Hi All!

Suddenly, I found all my auto updates are failing, but dont
know, when this starts. I followed the link in the essage, which
sends the browser to:
https://database.clamav.net/main.cvd
but I am getting an strange message in that page:



BTW, this is the address, you'll fid in this web, as the link to the dailys too.

How can I proceed?

Thanks,
Manfred

Any idea what started this off? Did you make any changes to your system that might be responsible for it? If so, you will need to do some configuration to some software to allow ClamWin to auto update.

Can you update ClamWin manually? If so, that might tell you something. If you can--maybe a firewall/other security product prevents ClamWin autoupdates and needs to be configured to allow it.

You can go to https://www.clamav.net/downloads on the web and access the Clam AV databases (main/daily/bytecode) to download them manually outside of ClamWin.

Let us know how it goes.

Thanks for using ClamWin!

Regards,

Hello!

I've written exactly the message, I've got, when I followed the link.

I just tried it again this moment and I am blocked as before and as I initially wrote.

For this reason, manual updates are failling too.

As a workaround, I deleted the database and visited the page via the
tor-network and downloaded the datase manually.
This is nothing which clamav can do, becuase it does not "talk" sock5.

There where no changes to firewall or at least, something, that I remember.
I even just temporarely monitored the destionation via tcpdump and at least
for the last hour, there where no activity to the addresses, just rare attempts
to update.

I do not know, whome to contact.

Thanks,
Manfred

First, contact Clam Av via contact information at their official web site to see if they do block certain ISPs from downloading their signatures. Tell them your ISP and see if it is blocked.

Then scan your computer with a real-time Av. Follow that with a scan by Malwarebytes Free.

Then get into Safe Mode and repeat the scans.

Let us know how it goes.

Regards,

Hello!



I have no ideo, how to contact someone there, because their website blocks me!
>https://www.manfbraun.de/cont/misc/TempImages/2018-10-27--clamav-downloads-blocked--Capture--pc75.png<
According to my current virusscanners (clam av, with manually loaded patterns and to MacAfee) my
computer is virus-free and there is no traffice to cloudflare or clamav which would explain
the blocking!
I provided an image from my website - but this is not displayed here (probably,
because this website does not has httpS until now) - so I am showing the path ...

A mailaddress for clamav would be probably a chance.

Thanks,
Manfred

Hi !

Another good thing would be clamav database download to use
a sock5 proxy, which could use transport tor - so one would have
another ip-address for each request.
I tried it, but it does not work.

Regards,
Manfred

I got this address from their web site: clamav-site@cisco.com which is the address for the Clam AV web team. Try to contact them and see if they can help.

Regards,

Yes, thanks - saw this and asked them already.
Just another thing is to look, if there are blockings for my ip-address,
thats on my plan at least.

Regards,
Manfred