Paul,
I know what you mean. We had encountered this type of behavior when we were
adding the byte-compare signature feature and we initially put in a change
(specific to byte-compare) to prevent the 2nd scan from occurring. We ended up
reverting that change when we realized that we really
Hi Micah
I can code to handle this but basing handling code on "appears to
behaviour" is far from an ideal start.
The multiple matches on test/clam.mail from the clamav 101.1 sources
with Clamav.Test.File-6 reported twice sure looks like a bug to me.
Regards Paul
On 14/02/2019 19:46,
Paul,
You may be seeing cases where a signature match of the raw file also matches
the file after it has been:
* normalized (for html or other text files)
* extracted (eg uncompressed archives or archives where compression has little
effect)
* or otherwise parsed (eg where a signature written
Paul wrote:
Hi
I have been looking at using the -z option on either clamdscan or
clamscan and stumbled onto some odd behavior.
This is with version 101.1. 101.0 also behaves the same.
Take 2 paultest-010E110713-000 is constructed from test/clam.mail with
the addition of a line of text to
Hi
I have been looking at using the -z option on either clamdscan or
clamscan and stumbled onto some odd behavior.
This is with version 101.1. 101.0 also behaves the same.
Take 1
clamscan -z ./clamav-0.101.1/test/clam.mail
./clamav-0.101.1/test/clam.mail: Clamav.Test.File-6 FOUND
I have mail folder name VIR that containts 43 mail attach with Netsky and
2 mail attach with Bagle.
My FC1 has 0.83 and i do this :
clamscan VIR
clamdscan VIR
cat VIR | clamscan -
but it says no viruses.
Can anybody tell me why clam cannot found the viruses ?
Thanx
Hello Micha,
Thursday, January 29, 2004, 10:13:41 AM, you wrote:
MS Last night I made a small change to qmail-scanner.pl- I added 'worm.sco.a'
MS to the array $silent_viruses_array. (To prevent sending Virus Found messages
MS to innocent sender addresses)
did you edit it with something like
PROTECTED]
Sent: Thursday, January 29, 2004 11:14 AM
To: [EMAIL PROTECTED]
Subject: [Clamav-users] Clamscan; clamdscan
Last night I made a small change to qmail-scanner.pl- I added
'worm.sco.a' to the array $silent_viruses_array. (To prevent
sending Virus Found messages to innocent
Last night I made a small change to qmail-scanner.pl- I added 'worm.sco.a'
to the array $silent_viruses_array. (To prevent sending Virus Found messages
to innocent sender addresses)
It now looks like:
my
@silent_viruses_array=('klez','bugbear','worm.sco.a','hybris','yaha','braid'
On Tue, 27 Jan 2004 13:14:42 -0500
Brian Bruns [EMAIL PROTECTED] wrote:
Hello,
The --remove and --move options in clamscan and clamdscan do not
appear to be working in the latest CVS build as of about 5 minutes
ago.
They work only in clamscan and are not yet implemented in clamdscan (and
10 matches
Mail list logo
