </div>
                    <div dir="auto">"You can use updated version of
                      clamav binaries with ClamWin, download 32bit
                      version, extract and replace all files in ClamWin
                      bin directory, you also need to replace
                      clamwin.zip in the ClamWin lib folder with this
                      one."</div>
                    <div dir="auto"><br>
                    </div>
                    <div dir="auto">Obviously this doesn't use the
                      official engine so you'll probably need to get
                      more help here...</div>
                    <div dir="auto"><br>
                    </div>
                    <div dir="auto"><a
                        href="https://forums.clamwin.com/"
                        target="_blank" rel="noreferrer"
                        moz-do-not-send="true"
                        class="moz-txt-link-freetext">https://forums.clamwin.com/</a></div>
                    <div dir="auto"><br>
                    </div>
                    <div id="m_-5503972665658463610aqm-signature"
                      dir="auto" style="color:black">
                      <div dir="auto">Cheers,</div>
                      <div dir="auto"><br>
                      </div>
                      <div dir="auto">Steve</div>
                      <div dir="auto">Sanesecurity</div>
                    </div>
                  </div>
                </div>
                <br>
              </blockquote>
            </div>
          </div>
        </div>
        <br>
        <fieldset class="moz-mime-attachment-header"></fieldset>
        <pre wrap="" class="moz-quote-pre">_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
<a class="moz-txt-link-freetext"
        href="https://lists.clamav.net/mailman/listinfo/clamav-users"
        moz-do-not-send="true">https://lists.clamav.net/mailman/listinfo/clamav-users</a>


Help us build a comprehensive ClamAV guide:
<a class="moz-txt-link-freetext"
        href="https://github.com/Cisco-Talos/clamav-documentation"
        moz-do-not-send="true">https://github.com/Cisco-Talos/clamav-documentation</a>

<a class="moz-txt-link-freetext"
        href="https://docs.clamav.net/#mailing-lists-and-chat"
        moz-do-not-send="true">https://docs.clamav.net/#mailing-lists-and-chat</a>
</pre>
      </blockquote>
      <br>
      <br>
      <fieldset class="moz-mime-attachment-header"></fieldset>
      <pre wrap="" class="moz-quote-pre">_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
<a class="moz-txt-link-freetext" href="https://lists.clamav.net/mailman/listinfo/clamav-users">https://lists.clamav.net/mailman/listinfo/clamav-users</a>


Help us build a comprehensive ClamAV guide:
<a class="moz-txt-link-freetext" href="https://github.com/Cisco-Talos/clamav-documentation">https://github.com/Cisco-Talos/clamav-documentation</a>

<a class="moz-txt-link-freetext" href="https://docs.clamav.net/#mailing-lists-and-chat">https://docs.clamav.net/#mailing-lists-and-chat</a>
</pre>
    </blockquote>
  </body>
</html>

--------------wzzAtApyg0sQfsFzcPH1vbF8--

--===============6021813196320475937==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________

Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

--===============6021813196320475937==--