Re: [clamav-users] Scan very slow

> On Apr 5, 2019, at 09:13, Mark Allan via clamav-users > wrote: > > Also CC'ing Micah directly as the mailing list would appear to be offline (at > least lists.clamav.net isn't responding to http requests anyway May want to try https. smime.p7s Description: S/MIME cryptographic signature

Re: [clamav-users] Malformed pattern daily.ldb version 25410

I can reproduce the Malformed pattern problem with a file with just the one signature: Xls.Downloader.Powload-6923120-0 which is an even longer one . This is 4 signatures before Doc.Trojan.Agent-6923124-0 in daily.ldb sigtool reports the wrong line numbering eg with a file with just

Re: [clamav-users] Scan very slow

Also CC'ing Micah directly as the mailing list would appear to be offline (at least lists.clamav.net isn't responding to http requests anyway) It looks like scan times have gone through the roof. As Oya said, they're still considerably higher than they were a couple of months ago, but today's

[clamav-users] Malformed pattern daily.ldb version 25410

sigtool --list=/path/daily.cld is returning: ERROR: listdb: Error listing database /tmp/clamav-0348baa027819612194d4bd1d7aed9d0.tmp/daily.ldb ERROR: listdb: Malformed pattern line 52912 (file /tmp/clamav-0348baa027819612194d4bd1d7aed9d0.tmp/daily.ldb) extracting daily.ldb with sigtool

Re: [clamav-users] Updating multiple servers

On 4/4/2019 9:01 PM, Tim Hawkins wrote: > We have a large number of services running inside kubernetes that need to have > access to clamav,  given the sheer number, i dont want to have to run > freshclam > process on each virtual machine (container), due to the managemeht and > monitoring >

Re: [clamav-users] Malformed pattern daily.ldb version 25410

Hello, sigtool --find-sigs Doc.Trojan.Agent-6923124-0 | sigtool --decode-sigs I don't understand why this signature is so long, and why it is based on always changing variables. -- Cordialement / Best regards, Arnaud Jacques Gérant de SecuriteInfo.com Téléphone : +33-(0)3.44.39.76.46

Re: [clamav-users] Malformed pattern daily.ldb version 25410

I can recreate that same issue with daily cvd 25410, using ClamAV 0.100.1. That was the first 0.100.X I had handy to do a quick test. The problem is something specific to sigtool and only the list-sigs feature. It does not affect clamscan or clamd, and does not affect the --find-sigs option of

Re: [clamav-users] Scan very slow

Hi Mark, Sorry about the delay in responding. I hadn’t looked at my clamav-users filter this morning. Just investigating now. Will respond when I know more. -Micah From: Mark Allan Date: Friday, April 5, 2019 at 9:12 AM To: ClamAV users ML , "Micah Snyder (micasnyd)" Subject: Re:

Re: [clamav-users] Clamav for educational institutions ?

That’s the content on the website. ClamAV, the software, is governed by the GPLv2 and other associates licenses as indicated by the LICENSE file contained therein. Sent from my  iPhone > On Apr 5, 2019, at 17:18, J.R. via clamav-users > wrote: > > At the bottom of the page on the

Re: [clamav-users] Clamav for educational institutions ?

I just doubled checked, but I don't see a LICENSE file in the clamav-0.101.2.tar.gz archive??? EDIT - There is the GPLv2 contained in the COPYING file. I just realized each of those files gives the licence for each part of ClamAV. Probably the most notable is the unrar licence, which if I recall

Re: [clamav-users] Malformed pattern daily.ldb version 25410

This appears to be a different problem than the sigtool --list problem on daily I think it may be a problem with integrity of downloaded file and not an incompatibility of that file with clamav version or something wrong with a sig in the file. Testing the main.cvd file may be good first step.

Re: [clamav-users] [External] Re: Scan very slow

Hi Micah Does clamav partition the database so that signatures that are mainly associated with email scanning can be dropped out for folks only needing filesystems scans, none of our systems use email, and we dont make use of the mailer extension. Having to load all the email focused

Re: [clamav-users] Clamav for educational institutions ?

Correct. Which is why we recommend people compile from source for full functionality. Sent from my  iPhone > On Apr 5, 2019, at 20:12, Scott Kitterman via clamav-users > wrote: > > The unrar stuff is still free to use. > > Due to modification restrictions Debian splits it off into the

[clamav-users] Clamav for educational institutions ?

Hi Guys, Does anyone knows if the usage of the clamav for linux is free for educational institutions or does it have to be a paid one. I tried to find it on internet but couldn't find it. Tim, ___ clamav-users mailing list

Re: [clamav-users] Clamav for educational institutions ?

On a Debian system with non-free enabled, it only takes "apt install libclamunrar9" to get the full unrar capability. It's still a better solution for Debian users to use the packaged version. There are a few exceptions (for example, getting 0.101 and libclamav9 transitioned into our stable

Re: [clamav-users] Clamav for educational institutions ?

Sorry if I implied otherwise. I meant Fedora and their difficulties with unrar. I am a big supporter of your Scott, this you know. Sent from my  iPad > On Apr 5, 2019, at 20:53, Scott Kitterman via clamav-users > wrote: > > On a Debian system with non-free enabled, it only takes "apt

[clamav-users] Radically Different Scan Times

MacOS 10.14.4 - 2017 iMac ClamAV 0.101.1 (Updated today: ClamAV 0.101.2/25410/Fri Apr 5 14:58:26 2019) Yesterday’s results: --- SCAN SUMMARY --- Known viruses: 6101439 Engine version: 0.101.1 Scanned directories: 227591 Scanned files: 594694 Infected files: 1 Total errors: 35

Re: [clamav-users] Radically Different Scan Times

Addressed earlier today: > -Al- > On Apr 5, 2019, at 20:18, Michael Newman via clamav-users > wrote: > > MacOS 10.14.4 - 2017 iMac > ClamAV 0.101.1