Re: [clamav-users] Minor bug or working as intended?

Micah Snyder (micasnyd) via clamav-users wrote: G.W. Haywood wrote: Execution time will be important for scanning filesystems, less so for scanning mail (at least for scanning low-volume mail) and readability can be hugely important if you're writing a lot of rules.  Perhaps we should be aski

[clamav-users] INSTREAM + eicar not well detected?

Hi, I'm using clamd to make a large data scanning using INSTREAM (data it is not available as files I could send to clamd). If I send only one INSTREAM chunk with EICAR inside it is correctly detected, but if I send several chunks plus EICAR string, it is not detected. Example: char *eicarTest

[clamav-users] SSL Authentication Error

Hello, I am trying to mirror the definitions database using the recommended cvdupdate python script, however I am getting the following error code: ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:997). Mul

Re: [clamav-users] Minor bug or working as intended?

Hi there, On Wed, 2 Mar 2022, Kris Deugau wrote: Micah Snyder (micasnyd) via clamav-users wrote: ... some examples from my short time spent brainstorming this a few months back. // example logical signature [snip] TBH that looks almost identical to the Yara rule syntax at a quick look. Ve

Re: [clamav-users] SSL Authentication Error

Hi there, On Wed, 2 Mar 2022, Jonah McElfatrick via clamav-users wrote: I am trying to mirror the definitions database using the recommended cvdupdate python script, however I am getting the following error code: ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify

Re: [clamav-users] Minor bug or working as intended?

Kris Deugau wrote: For some types of content, just allowing a plain ASCII string instead of the hex-coded version of the same would be a big help.  Or an enhancement in the current file formats allowing embedded comments - I've lost track of how many times I've created something complex, and h

Re: [clamav-users] INSTREAM + eicar not well detected?

Hi there, On Wed, 2 Mar 2022, Jorge Elissalde via clamav-users wrote: I'm using clamd to make a large data scanning using INSTREAM ... If I send only one INSTREAM chunk with EICAR inside it is correctly detected, but if I send several chunks plus EICAR string, it is not ... char *eicarTest = "X