Re: [clamav-users] clamav

2019-11-14 Thread G.W. Haywood via clamav-users
Hi there, On Thu, 14 Nov 2019, Paul Kosinski via clamav-users wrote: ClamAV also can't deal with files bigger than 4 GB. This prevents it from scanning some videos, DVD-size ISOs, etc. The usefulness of scanning such files is debatable, but you can split large files into pieces and scan the

Re: [clamav-users] clamav

2019-11-14 Thread Paul Kosinski via clamav-users
ClamAV also can't deal with files bigger than 4 GB. This prevents it from scanning some videos, DVD-size ISOs, etc. This is a shame, since Linux (and I presume most other modern OSes) have been able to deal with "large" files (with 64-bit lengths and offsets) for years now. On Thu, 14 Nov 2019

Re: [clamav-users] Html.Malware.Agent-7380889-0 false positive on Apache files?

2019-11-14 Thread Christina Qian
Thanks, Ged. That's a great idea. Christina Qian On Thu, Nov 14, 2019 at 9:55 AM Christina Qian wrote: > Got it. Thank you very much for your help. I will just add the file to > exclusive path then. > > Christina Qian > > > > > On Thu, Nov 14, 2019 at 6:34 AM G.W. Haywood via clamav-users <

Re: [clamav-users] Html.Malware.Agent-7380889-0 false positive on Apache files?

2019-11-14 Thread Christina Qian
Got it. Thank you very much for your help. I will just add the file to exclusive path then. Christina Qian On Thu, Nov 14, 2019 at 6:34 AM G.W. Haywood via clamav-users < clamav-users@lists.clamav.net> wrote: > Hi there, > > On Wed, 13 Nov 2019, Christina Qian wrote: > > > Thank you very

Re: [clamav-users] Html.Malware.Agent-7380889-0 false positive on Apache files?

2019-11-14 Thread G.W. Haywood via clamav-users
Hi there, On Wed, 13 Nov 2019, Christina Qian wrote: Thank you very much for your reply. I just realized that I was on the wrong thread though. I meant to ask the reason for the alarms below, or at least to confirm it's a false alarm, so I can just exclude the files. Do you or anybody on the

Re: [clamav-users] Use of clamav-daemon.socket? (0.102.0)

2019-11-14 Thread Maarten Broekman via clamav-users
For my install, I had multiple instances of clamd running (in order to have different databases loaded for different purposes) and the systemd sockets were throwing errors about other processes using them, which in turn caused the additional instances of clamd service units to fail. However, the

Re: [clamav-users] clamav

2019-11-14 Thread G.W. Haywood via clamav-users
Hi there, On Thu, 14 Nov 2019, ALMOKBEL, RAWAN wrote: Good Day! Well it's been raining here for weeks, but good day to you too! :) Does clamav scan embedded virus and malicious inside files ? If you mean archive files the question has already been answered well, but I would add that it

Re: [clamav-users] Problem running virus scanner: code=999, category=cannot-execute, action=tempfail

2019-11-14 Thread Andrew Watkins via clamav-users
On 11/13/19 10:39 AM, Andrew Watkins via clamav-users wrote: On 11/13/19 10:33 AM, G.W. Haywood via clamav-users wrote: Perhaps clamd is reloading its databases when you see this. Depending on configuration and the host performance it can take anywhere between a few tens of seconds and

Re: [clamav-users] clamav

2019-11-14 Thread Al Varnell via clamav-users
That's a pretty broad question, but in general, the answer is yes, as long as ClamAV can recognize the format of the file. That does include many archives, but I believe there are a few that cannot be expanded. There are also some size restrictions on how much of a large file will be scanned

Re: [clamav-users] clamav

2019-11-14 Thread Matus UHLAR - fantomas
On 14.11.19 10:49, ALMOKBEL, RAWAN wrote: I have a question regarding clamav scan, Does clamav scan embedded virus and malicious inside files ? clamav supports scaning file archives and files inside them. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish

Re: [clamav-users] SelfCheck: Database modification detected. Forcing reload.

2019-11-14 Thread Matus UHLAR - fantomas
On 13.11.19 21:58, Orion Poplawski wrote: freshclam-sleep is Fedora's method of automatically updating the signatures. If you want to update it your way, feel free to disable it. even something other than standard freshclam daemon does? Or is it just for case freshclam does not run? BTW -