Re: [Clamav-devel] clamd false positive, (Oversized.Zip on small zip files)

2007-05-17 Thread Sergey
On Monday 14 May 2007, Tomasz Kojm wrote:

 Martin Blapp [EMAIL PROTECTED] wrote:
 
  What do you propose ? Is there a easy config fix for clamd or are we lost ?
 
 man clamd.conf

Are you remember it ? ;-)

===
Subject: Re: [clamd/clamscan (?)] Oversized.RAR false positives
From: Tomasz Kojm [EMAIL PROTECTED]
To: Sergey Y. Afonin [EMAIL PROTECTED]
Date: 2004-11-29 01:37

On Sat, 27 Nov 2004 10:42:04 +0400 Sergey Y. Afonin [EMAIL PROTECTED] wrote:

 Subject: [wish] ArchiveMaxCompressionRatio
 Date: Wednesday 24 November 2004 12:16
 From: Sergey [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
  ^
should be @lists.clamav.net

 checked archive and to not check Compression Ratio for archives, which
 in the unpacked no more X:
 
 NoCheckCompressionRatioBefore 10M 

Good idea!

-- 
   oo. Tomasz Kojm [EMAIL PROTECTED]
  (\/)\. http://www.ClamAV.net/gpg/tkojm.gpg
 \..._ 0DCA5A08407D5288279DB43454822DC8985A444B
   //\   /\  Sun Nov 28 22:37:04 CET 2004
  
===

-- 
Regards,
Sergey
___
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net


[Clamav-devel] LibClamAV Warning: Unknown subsystem in PE header (0x10)

2007-05-17 Thread Gianluigi Tiesi
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

currently 16 (0x10) subsystem is
#define IMAGE_SUBSYSTEM_WINDOWS_BOOT_APPLICATION 16

found in some native (kernel mode) apps of windows vista

pe.c:
line 575, it's enough a new case of the switch


the complete list I have in wdk headers
#define IMAGE_SUBSYSTEM_UNKNOWN  0   // Unknown subsystem.
#define IMAGE_SUBSYSTEM_NATIVE   1   // Image doesn't require a 
subsystem.
#define IMAGE_SUBSYSTEM_WINDOWS_GUI  2   // Image runs in the Windows 
GUI subsystem.
#define IMAGE_SUBSYSTEM_WINDOWS_CUI  3   // Image runs in the Windows 
character subsystem.
#define IMAGE_SUBSYSTEM_OS2_CUI  5   // image runs in the OS/2 
character subsystem.
#define IMAGE_SUBSYSTEM_POSIX_CUI7   // image runs in the Posix 
character subsystem.
#define IMAGE_SUBSYSTEM_NATIVE_WINDOWS   8   // image is a native Win9x 
driver.
#define IMAGE_SUBSYSTEM_WINDOWS_CE_GUI   9   // Image runs in the Windows 
CE subsystem.
#define IMAGE_SUBSYSTEM_EFI_APPLICATION  10  //
#define IMAGE_SUBSYSTEM_EFI_BOOT_SERVICE_DRIVER  11   //
#define IMAGE_SUBSYSTEM_EFI_RUNTIME_DRIVER   12  //
#define IMAGE_SUBSYSTEM_EFI_ROM  13
#define IMAGE_SUBSYSTEM_XBOX 14
#define IMAGE_SUBSYSTEM_WINDOWS_BOOT_APPLICATION 16

so you can also add XBOX

Regards
- --
Gianluigi Tiesi [EMAIL PROTECTED]
EDP Project Leader
Netfarm S.r.l. - http://www.netfarm.it/
Free Software: http://oss.netfarm.it/

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGTDbM3UE5cRfnO04RApqFAJ4me30pdOn/rcfJeuc339HKZzeJ7gCgpwnu
HGMEpHjaH66rbaClTs7+x8c=
=WS3N
-END PGP SIGNATURE-
___
http://lurker.clamav.net/list/clamav-devel.html
Please submit your patches to our Bugzilla: http://bugs.clamav.net