Re: [Clamav-users] Problem with pattern matching

2008-06-05 Thread Tomasz Kojm
On Fri, 06 Jun 2008 01:56:30 +0300 Giorgos Vasiliadis <[EMAIL PROTECTED]> wrote: > In order to understand the pattern matching procedure of clamav, I > created a new signature database that contain only one signature > (test=72706e696674). The hex representation is equal to the string 'printf'.

[Clamav-users] Problem with pattern matching

2008-06-05 Thread Giorgos Vasiliadis
Hello! In order to understand the pattern matching procedure of clamav, I created a new signature database that contain only one signature (test=72706e696674). The hex representation is equal to the string 'printf'. However, when I use the clamscan utility to scan binary files, like /bin/ls an

[Clamav-users] PUA.JS.Packed False Positive

2008-06-05 Thread Brandon Perry
Hi, doing a scan of my webserver today (with --detect-pua turned on for grins). I have the Wordpress latest.zip on it, and ClamAV flagged it as PUA.JS.Packed, as well as the wp-includes/js/jquery/interface.js: file being flagged as the same (probably what flagged the zip). _

Re: [Clamav-users] Problem compiling 0.93

2008-06-05 Thread Luis Hernán Otegui
Stephen: 2008/6/4 Stephen Gran <[EMAIL PROTECTED]>: > On Wed, Jun 04, 2008 at 03:24:44PM -0300, Luis Hernán Otegui said: >> Stephen: >> >> Well, it all worked up pretty well, untill I got this: >> >> /usr/lib/libc_nonshared.a(atexit.oS)(.gnu.linkonce.t.__i686.get_pc_thunk.bx+0x0): >> In function `

Re: [Clamav-users] 0.93.1

2008-06-05 Thread Dennis Davis
On Tue, 3 Jun 2008, Dennis Davis wrote: > From: Dennis Davis <[EMAIL PROTECTED]> > To: ClamAV users ML > Date: Tue, 3 Jun 2008 10:50:52 +0100 (BST) > Subject: Re: [Clamav-users] 0.93.1 > Reply-To: ClamAV users ML ... > I've just constructed an OpenBSD4.3 port for 0.93.1rc1, installed > it inst