Hello!
When clamav check mail http://starcat.dp.ua/tmp/clamav/1EKLBH-0002g4-Ek.eml.bz2
clamd enters into an endless loop and consumes 100% CPU time. Or it just
silently dies.
For example:
$ ps ax|fgrep clamd
59921 ?? Ss 0:01.33 /usr/local/sbin/clamd
$ clamdscan 1EKLBH-0002g4-Ek.eml
Äîáðûé äåíü!
When clamav check mail
http://starcat.dp.ua/tmp/clamav/1EKLBH-0002g4-Ek.eml.bz2
clamd enters into an endless loop and consumes 100% CPU time. Or it just
silently dies.
$ clamscan -v 1EKLBH-0002g4-Ek.eml.bz2
Scanning 1EKLBH-0002g4-Ek.eml.bz2
1EKLBH-0002g4-Ek.eml.bz2: OK
Äîáðûé äåíü!
$ clamscan -v 1EKLBH-0002g4-Ek.eml.bz2
Sorry i used clamscan instead of clamdscan. However works with clamd too.
in my case - after clamdscan process clamd silently dies:
$ ps ax|fgrep clamd
59921 ?? Ss 0:01.33 /usr/local/sbin/clamd
$ clamdscan 1EKLBH-0002g4-Ek.eml
When i try submit sample of virus via http://cgi.clamav.net/sendvirus.cgi, i
get report:
---
Result:
This virus is already recognized by ClamAV 0.83/792/Tue Mar 29 00:10:20 2005 as
Broken.Executable . Be careful when submitting samples and remember to run
freshclam!
---
But
Hello Tomasz,
What i can do to add this virus to Clamav base?
Submit the sample as false positive and I will look into it.
done
--
Best regards,
Ruslanmailto:[EMAIL PROTECTED]
___