Re: [clamav-users] ScanOnAccess: ... (null) FOUND

2019-03-14 Thread Micah Snyder (micasnyd) via clamav-users
Hi Franky, Updating your signature set shouldn't affect this, although it is good to keep up to date. We never did track down the cause of the (null) FOUND issue. We are presently working on migrating the on-access scanning code out of clamd and into a new, separate utility that will submit fil

[clamav-users] ScanOnAccess: ... (null) FOUND

2019-03-13 Thread Franky Van Liedekerke via clamav-users
Hi, I seem to be encountering the same issue someone described here: https://www.mail-archive.com/clamav-users@lists.clamav.net/msg46022.html For me the null-message arrived when switching to root: ScanOnAccess: /root/.bash_history: (null) FOUND I'm running on RHEL7 server, latest updates with v

Re: [clamav-users] ScanOnAccess: ... (null) FOUND

2018-09-07 Thread Micah Snyder (micasnyd)
yd) mailto:micas...@cisco.com>> Sent: Thursday, August 9, 2018 2:39 PM To: ClamAV users ML mailto:clamav-users@lists.clamav.net>> Subject: Re: [clamav-users] ScanOnAccess: ... (null) FOUND I've been running clamd with OnAccess on a box using Firefox and just yesterday saw the (null

Re: [clamav-users] ScanOnAccess: ... (null) FOUND

2018-09-05 Thread Kretschmer, Jens
: Re: [clamav-users] ScanOnAccess: ... (null) FOUND I've been running clamd with OnAccess on a box using Firefox and just yesterday saw the (null) FOUND as well. I haven't had a chance to take the file in question and debug with clamscan to reproduce it and figure out what's causing

Re: [clamav-users] ScanOnAccess: ... (null) FOUND

2018-08-09 Thread Micah Snyder (micasnyd)
I've been running clamd with OnAccess on a box using Firefox and just yesterday saw the (null) FOUND as well. I haven't had a chance to take the file in question and debug with clamscan to reproduce it and figure out what's causing it but I will do so soon. Regarding your second issue, I belie

Re: [clamav-users] ScanOnAccess: ... (null) FOUND

2018-08-09 Thread Kretschmer, Jens
> Do you have the OnAccessExtraScanning option on by chance? Yes, OnAccessExtraScanning is turned on. I was able to reproduce this behavior on a different machine. It uses the same configuration as the first machine (the clamconf output can be found in my previous E-Mail). I rebooted the machi

Re: [clamav-users] ScanOnAccess: ... (null) FOUND

2018-08-02 Thread G.W. Haywood
Hi there, On Thu, 2 Aug 2018, Micah Snyder wrote: Suffice to say we're pretty stumped as to why you are seeing that. That's a little worrying. Have you looked in the C libraries? -- 73, Ged. ___ clamav-users mailing list clamav-users@lists.clamav

Re: [clamav-users] ScanOnAccess: ... (null) FOUND

2018-08-02 Thread Mickey Sola
Hi Jens, Do you have the OnAccessExtraScanning option on by chance? There's a known issue with that option which can cause memory consumption problems. Though I'm still not certain why that would lead to printing "(null)" virnames. - Mickey On Thu, Aug 2, 2018 at 8:45 AM, Kretschmer, Jens < kre

Re: [clamav-users] ScanOnAccess: ... (null) FOUND

2018-08-02 Thread Kretschmer, Jens
> How long as this been going on? Apparently it has been going on for a couple of days. I did not notice the "ScanOnAccess: ... (null) FOUND" messages, until I hid the "ScanOnAccess: Performing additional scanning on file ..." messages. The first occurrence was on July 23rd 13:00:08 with clamav

Re: [clamav-users] ScanOnAccess: ... (null) FOUND

2018-08-01 Thread Micah Snyder (micasnyd)
How long as this been going on? What is your database set? What version of ClamAV are you using? Are you using the VirusEvent hook? I've searched the code base high and low and can't find any reasonable excuse why the virus name would be "(null)". There is one reference, but it only uses "(null

[clamav-users] ScanOnAccess: ... (null) FOUND

2018-08-01 Thread Kretschmer, Jens
Hi, we have ScanOnAccess and OnAccessExtraScanning activated. When I open firefox I get a lot of messages written to /var/log/messages every couple of seconds: Aug 1 12:07:02 hostname1 clamd[4051]: ScanOnAccess: /home/user1/.cache/mozilla/firefox/0pnt0qc2.default/cache2/entries/3F5C8E984584F19