It appears that this warning was added by accident while fixing a bug shortly
before release and no one noticed in review. We'll remove the warning in 1.1.1
and 1.2.0.
Sorry for the confusion!
Regards,
Micah
Micah Snyder
ClamAV Development
Talos
Cisco Systems, Inc.
________________________________
From: clamav-users <clamav-users-boun...@lists.clamav.net> on behalf of Ralf
Hildebrandt via clamav-users <clamav-users@lists.clamav.net>
Sent: Tuesday, May 16, 2023 1:08 AM
To: clamav-users@lists.clamav.net <clamav-users@lists.clamav.net>
Cc: Ralf Hildebrandt <ralf.hildebra...@charite.de>
Subject: [clamav-users] LibClamAV Warning: Don't know how to create filter for:
Win.Downloader.LNKAgent-10001628-0
clamav-1.1.0-1:
===============
May 16 10:00:23 de freshclam[864]: Tue May 16 10:00:23 2023 -> daily database
available for update (local version: 26907, remote version: 26908)
May 16 10:00:23 de freshclam[864]: WARNING: Tue May 16 10:00:23 2023 ->
******* RESULT 200, SIZE: 7213 *******
Why does an 200 return code ("OK") warrant a warning?
May 16 10:00:24 de freshclam[864]: Tue May 16 10:00:24 2023 -> Testing
database:
'/var/lib/clamav/tmp.c022cc91c3/clamav-9a70f6b397596656b8338e5caf1d6bc7.tmp-daily.cld'
...
May 16 10:00:27 de freshclam[816014]: Tue May 16 10:00:27 2023 -> [LibClamAV]
Don't know how to create filter for: Win.Downloader.LNKAgent-10001628-0
May 16 10:00:27 de freshclam[816014]: Tue May 16 10:00:27 2023 -> [LibClamAV]
cli_ac_addsig: cannot use filter for trie
Don't know how to create filter for: Win.Downloader.LNKAgent-10001628-0
sounds a bit worrying...
May 16 10:00:29 de freshclam[864]: Tue May 16 10:00:29 2023 -> Database test
passed.
but alas, despite errors the Database test passed?
May 16 10:00:29 de freshclam[864]: Tue May 16 10:00:29 2023 -> daily.cld
updated (version: 26908, sigs: 2034816, f-level: 90, builder: raynman)
May 16 10:00:29 de freshclam[864]: Tue May 16 10:00:29 2023 -> Clamd
successfully notified about the update.
May 16 10:00:33 de clamd[686]: LibClamAV Warning: Don't know how to create
filter for: Win.Downloader.LNKAgent-10001628-0
May 16 10:00:33 de clamd[686]: LibClamAV Warning: cli_ac_addsig: cannot use
filter for trie
--
Ralf Hildebrandt
Charité - Universitätsmedizin Berlin
Geschäftsbereich IT | Abteilung Netzwerk
Campus Benjamin Franklin (CBF)
Haus I | 1. OG | Raum 105
Hindenburgdamm 30 | D-12203 Berlin
Tel. +49 30 450 570 155
ralf.hildebra...@charite.de
https://www.charite.de
_______________________________________________
Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation
https://docs.clamav.net/#mailing-lists-and-chat
_______________________________________________
Manage your clamav-users mailing list subscription / unsubscribe:
https://lists.clamav.net/mailman/listinfo/clamav-users
Help us build a comprehensive ClamAV guide:
https://github.com/Cisco-Talos/clamav-documentation
https://docs.clamav.net/#mailing-lists-and-chat
