Re: [clamav-users] [ext] More info about detected virus

2022-06-12 Thread Zvi Kave via clamav-users 

  
  
Thank you Ralf.


On 6/8/2022 6:25 PM, Ralf Hildebrandt
  via clamav-users wrote:


  * Zvi Kave via clamav-users :

  
   Hi,

   Where can I find more information about ClamAV detected virus like
   Win.Trojan.N-68

   or another name ?

  
  
You can decode the signature using this command:

# sigtool -fWin.Trojan.N-68 | sigtool --decode-sigs 

Basically it finds an email containing a BASE64 encoded "readme.exe"
using the content type "audio/x-wav"... Maybe this helps:

VIRUS NAME: Win.Trojan.N-68
TARGET TYPE: ANY FILE
OFFSET: *
DECODED SIGNATURE:
REMOVED A MIME BOUNDARY HERE
Content-Type: audio/x-wav;
name="readme.exe"
Content-Transfer-Encoding: base64

--
Ralf Hildebrandt
Charité - Universitätsmedizin Berlin
Geschäftsbereich IT | Abteilung Netzwerk

Campus Benjamin Franklin (CBF)
Haus I | 1. OG | Raum 105
Hindenburgdamm 30 | D-12203 Berlin

Tel. +49 30 450 570 155
ralf.hildebra...@charite.de
https://www.charite.de
___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat


  

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

[clamav-users] More info about detected virus

2022-06-08 Thread Zvi Kave via clamav-users 

  
  
Hi,


Where can I find more information about ClamAV detected virus
  like Win.Trojan.N-68
or another name ?
Googling give me no additional information about the virus.


Thanks,


Zvi

  

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation

https://docs.clamav.net/#mailing-lists-and-chat

[clamav-users] rust on IBM i PASE environment - a must ?

2022-05-19 Thread Zvi Kave via clamav-users 

  
  
Hi ,


We have ClamAV 0.104.1 compiled from sources and working  fine
in IBM i PASE environment - which is quite same architecture like
  IBM AIX binaries.
We have a problem to compile ClamAV 0.105.0 because at present 

we have not rust on IBM i PASE  - nor on AIX.
Is there a way to compile ClamAV 0.105.0 without rust ?



Regards,


Zvi




  


___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Yara regular expression finds only first match in ClamAV ?

2021-08-23 Thread Zvi Kave via clamav-users 

  
  
Hi Richard,


Yes. I tried with options: --normalize=no and /or --allmatch
But no change.


Thanks,


Zvi



On 8/23/2021 9:13 AM, Paul Kosinski via
  clamav-users wrote:


  On Sun, 22 Aug 2021 20:10:00 +0100 (BST)
"G.W. Haywood via clamav-users"  wrote:


  
Hi there,

On Sun, 22 Aug 2021, Richard Graham via clamav-users wrote:


  On Sun, Aug 22, 2021 at 10:41 AM Zvi Kave wrote:  

  
On 8/19/2021 9:33 PM, G.W. Haywood via clamav-users wrote:  


  On Thu, 19 Aug 2021, Zvi Kave via clamav-users wrote:  

  

I found that yara strings like this: $re = /[0-9]{9}/
find only first 9-digit match in file.
This spoils my logic ...  

  
  
... my advice is not to try anything fancy ...  



I understand that I have to be patient.  

  
  
I'm wondering if the --allmatch option/switch is useful here.  



Unfortunately I'm afraid it's a diffferent issue.  Yara rules don't
necessarily produce a match (one which ClamAV would report as FOUND)
even if there are strings in the Yara rules which _do_ in fact match.
The point is that you can (or should be able to) tell Yara things like
"count the number of times the string is found in the text, and report
if there are more than 23 of them".  This sort of thing will sometimes
work with the Yara engine in ClamAV, but my experience is that it's at
the fancy end of the scale and I've spent hours trying to get things
to work which would seem to be trivial exercises in regexes and logic.

  
  


Maybe ClamAV should support plugins, rather than being constrained to what's compiled in. (There are, of course, various plugins that invoke ClamAV, but that's not what I mean.)

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


  


___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Yara regular expression finds only first match in ClamAV ?

2021-08-22 Thread Zvi Kave via clamav-users 

  
  
Hi Ged,


Sorry. I hope you have some hair yet.

I understand that I have to be patient.


Thank you,


Zvi



On 8/19/2021 9:33 PM, G.W. Haywood via
  clamav-users wrote:

Hi
  there,
  
  
  On Thu, 19 Aug 2021, Zvi Kave via clamav-users wrote:
  
  
  I found that yara strings like this: $re =
/[0-9]{9}/


find only first 9-digit match in file.


This spoils my logic ...

  
  
  After tearing out most of what remains of my hair over Yara rules
  in
  
  ClamAV, my advice is not to try anything fancy until the Yara
  engine
  
  is completely replaced.  My list of the faults in it keeps on
  growing,
  
  and AFAICT there's no prospect of any attention being paid to them
  in
  
  the foreseeable future.  As you have seen there are reports going
  back
  
  years.  If I had time I'd do it myself, but I don't.  I've reached
  the
  
  point where I code Yara rules in as simple a way as I possibly can
  and
  
  every time I add a new rule or modify an existing one I hope not
  to
  
  find another fault in the engine.  Sometimes I've spent hours
  trying
  
  to get it to do a single match correctly and finally given up. 
  It's a
  
  terrible shame, because (here at least) Yara rules by a very long
  way
  
  find more spam and malicious mail content than anything else:
  
  
  $ grep FOUND /var/log/mail.debug | wc -l
  
  60072
  
  $ grep FOUND /var/log/mail.debug | grep -v YARA | wc -l
  
  11530
  
  $ grep FOUND /var/log/mail.debug | grep -v '\(YARA\|MANUAL\)' | wc
  -l
  
  2876
  
  $ grep FOUND /var/log/mail.debug | grep -v
  '\(YARA\|MANUAL\|UNOFFICIAL\)' | wc -l
  
  20
  
  $
  
  
  This is a single mail server, approximately 19 days of August
  2021.
  
  I'd consider it a low-volume site.  For whatever reasons we see
  very
  
  little malicious mail, rarely more than two or three items of
  malware
  
  in a typical day, but quite a lot of spam.  I don't know how this
  
  compares with the experience of other people here on the list.
  
  

  


___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] Yara regular expression finds only first match in ClamAV ?

2021-08-19 Thread Zvi Kave via clamav-users 

  
  
Hi,


I found that yara strings like this: $re = /[0-9]{9}/
find only first 9-digit match in file.
This spoils my logic in condition: for 3 i in (1..#re) ...
Only this works: for 1 i in (1..#re) ...
I found that this issue was already reported in 2015.
Is there any way to convince ClamAV to match more as usual ?


Regards,


Zvi

  


___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Broken media detection

2021-06-24 Thread Zvi Kave via clamav-users 

  
  
Arnaud,


I understand now. Thank you.


Zvi



On 6/24/2021 11:55 AM, Arnaud Jacques
  wrote:

Zvi,
  
  
  
  When I try to open it, I get error
message:


agam.jpg:


It looks like we don't support this file format.

  
  
  If you look at the content of the file with an hexadecimal editor,
  you see garbage. It has no known file format.
  
  
  The file format is defined with the content of a file, not with
  the filename/extension.
  
  
  For me, and for ClamAV, it is not an image. Verify with "file"
  command line tool :
  
  
  #file agam.jpg
  
  agam.jpg: data
  
  
  

  


___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] Broken media detection

2021-06-24 Thread Zvi Kave via clamav-users 

  
  
Hi,


I tried to use "clamscan --alert-broken-media=yes ag.jpg" to
  detect
spoiled JPEG files by RYUK ransomware.
Seems that it was not detected - ag.jpg OK.

Perhaps I use it not correctly?
Please advise .
I use clamav 0.103.3 .



Thanks,



Zvi

  


___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Request for guidelines to connect freshclam to Squid proxy

2021-04-29 Thread Zvi Kave via clamav-users 

  
  

  Hi,
  
  
  The SysAdmin
that responsible for Firewall maintenance,  allows to open only
one IP in the firewall for freshclam use.
  
  
  I shall check
squid definitions again.
  
  
  Thank you,
  
  
  Zvi
  
  
  

On 4/29/2021 12:41 PM, Eero Volotinen
  wrote:


  
  




  

> We wish to open only one IP in the firewall.

Can you explain why it matters to you how many different IPs
are used
to provide the service?  Do you use IPv4 and IPv6
addresses?  Have you
also asked Google if they will only send mail to you from a
single IP?

https://www.razlee.com/

  
  
  
  In squid it's possible to whitelist addresses by dns
names. 
  
  
  Eero 

  
  
  
  
___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


  


___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] Request for guidelines to connect freshclam to Squid proxy

2021-04-29 Thread Zvi Kave via clamav-users 

  
  

  Hello Joel,
We
would like to get a manual that describes how to configure
freshclam
and proxy to refresh the signature files through the proxy
(squid)
and not directly.
Explanation:
Our
servers are behind a firewall.
The
freshclam is referred to different ClamAV mirror with different
IP
for each refresh.
We
wish to open only one IP in the firewall.


We
tried to set a proxy server outside the firewall and define
freshclam on all the other servers apply to the proxy server.
 We did
not succeed to configure clamAV and Squid to work together.

  
Is there a better solution
for this problem except  proxy server?
  
  
Can you please send us
manual or guidelines how to use this proxy ?
  
  

Thanks,
Zvi
Kave
  
  


___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Terminate clamscan after specific time

2021-01-06 Thread Zvi Kave via clamav-users 
Hi Ged,

Can you send link to your posts about root directory scan?

Thanks,

Zvi

On Wed, Jan 6, 2021 at 2:20 PM G.W. Haywood via clamav-users <
clamav-users@lists.clamav.net> wrote:

> Hi there,
>
> On Wed, 6 Jan 2021, Andrew C Aitchison via clamav-users wrote:
> > On Wed, 6 Jan 2021, Zvi Kave via clamav-users wrote:
> >
> >> My goal is to terminate scan of big number of files like '/' on CPU
> >
> > Would it be better to *pause* the scan if/when the computer gets busy ?
>
> There are many ways to tweak the scheduling of processes, but it makes
> no sense to optimize doing something that is fundamentally daft.  Even
> after it's been optimized, it's still daft.
>
> --
>
> 73,
> Ged.
>
> ___
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Terminate clamscan after specific time

2021-01-06 Thread Zvi Kave via clamav-users 
Hi ,

My goal is to terminate scan of big number of files like '/' on CPU busy
hours.
Then to continue approximately from the interrupted directory on nonbusy
hours.
Seems that I have to put some code in clamscan/manager.c

Thanks,

Zvi


On Tue, Jan 5, 2021 at 6:01 PM G.W. Haywood via clamav-users <
clamav-users@lists.clamav.net> wrote:

> Hi there,
>
> On Tue, 5 Jan 2021, Zvi Kave via clamav-users wrote:
>
> >Seems that the parameter --max-scantime=#n aborts scan on every file
> after #n ms.
> >But it continues to the next file, instead of clamscan termination +
> summary as I need.
>
> You can easily start another process, which sleeps for your desired
> number of seconds and then kills the clamscan process.  You won't get
> the exact summary which clamscan gives when it terminates normally, but
> you will get the output about what's been found so you can approximate
> the report e.g. by piping the output of the clamscan process to a file
> (perhaps asking for verbose reporting from libclamav and/or clamscan as
> well as reporting clean files) and doing a little bit of scripting.
>
> This does seem to me to be a strange thing to want to do.  If you can
> explain exactly what the problem is and why you think this is the
> solution we might be able to offer alternatives or other suggestions.
>
> If all else fails you have the source code.  It would be possible to
> get clamscan to respond to a signal in the way you describe.
>
> An Englishman asked an Irishman for directions to somewhere.
>
> The Irishman replied, "If I was going there, I wouldn't start from here".
>
> :)
>
> --
>
> 73,
> Ged.
>
> ___
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Terminate clamscan after specific time

2021-01-05 Thread Zvi Kave via clamav-users 
Hi Micah,

Seems that the parameter --max-scantime=#n aborts scan on every file
after #n ms.
But it continues to the next file, instead of clamscan termination +
summary as I need.

Thanks,

 Zvi

On Mon, Dec 28, 2020 at 6:04 PM Zvi Kave via clamav-users <
clamav-users@lists.clamav.net> wrote:

> Hi,
>
> Is there a way to Terminate clamscan after specific time with summary ?
>
> Regards,
>
> Zvi
>
>
> <http://www.sigbee.com/he?utm_campaign=signature&origUserUID=6b0b88a7c53f8a989de5ea6375d0750332a86416&origSigUserImage=66562fe50458cde1.gif>
>
> ___
>
> clamav-users mailing list
> clamav-users@lists.clamav.net
> https://lists.clamav.net/mailman/listinfo/clamav-users
>
>
> Help us build a comprehensive ClamAV guide:
> https://github.com/vrtadmin/clamav-faq
>
> http://www.clamav.net/contact.html#ml
>

___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] Terminate clamscan after specific time

2021-01-05 Thread Zvi Kave via clamav-users 

  
  
Micah,


I did not pay attention to this parameter.


Thank you for discovering it,


Zvi



On 1/5/2021 3:53 AM, Micah Snyder
  (micasnyd) via clamav-users wrote:


  
  
  
  
Zvi,
 
Yes, clamscan has a --max-scantime=#n
  option, which is measured in milliseconds.  Clamscan will
  check the time limit periodically and abort the scan if the
  time limit has been exceeded.  There is a similar config
  option for clamd in clamd.conf.
 
Disclaimer: the limit is not precise as
  clamscan may be busy decompressing or parsing a file in
  between checks.  It’s useful mostly when scanning large
  archives and such to abort partway through a long scan. 
   Ideally it would monitor the scan in a watchdog process or
  something so it could abort the scan more precisely but
  unfortunately it doesn’t work that way.
  
 
Regards,
Micah
 

  

  From: clamav-users

On Behalf Of Zvi Kave via clamav-users
Sent: Monday, December 28, 2020 8:04 AM
To: clamav-users@lists.clamav.net
Cc: Zvi Kave 
Subject: [clamav-users] Terminate clamscan after
specific time

  
   
  
Hi,
Is there a way to Terminate clamscan after specific time
  with summary ?
Regards,
Zvi
  

  
  
  
  
___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml


  


___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] Terminate clamscan after specific time

2020-12-28 Thread Zvi Kave via clamav-users 
Hi,

Is there a way to Terminate clamscan after specific time with summary ?

Regards,

Zvi



___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] Terminate clamscan after specific time

2020-12-28 Thread Zvi Kave via clamav-users 

  
  
Hi,


Is there a way to Terminate clamscan after specific timeout with
  summary ?


Regards,


Zvi

  


___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

Re: [clamav-users] ClamAV 0.102.4 crash in test directory

2020-08-10 Thread Zvi Kave via clamav-users 

  
  
Hi,


You are right.

The crash is specific to my build.
On Ubuntu it works well.
I shall open a ticket to supply more information.


Thank you,


Zvi



On 8/9/2020 4:37 PM, G.W. Haywood via
  clamav-users wrote:

Hi
  there,
  
  
  On Sun, 9 Aug 2020, Zvi Kave via clamav-users wrote:
  
  
  I get a crash - Memory fault(coredump) -
when scanning clamav 0.102.4 test directory. Other files pass
OK.


I found that the crash is caused by each one of the 6 files:


clam.ea05.exe, clam.ea06.exe, clam_IScab_ext.exe,
clam_IScab_int.exe, clam_ISmsi_ext.exe, clam_ISmsi_int.exe.

  
  
  I suggest that you open a ticket at
  
  
  https://bugzilla.clamav.net/enter_bug.cgi
  
  
  Using the form there you can attach copies of the files.
  
  
  ... I am running on IBM i PASE, an AIX
Unix-like.

  
  
  This problem may be specific to your build.  After you have
  uploaded
  
  the sample files I will gladly scan them for you using a system
  here,
  
  to see if the same thing happens.
  
  

  


___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml

[clamav-users] ClamAV 0.102.4 crash in test directory

2020-08-09 Thread Zvi Kave via clamav-users 

  
  
Hi,
 
I get a crash
- Memory fault(coredump) - when scanning clamav 0.102.4 test
directory. Other files pass OK.
I found that
  the crash is caused by each one of
the 6 files:
clam.ea05.exe, clam.ea06.exe,
clam_IScab_ext.exe, clam_IScab_int.exe, clam_ISmsi_ext.exe,
clam_ISmsi_int.exe.
 
I use the
  GCC to compile. I am running on IBM i PASE, an AIX Unix-like.

 
Please
  assist me,
 
Run example:
clamscan
/home/AV/clamav-0.102.4/test
/home/AV/clamav-0.102.4/test/Makefile:
OK
/home/AV/clamav-0.102.4/test/Makefile.am: OK
/home/AV/clamav-0.102.4/test/Makefile.in: OK
/home/AV/clamav-0.102.4/test/README: OK
/home/AV/clamav-0.102.4/test/clam.exe.html: Clamav.Test.File-6
FOUND
/home/AV/clamav-0.102.4/test/clam.exe.mbox.base64:
Clamav.Test.File-6 FOUND
/home/AV/clamav-0.102.4/test/clam.tar.gz: Clamav.Test.File-6
FOUND
/home/AV/clamav-0.102.4/test/clam.odc.cpio: Clamav.Test.File-6
FOUND
/home/AV/clamav-0.102.4/test/clam.mail: Clamav.Test.File-6 FOUND
/home/AV/clamav-0.102.4/test/clam.pdf: Clamav.Test.File-6 FOUND
/home/AV/clamav-0.102.4/test/clam.sis: Clamav.Test.File-6 FOUND
/home/AV/clamav-0.102.4/test/clam.impl.zip: Clamav.Test.File-6
FOUND
/home/AV/clamav-0.102.4/test/clam-aspack.exe: Clamav.Test.File-6
FOUND
/home/AV/clamav-0.102.4/test/clam.bz2.zip: Clamav.Test.File-6
FOUND
/home/AV/clamav-0.102.4/test/clamjol.iso: Clamav.Test.File-6
FOUND
/home/AV/clamav-0.102.4/test/clam.7z: Clamav.Test.File-6 FOUND
/home/AV/clamav-0.102.4/test/clam.exe.bz2: Clamav.Test.File-6
FOUND
/home/AV/clamav-0.102.4/test/clam-v3.rar: Clamav.Test.File-6
FOUND
/home/AV/clamav-0.102.4/test/clam-v2.rar: Clamav.Test.File-6
FOUND
/home/AV/clamav-0.102.4/test/clam.iso: Clamav.Test.File-6 FOUND
/home/AV/clamav-0.102.4/test/clam_cache_emax.tgz:
Clamav.Test.File-6 FOUND
Memory fault(coredump)
$
 
Zvi
  


___

clamav-users mailing list
clamav-users@lists.clamav.net
https://lists.clamav.net/mailman/listinfo/clamav-users


Help us build a comprehensive ClamAV guide:
https://github.com/vrtadmin/clamav-faq

http://www.clamav.net/contact.html#ml