[clamav-users] Fwd: [clamav-virusdb] Signatures Published osx - 1
The previous update to this one was daily - 21491 which is the last update available using freshclam. What is the mechanism for bringing this update into the definitions database? -Al- > Begin forwarded message: > > From: nore...@sourcefire.com > Subject: [clamav-virusdb] Signatures Published osx - 1 > Date: April 13, 2016 at 12:59:09 PM PDT > To: clamav-viru...@lists.clamav.net > > > ClamAV Signature Publishing Notice > > Datefile: osx > Version:1 > Publisher: Alain Zidouemba > New Sigs: 656 > Dropped Sigs: 0 > Ignored Sigs: 0 -- Al Varnell Mountain View, CA smime.p7s Description: S/MIME cryptographic signature ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] Error in Make -
Thanks guys. Because of a dependency of our existing system on older version of openssl we are trying an older version of clam. Make did work with 0.98.1 version. Hopefully once we get a confirmation on openssl update we can move on to latest clam. Regards, Kk -Original Message- From: "Steven Morgan"Sent: 14-04-2016 03:08 AM To: "ClamAV users ML" Subject: Re: [clamav-users] Error in Make - Yes, gmake is recommended (although bsd make generally works except for 'make check'). At mbox.c:2816, I have: break; Mine is in the function rfc2047(), not rfc1341(). What is your version of ClamAV? Is it possible that your mbox.c is corrupted? Steve ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
[clamav-users] yara #match does not work with regex
Using #match as a condition in a yara rule to count the occurences of $match doesn't appear to work where $match is a regex. #match only appears to work if $match is a string literal eg "abc123" Is #match intended to work with a regex ? -- David Shrimpton ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] Error in Make - How to get patch 59d05bf.patch
I think the patch he's talking about is here: https://bugzilla.clamav.net/attachment.cgi?id=5481=diff Although it is for an old version of ClamAV (0.98). Is that the version you are using? Steve ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] winnow FP
I don’t think you are in the right place as I can’t find that signature (or any remotely resembling it) in the ClamAV official database. I suspect you are using some 3rd party UNOFFICIAL signatures that are detecting that one. -Al- On Wed, Apr 13, 2016 at 08:20 AM, Alex wrote: > > Hi, > > I don't understand why themastersbaker.com would be tagged? > > # sigtool --find-sigs winnow.spam.ts.untyped.966134 | sigtool --decode-sigs > VIRUS NAME: winnow.spam.ts.untyped.966134 > TARGET TYPE: MAIL > OFFSET: * > DECODED SIGNATURE: > http://themastersbaker.com/ > > > This isn't currently on any other blacklist. Is this the proper > address to request a winnow removal? > > I've already whitelisted it. > Thanks, > Alex smime.p7s Description: S/MIME cryptographic signature ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] Error in Make -
Yes, gmake is recommended (although bsd make generally works except for 'make check'). At mbox.c:2816, I have: break; Mine is in the function rfc2047(), not rfc1341(). What is your version of ClamAV? Is it possible that your mbox.c is corrupted? Steve ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] Error in Make -
Which "make" are you using? Does Clam-AV require GNU Make as well? You might be able to install that as "gmake". (GNU Make and BSD Make aren't entirely compatible - I'm not sure where AIX Make lies on that spectrum.) --- Richard Conto DNA Sequencing Core Biomedical Research Core Facilities Medical School Administration Office of Research NCRC Bldg 14 room 168 -- (734) 764-7620 On Wed, Apr 13, 2016 at 2:29 PM, Krishnakumar Nairwrote: > Thanks for the update Steve. But its error again with gcc in make. > > Please share your valuable inputs. > > clam build 0.98/Aix6.1/gcc4.8.3 > Error -- > mbox.c: In function 'rfc1341': > mbox.c:2816: error: called object '1' is not a function > make: The error code from the last command is 1. > > > Regards, > kk > > On Wed, Apr 13, 2016 at 7:57 PM, Steven Morgan > wrote: > > > Hi, > > > > gcc is needed to compile ClamAV on AIX. Web search "gcc aix" to get info > on > > installing gcc. > > > > Steve > > ___ > > Help us build a comprehensive ClamAV guide: > > https://github.com/vrtadmin/clamav-faq > > > > http://www.clamav.net/contact.html#ml > > > ___ > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > > http://www.clamav.net/contact.html#ml > ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] Error in Make - How to get patch 59d05bf.patch
We have found a mailer @ http://www.gossamer-threads.com/lists/clamav/users/59376 Please share how we can get the patch (#59d05bf.patch) Regards, kk On Wed, Apr 13, 2016 at 11:59 PM, Krishnakumar Nairwrote: > Thanks for the update Steve. But its error again with gcc in make. > > Please share your valuable inputs. > > clam build 0.98/Aix6.1/gcc4.8.3 > Error -- > mbox.c: In function 'rfc1341': > mbox.c:2816: error: called object '1' is not a function > make: The error code from the last command is 1. > > > Regards, > kk > > On Wed, Apr 13, 2016 at 7:57 PM, Steven Morgan > wrote: > >> Hi, >> >> gcc is needed to compile ClamAV on AIX. Web search "gcc aix" to get info >> on >> installing gcc. >> >> Steve >> ___ >> Help us build a comprehensive ClamAV guide: >> https://github.com/vrtadmin/clamav-faq >> >> http://www.clamav.net/contact.html#ml >> > > ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] Error in Make -
Thanks for the update Steve. But its error again with gcc in make. Please share your valuable inputs. clam build 0.98/Aix6.1/gcc4.8.3 Error -- mbox.c: In function 'rfc1341': mbox.c:2816: error: called object '1' is not a function make: The error code from the last command is 1. Regards, kk On Wed, Apr 13, 2016 at 7:57 PM, Steven Morganwrote: > Hi, > > gcc is needed to compile ClamAV on AIX. Web search "gcc aix" to get info on > installing gcc. > > Steve > ___ > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > > http://www.clamav.net/contact.html#ml > ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] Strange problem with custom Yara rule
Please refer to the bug report at: https://bugzilla.clamav.net/show_bug.cgi?id=11552 for the patch to resolve the issue. On Wed, Apr 13, 2016 at 1:32 PM, Kevin Linwrote: > ClamAV, in order to optimize the AC algorithm execution, runs the filetype > signatures alongside the malware detection signatures. ClamAV is set to > immediately return after AC execution if a filetype signature detection > occurs. This unfortunately causes the engine to skip PCRE signature execution. > > > On Wed, Apr 13, 2016 at 1:00 PM, Steven Morgan > wrote: > >> Hi, >> >> Thanks for the example. I've opened bug >> https://bugzilla.clamav.net/show_bug.cgi?id=11552 to track. >> >> Thanks again, >> Steve >> ___ >> Help us build a comprehensive ClamAV guide: >> https://github.com/vrtadmin/clamav-faq >> >> http://www.clamav.net/contact.html#ml >> > > ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] Strange problem with custom Yara rule
ClamAV, in order to optimize the AC algorithm execution, runs the filetype signatures alongside the malware detection signatures. ClamAV is set to immediately return after AC execution if a filetype signature detection occurs. This unfortunately causes the engine to skip PCRE signature execution. On Wed, Apr 13, 2016 at 1:00 PM, Steven Morganwrote: > Hi, > > Thanks for the example. I've opened bug > https://bugzilla.clamav.net/show_bug.cgi?id=11552 to track. > > Thanks again, > Steve > ___ > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > > http://www.clamav.net/contact.html#ml > ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] Strange problem with custom Yara rule
Hi, Thanks for the example. I've opened bug https://bugzilla.clamav.net/show_bug.cgi?id=11552 to track. Thanks again, Steve ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] Strange problem with custom Yara rule
Hi, kionez-- On Apr 13, 2016, at 8:11 AM, kionezwrote: > I'm using it on my antispam server with Debian Jessie (with clamav > 0.99+dfsg-0+deb8u2 and libpcre3 8.35-3.3+deb8u4 ) and also testing on my > laptop with Arch linux (clamav 0.99.1-2 and pcre 8.38-3). I try to > recompile clamav on my laptop and it founds pcre in /usr, as expected. > > I think that pcre works fine, because I can match patterns on email's > content, but not in email headers (i.e.: X-Mailer:, From: etc) This doesn't mention how your email gets processed from your MTA into clamav. Normally, things like amavisd extract the body of the message and any MIME attachments, and scan those components only. They don't scan the entire message or the mail headers. See bypass_decode_parts and keep_decoded_original_maps for amavisd-new, or look for the equivalent in whatever you are using to pass mail into the virus scanning. Regards, -- -Chuck ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
[clamav-users] winnow FP
Hi, I don't understand why themastersbaker.com would be tagged? # sigtool --find-sigs winnow.spam.ts.untyped.966134 | sigtool --decode-sigs VIRUS NAME: winnow.spam.ts.untyped.966134 TARGET TYPE: MAIL OFFSET: * DECODED SIGNATURE: http://themastersbaker.com/ This isn't currently on any other blacklist. Is this the proper address to request a winnow removal? I've already whitelisted it. Thanks, Alex ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] Strange problem with custom Yara rule
#include // created 13/04/2016 16:37 > Hi, > > The first question is: Do you have pcre installed and was it found by > ClamAV .\configure? [cut] Ops, I forgot to mention my system configuration.. sorry. I'm using it on my antispam server with Debian Jessie (with clamav 0.99+dfsg-0+deb8u2 and libpcre3 8.35-3.3+deb8u4 ) and also testing on my laptop with Arch linux (clamav 0.99.1-2 and pcre 8.38-3). I try to recompile clamav on my laptop and it founds pcre in /usr, as expected. I think that pcre works fine, because I can match patterns on email's content, but not in email headers (i.e.: X-Mailer:, From: etc) I try to explain with an example, on http://pastebin.com/gixrDAXq you should find the 3 file used (a simple email and two custom ruleset) using rules from Yara: $ yara -s test_header.yara test.eml Header_string test.eml 0x1f1:$match: pass 0x2a2:$match: pass Header_Regex test.eml 0x1f1:$match: pass 0x2a2:$match: pass $ yara -s test_body.yara test.eml Body_string test.eml 0x440:$match: test mailing Body_Regex test.eml 0x440:$match: test mailing using rules from clamav: $ clamscan --no-summary -d test_header.yara -z test.eml test.eml: YARA.Header_string.UNOFFICIAL FOUND $ clamscan --no-summary -d test_body.yara -z test.eml test.eml: YARA.Body_string.UNOFFICIAL FOUND test.eml: YARA.Body_Regex.UNOFFICIAL FOUND I think that test_header.yara have to match the "pass" string in header part with that simple regex. I'm trying to debug it but my code knowledge is limited, it seems that every time a regex is used the header part is not parsed by clamav (also if I use a "string" rule with a "regex" rule, ie: $match_string and $match_regex) k. ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] Strange problem with custom Yara rule
Hi, The first question is: Do you have pcre installed and was it found by ClamAV .\configure? You should see something like: pcre: /usr near the end of the ./configure output. Steve ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] Error in Make -
Hi, gcc is needed to compile ClamAV on AIX. Web search "gcc aix" to get info on installing gcc. Steve ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] ClamAV/AIX6.1/gcc4.8.3 - openssl error -X509_VERIFY_PARAM_new missing
Hi. As far as I know, the X509_VERIFY_PARAM symbol became available in the OpenSSL libraries starting from version 0.9.8. If you are trying to compile your ClamAV with an openssl package which is older than that you may encounter this problem (on my Linux servers I am using OpenSSL version 1.0.1e but on AIX you probably have an older version). The previous stable version of ClamAV was 0.98.7 (before the 0.99.x tree) but I believe you may encounter the same problem. A quick solution would be to compile the latest stable version of OpenSSL from the sources and install it under /usr/local (for example) or under another path which does not interfere with the OS system paths. Regards, Matteo On 13.04.2016 14:13, kk nair wrote: Hi team, Please suggest workarounds for this issue. We are unable to proceed with installation. checking check.h usability... no checking check.h presence... no checking for check.h... no configure: unable to compile/link with check checking for libxml2 installation... not found configure: ** libxml2 support unavailable checking for OpenSSL installation... /usr checking for SSL_library_init in -lssl... yes checking for EVP_EncryptInit in -lcrypto... yes checking for X509_VERIFY_PARAM_new in -lssl... no configure: error: Your OpenSSL installation is missing the X509_VERIFY_PARAM function. Please upgrade to a more recent version of OpenSSL. Regards, Kk ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml -- Matteo Dessalvi Abteilung: HPC Ort: SB2.4.109 Tel.: 06159-712030 Fax.: +49 6159 71 2986 E-Mail: m.dessa...@gsi.de GSI Helmholtzzentrum für Schwerionenforschung GmbH Planckstraße 1 64291 Darmstadt www.gsi.de Gesellschaft mit beschränkter Haftung Sitz der Gesellschaft: Darmstadt Handelsregister: Amtsgericht Darmstadt, HRB 1528 Geschäftsführung: Ursula Weyrich Professor Dr. Karlheinz Langanke Jörg Blaurock Vorsitzende des Aufsichtsrates: St Dr. Georg Schütte Stellvertreter: Ministerialdirigent Dr. Rolf Bernhardt ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
[clamav-users] Strange problem with custom Yara rule
Hi, I'm going mad with a strange behaviour of clamav with custom yara rules. I'm trying to match some nasty spam email, I decided to use yara for my custom rules but i noticed a problem: if I use only string detect clamav (either via clamscan or clamdscan) matches all the email (text + headers) but if I use regex detect it only matches email's text. For example: $mail_header = /X-Mailer: PHPMailer 5\.2\./ doesn't match, but: $mail_header = "X-Mailer: PHPMailer 5.2." matches.. I tryed to "reduce" the match to only "ailer", but the situation doesn't change, even appending a "nocase" flag. Am I wrong or there's something strange? :) k. ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] ClamAV/AIX6.1/gcc4.8.3 - openssl error -X509_VERIFY_PARAM_new missing
Is there any previous stable version we could try rather than 0.99 ?. -Original Message- From: "kk nair"Sent: 13-04-2016 05:33 PM To: "ClamAV users ML" Subject: ClamAV/AIX6.1/gcc4.8.3 - openssl error -X509_VERIFY_PARAM_new missing Hi team, Please suggest workarounds for this issue. We are unable to proceed with installation. checking check.h usability... no checking check.h presence... no checking for check.h... no configure: unable to compile/link with check checking for libxml2 installation... not found configure: ** libxml2 support unavailable checking for OpenSSL installation... /usr checking for SSL_library_init in -lssl... yes checking for EVP_EncryptInit in -lcrypto... yes checking for X509_VERIFY_PARAM_new in -lssl... no configure: error: Your OpenSSL installation is missing the X509_VERIFY_PARAM function. Please upgrade to a more recent version of OpenSSL. Regards, Kk ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
[clamav-users] ClamAV/AIX6.1/gcc4.8.3 - openssl error -X509_VERIFY_PARAM_new missing
Hi team, Please suggest workarounds for this issue. We are unable to proceed with installation. checking check.h usability... no checking check.h presence... no checking for check.h... no configure: unable to compile/link with check checking for libxml2 installation... not found configure: ** libxml2 support unavailable checking for OpenSSL installation... /usr checking for SSL_library_init in -lssl... yes checking for EVP_EncryptInit in -lcrypto... yes checking for X509_VERIFY_PARAM_new in -lssl... no configure: error: Your OpenSSL installation is missing the X509_VERIFY_PARAM function. Please upgrade to a more recent version of OpenSSL. Regards, Kk ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
Re: [clamav-users] Error in Make -
Hi Team, This is a critical blocking issue in ClamAV installation on AIX6.1 CC is xlC. Please share if any clues. Regards, kk On Wed, Apr 13, 2016 at 12:29 PM, Krishnakumar Nairwrote: > Please share inputs on this issue while we run make after configure. > > CCLD libclamunrar_iface.la > CC libclamav_la-matcher-ac.lo > "clamav.h", line 170.3: 1506-191 (E) The character # is not a valid C > source character. > "/usr/include/sys/atomic_op.h", line 123.1: 1506-1419 (W) Pragma mc_func > must appear in global scope. > "/usr/include/sys/atomic_op.h", line 123.1: 1506-224 (W) Incorrect pragma > ignored. > "/usr/include/sys/atomic_op.h", line 126.1: 1506-1419 (W) Pragma mc_func > must appear in global scope. > "/usr/include/sys/atomic_op.h", line 126.1: 1506-224 (W) Incorrect pragma > ignored. > "/usr/include/sys/atomic_op.h", line 129.1: 1506-1419 (W) Pragma mc_func > must appear in global scope. > "/usr/include/sys/atomic_op.h", line 129.1: 1506-224 (W) Incorrect pragma > ignored. > "/usr/include/sys/atomic_op.h", line 132.1: 1506-1419 (W) Pragma mc_func > must appear in global scope. > "/usr/include/sys/atomic_op.h", line 132.1: 1506-224 (W) Incorrect pragma > ignored. > "/usr/include/sys/atomic_op.h", line 137.23: 1506-045 (W) Undeclared > identifier _safe_fetch. > "clamav.h", line 170.1: 1506-046 (S) Syntax error. > make: The error code from the last command is 1. > > > Stop. > make: The error code from the last command is 1. > > > Stop. > make: The error code from the last command is 2. > > > Stop. > make: The error code from the last command is 1. > > > Stop. > make: The error code from the last command is 2. > > > Stop. > uxhazcaw1:root:[/home/clamav/clamav-0.99] # make check > Making check in libltdl > make check-am > Target "check-am" is up to date. > Making check in libclamav > make check-recursive > CC libclamav_la-matcher-ac.lo > "clamav.h", line 170.3: 1506-191 (E) The character # is not a valid C > source character. > "/usr/include/sys/atomic_op.h", line 123.1: 1506-1419 (W) Pragma mc_func > must appear in global scope. > "/usr/include/sys/atomic_op.h", line 123.1: 1506-224 (W) Incorrect pragma > ignored. > "/usr/include/sys/atomic_op.h", line 126.1: 1506-1419 (W) Pragma mc_func > must appear in global scope. > "/usr/include/sys/atomic_op.h", line 126.1: 1506-224 (W) Incorrect pragma > ignored. > "/usr/include/sys/atomic_op.h", line 129.1: 1506-1419 (W) Pragma mc_func > must appear in global scope. > "/usr/include/sys/atomic_op.h", line 129.1: 1506-224 (W) Incorrect pragma > ignored. > "/usr/include/sys/atomic_op.h", line 132.1: 1506-1419 (W) Pragma mc_func > must appear in global scope. > "/usr/include/sys/atomic_op.h", line 132.1: 1506-224 (W) Incorrect pragma > ignored. > "/usr/include/sys/atomic_op.h", line 137.23: 1506-045 (W) Undeclared > identifier _safe_fetch. > "clamav.h", line 170.1: 1506-046 (S) Syntax error. > make: The error code from the last command is 1. > > Regards, > kk > ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
[clamav-users] Error in Make -
Please share inputs on this issue while we run make after configure. CCLD libclamunrar_iface.la CC libclamav_la-matcher-ac.lo "clamav.h", line 170.3: 1506-191 (E) The character # is not a valid C source character. "/usr/include/sys/atomic_op.h", line 123.1: 1506-1419 (W) Pragma mc_func must appear in global scope. "/usr/include/sys/atomic_op.h", line 123.1: 1506-224 (W) Incorrect pragma ignored. "/usr/include/sys/atomic_op.h", line 126.1: 1506-1419 (W) Pragma mc_func must appear in global scope. "/usr/include/sys/atomic_op.h", line 126.1: 1506-224 (W) Incorrect pragma ignored. "/usr/include/sys/atomic_op.h", line 129.1: 1506-1419 (W) Pragma mc_func must appear in global scope. "/usr/include/sys/atomic_op.h", line 129.1: 1506-224 (W) Incorrect pragma ignored. "/usr/include/sys/atomic_op.h", line 132.1: 1506-1419 (W) Pragma mc_func must appear in global scope. "/usr/include/sys/atomic_op.h", line 132.1: 1506-224 (W) Incorrect pragma ignored. "/usr/include/sys/atomic_op.h", line 137.23: 1506-045 (W) Undeclared identifier _safe_fetch. "clamav.h", line 170.1: 1506-046 (S) Syntax error. make: The error code from the last command is 1. Stop. make: The error code from the last command is 1. Stop. make: The error code from the last command is 2. Stop. make: The error code from the last command is 1. Stop. make: The error code from the last command is 2. Stop. uxhazcaw1:root:[/home/clamav/clamav-0.99] # make check Making check in libltdl make check-am Target "check-am" is up to date. Making check in libclamav make check-recursive CC libclamav_la-matcher-ac.lo "clamav.h", line 170.3: 1506-191 (E) The character # is not a valid C source character. "/usr/include/sys/atomic_op.h", line 123.1: 1506-1419 (W) Pragma mc_func must appear in global scope. "/usr/include/sys/atomic_op.h", line 123.1: 1506-224 (W) Incorrect pragma ignored. "/usr/include/sys/atomic_op.h", line 126.1: 1506-1419 (W) Pragma mc_func must appear in global scope. "/usr/include/sys/atomic_op.h", line 126.1: 1506-224 (W) Incorrect pragma ignored. "/usr/include/sys/atomic_op.h", line 129.1: 1506-1419 (W) Pragma mc_func must appear in global scope. "/usr/include/sys/atomic_op.h", line 129.1: 1506-224 (W) Incorrect pragma ignored. "/usr/include/sys/atomic_op.h", line 132.1: 1506-1419 (W) Pragma mc_func must appear in global scope. "/usr/include/sys/atomic_op.h", line 132.1: 1506-224 (W) Incorrect pragma ignored. "/usr/include/sys/atomic_op.h", line 137.23: 1506-045 (W) Undeclared identifier _safe_fetch. "clamav.h", line 170.1: 1506-046 (S) Syntax error. make: The error code from the last command is 1. Regards, kk ___ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml