Re: [clamav-users] Can't allocate memory ERROR

2021-01-07 Thread Micah Snyder (micasnyd) via clamav-users
Some users have reported an issue where the file size limits aren't working for files larger than 2GB. If your MaxFileSize is default or is otherwise set less than 2GB and you're still seeing this error it may be the same issue. See: - https://bugzilla.clamav.net/show_bug.cgi?id=12374 -

Re: [clamav-users] Can't allocate memory ERROR

2021-01-07 Thread G.W. Haywood via clamav-users
Hi there, On Thu, 7 Jan 2021, Kevin Faber via clamav-users wrote: We are using c-icap to interface with ClamAV 0.103.0 and seeing the following error in the clamd.scan log file when scanning large files. The RHEL host has 8gb of ram and is attempting to scan a 9gb file. Are there any

Re: [clamav-users] Question about Urlhaus.Malware.452652-9766253-0

2021-01-07 Thread Orion Poplawski
Lilia - Virus database is updated daily and updated last night. Still seeing one this morning: Virus Urlhaus.Malware.364328-9787819-0:

[clamav-users] Can't allocate memory ERROR

2021-01-07 Thread Kevin Faber via clamav-users
Hello, We are using c-icap to interface with ClamAV 0.103.0 and seeing the following error in the clamd.scan log file when scanning large files. The RHEL host has 8gb of ram and is attempting to scan a 9gb file. Are there any configuration changes that can be made to fix this or do we just

Re: [clamav-users] Question about Urlhaus.Malware.452652-9766253-0

2021-01-07 Thread Lilia Gonzalez Medina
Hi Orion! Those NBD signatures were updated at the beginning of the week and should not FP anymore. Please update your ClamAV db and let us know if the issue persists. Best regards, Lilia Gonzalez Malware Research Team Cisco Talos On Wed, Jan 6, 2021 at 4:59 PM Orion Poplawski wrote: >

Re: [clamav-users] Help please

2021-01-07 Thread Mark Burzenski via clamav-users
Fantastic! I was hoping there was an easier way than trying to learn all the manual steps and still get my work done. Will try it ASAP THANK YOU !! On Thu, Jan 7, 2021 at 7:44 AM Matus UHLAR - fantomas wrote: > On 05.01.21 22:33, Richard Graham via clamav-users wrote: > >You also may want to

Re: [clamav-users] How can we consume .ldb files in ClamAV Ubuntu?

2021-01-07 Thread Luca Sironi via clamav-users
Hello, thank you for your answer. I understand your point, i guess i should simply trust the project repository. I was asked to check whether i could integrate informations coming from https://github.com/fireeye/red_team_tool_countermeasures/blob/master/all-clam.ldb with a pre existing clamav

Re: [clamav-users] How can we consume .ldb files in ClamAV Ubuntu?

2021-01-07 Thread G.W. Haywood via clamav-users
Hi there, On Wed, 6 Jan 2021, Luca Sironi via clamav-users wrote: How can i crosscheck a .ldb file like the one published from Red Eye with the content of the cvd files i download from clamav? Please define "crosscheck". If you mean that you want to check that two different types of

Re: [clamav-users] Help please

2021-01-07 Thread Matus UHLAR - fantomas
On 05.01.21 22:33, Richard Graham via clamav-users wrote: You also may want to install it from the Ubuntu repo. https://help.ubuntu.com/community/ClamAV https://packages.ubuntu.com/focal/clamav I recommend installing clamav using ubuntu packages, especially when you don't know hot to

Re: [clamav-users] Terminate clamscan after specific time

2021-01-07 Thread Andrew C Aitchison via clamav-users
On Thu, 7 Jan 2021, G.W. Haywood via clamav-users wrote: Hi there, On Wed, 6 Jan 2021, Zvi Kave via clamav-users wrote: Can you send link to your posts about root directory scan? https://marc.info/?l=clamav-users=1=2 The footer of every message from the list has a link

Re: [clamav-users] Terminate clamscan after specific time

2021-01-07 Thread G.W. Haywood via clamav-users
Hi there, On Wed, 6 Jan 2021, Zvi Kave via clamav-users wrote: Can you send link to your posts about root directory scan? https://marc.info/?l=clamav-users=1=2 -- 73, Ged. ___ clamav-users mailing list clamav-users@lists.clamav.net

[clamav-users] Regarding CMake build System in ClamAV project

2021-01-07 Thread Satish Kumar via clamav-users
Dear ClamAV Team, I would like to know the detailed steps to convert the auto-tool project to a CMake project. As per the latest version of ClamAV, I have come to know that auto-tools is replaced by CMake build systems.actually, I am looking for a good tutorial/documentationĀ  which helps meĀ 

Re: [clamav-users] Terminate clamscan after specific time

2021-01-07 Thread Pierre Dehaen
Right, that's why I suggested to make a full scan daily/weekly. Scanning is not bulletproof neither, as the virus signature comes by definition after the virus creation. If you have some trust in your OS provider then additional basic tools like rpm -qV, dpkg -V or debsums (even if not