G.W. Haywood schrieb:
> Hi there,
> 
> On Thu, 15 Jan 2009 Tomasz Chmielewski wrote:
> 
>> I'm trying to scan a 120 kB file [snip]
> 
> Are you sure about that?
> 
>> Data scanned: 62.26 MB

I'm pretty sure the file is just 120 kB:

# ls -l explore.exe
-r-xr-xr-x 1 tch tch 129368 2007-11-06 00:37 explore.exe*

# clamscan --leave-temps -v explore.exe
Scanning explore.exe
explore.exe: Trojan.Agent-40281 FOUND

----------- SCAN SUMMARY -----------
Known viruses: 488530
Engine version: 0.94.2
Scanned directories: 0
Scanned files: 1
Infected files: 1
Data scanned: 62.26 MB
Time: 27.694 sec (0 m 27 s)

# ls -l clamav-*
-rwx------ 1 root root 21749760 2009-01-15 13:46 
clamav-02ce7d7813c659c7a9078efe19d40570*
-rwx------ 1 root root 21701760 2009-01-15 13:46 
clamav-170799386eb0df0cfccb5e84b536f1eb*
-rwx------ 1 root root    12800 2009-01-15 13:46 
clamav-a986369d35923f2f9e503c284614f33d*
-rwx------ 1 root root    12800 2009-01-15 13:47 
clamav-b3f69f7039b740ff001894d12e9ce9cd*
-rwx------ 1 root root 21681024 2009-01-15 13:47 
clamav-f0c4564c434128e6f1a63d49e2bec520*

Compression bomb?



-- 
Tomasz Chmielewski
http://wpkg.org
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to