Re: [clamav-users] ClamXav and Compressed Files

2015-04-18 Thread Jinwon Lee
I have a feeling that that is what ClamXav is la > On 27/03/2015, at 8:10 pm, Al Varnell wrote: > > > On Thu, Mar 26, 2015 at 11:17PM, Dennis Peterson wrote: >> >> Forgot to include dmg files are as described when mounted - else they are >> disk images (cpio). I don't know what the clam produc

Re: [clamav-users] ClamXav and Compressed Files

2015-04-06 Thread Al Varnell
I ran some tests after my last posting to answer just this question, but results were mixed so I was waiting for an authoritative answer. Since we haven’t heard yet, I’ll post my results. First I made my own .dmg with an eicar test file on-board. Running clamscan —debut on the file did not de

Re: [clamav-users] ClamXav and Compressed Files

2015-03-30 Thread Steven Morgan
Al, Could you please open a ticket at bugzilla.clamav.net and attach your EicarTest.dmg and also the command used to create it? We'll take a look at what's going on. Thanks, Steve On Sat, Mar 28, 2015 at 6:21 PM, Al Varnell wrote: > I sent this out last night, but it must have been rejected fo

Re: [clamav-users] ClamXav and Compressed Files

2015-03-30 Thread Joel Esler (jesler)
On Mar 29, 2015, at 7:57 AM, Dennis Peterson mailto:denni...@inetnw.com>> wrote: On 3/29/15 4:55 AM, TR Shaw wrote: On Mar 29, 2015, at 1:45 AM, Dennis Peterson mailto:denni...@inetnw.com>> wrote: On 3/28/15 10:43 PM, Jinwon Lee wrote: Thanks for that. I guess ‘Hash Value’ refers to the ClamA

Re: [clamav-users] ClamXav and Compressed Files

2015-03-29 Thread TR Shaw
On Mar 29, 2015, at 12:24 PM, G.W. Haywood wrote: > Hi there, > > On Sun, 29 Mar 2015, Denis Peterson wrote: > >> ... I meant dd, not cpio. But that won't work either ... > > Does kpartx help? I use it for mounting bits of assorted disc images, > mostly when I'm playing around with Windows V

Re: [clamav-users] ClamXav and Compressed Files

2015-03-29 Thread G.W. Haywood
Hi there, On Sun, 29 Mar 2015, Denis Peterson wrote: ... I meant dd, not cpio. But that won't work either ... Does kpartx help? I use it for mounting bits of assorted disc images, mostly when I'm playing around with Windows VMs. -- 73, Ged. ___ H

Re: [clamav-users] ClamXav and Compressed Files

2015-03-29 Thread Dennis Peterson
On 3/29/15 4:55 AM, TR Shaw wrote: On Mar 29, 2015, at 1:45 AM, Dennis Peterson wrote: On 3/28/15 10:43 PM, Jinwon Lee wrote: Thanks for that. I guess ‘Hash Value’ refers to the ClamAV identifying the .dmg as a known file that contains virus/es. Jinwon That was the case too for password

Re: [clamav-users] ClamXav and Compressed Files

2015-03-29 Thread TR Shaw
On Mar 29, 2015, at 1:45 AM, Dennis Peterson wrote: > On 3/28/15 10:43 PM, Jinwon Lee wrote: >> Thanks for that. I guess ‘Hash Value’ refers to the ClamAV identifying the >> .dmg as a known file that contains virus/es. >> >> Jinwon >> >> > That was the case too for password protected zip fi

Re: [clamav-users] ClamXav and Compressed Files

2015-03-29 Thread Dennis Peterson
On 3/29/15 12:08 AM, Al Varnell wrote: On Sat, Mar 28, 2015 at 09:50 PM, Dennis Peterson wrote: It should be possible to use cpio to extract the contents to a stream and feed that into the ClamAV engine OS X does include cpio but I have been unsuccessful in getting it to do anything with a .dm

Re: [clamav-users] ClamXav and Compressed Files

2015-03-29 Thread Al Varnell
On Sat, Mar 28, 2015 at 09:50 PM, Dennis Peterson wrote: > > It should be possible to use cpio to extract the contents to a stream and > feed that into the ClamAV engine OS X does include cpio but I have been unsuccessful in getting it to do anything with a .dmg. cpio -h tells me it’s "bsdcpi

Re: [clamav-users] ClamXav and Compressed Files

2015-03-28 Thread Jinwon Lee
Yes. It makes sense. > On 29/03/2015, at 6:45 pm, Dennis Peterson wrote: > > On 3/28/15 10:43 PM, Jinwon Lee wrote: >> Thanks for that. I guess ‘Hash Value’ refers to the ClamAV identifying the >> .dmg as a known file that contains virus/es. >> >> Jinwon >> >> > That was the case too for p

Re: [clamav-users] ClamXav and Compressed Files

2015-03-28 Thread Dennis Peterson
On 3/28/15 10:43 PM, Jinwon Lee wrote: Thanks for that. I guess ‘Hash Value’ refers to the ClamAV identifying the .dmg as a known file that contains virus/es. Jinwon That was the case too for password protected zip files. If you can't burst the contents you condemn the wrapper. dp ___

Re: [clamav-users] ClamXav and Compressed Files

2015-03-28 Thread Jinwon Lee
Thanks for that. I guess ‘Hash Value’ refers to the ClamAV identifying the .dmg as a known file that contains virus/es. Jinwon > On 29/03/2015, at 2:48 pm, Al Varnell wrote: > > > On Sat, Mar 28, 2015 at 06:35 PM, Jinwon Lee wrote: >> >> Thanks for the responses. I am not a computer expert

Re: [clamav-users] ClamXav and Compressed Files

2015-03-28 Thread Dennis Peterson
On 3/28/15 6:48 PM, Al Varnell wrote: On Sat, Mar 28, 2015 at 06:35 PM, Jinwon Lee wrote: Thanks for the responses. I am not a computer expert so I might not fully understand all that has been discussed but it sounds like ClamXav extracts(decompose?) archive files like zip, RAR and then scan.

Re: [clamav-users] ClamXav and Compressed Files

2015-03-28 Thread Al Varnell
On Sat, Mar 28, 2015 at 06:35 PM, Jinwon Lee wrote: > > Thanks for the responses. I am not a computer expert so I might not fully > understand > all that has been discussed but it sounds like ClamXav extracts(decompose?) > archive files like zip, RAR and then scan. But with .dmg > file it is u

Re: [clamav-users] ClamXav and Compressed Files

2015-03-28 Thread Jinwon Lee
Thanks for the responses. I am not a computer expert so I might not fully understand all that has been discussed but it sounds like ClamXav extracts(decompose?) archive files like zip, RAR and then scan. But with .dmg file it is uncertain that it does the same thing. It sounds like ClamXav is

Re: [clamav-users] ClamXav and Compressed Files

2015-03-28 Thread Al Varnell
I sent this out last night, but it must have been rejected for length or something, so I’ll remove the lengthy results of the third test and quotes to see if that works. -Al- == I ran some tests after my last posting to answer just this question, but results were mixed so I was wait

Re: [clamav-users] ClamXav and Compressed Files

2015-03-27 Thread Dennis Peterson
Are the image files scanned as a single binary or are they burst like other archives into discreet files and then scanned? I guess the question really is against what would signatures be written when dealing with disk images. dp On 3/27/15 4:45 AM, Joel Esler (jesler) wrote: Dmg scanning was

Re: [clamav-users] ClamXav and Compressed Files

2015-03-27 Thread Joel Esler (jesler)
Dmg scanning was added a couple of versions back. -- Joel Esler Sent from my iPhone On Mar 27, 2015, at 3:11 AM, Al Varnell mailto:alvarn...@mac.com>> wrote: On Thu, Mar 26, 2015 at 11:17PM, Dennis Peterson wrote: Forgot to include dmg files are as described when mounted - else they are disk

Re: [clamav-users] ClamXav and Compressed Files

2015-03-27 Thread Al Varnell
On Thu, Mar 26, 2015 at 11:17PM, Dennis Peterson wrote: > > Forgot to include dmg files are as described when mounted - else they are > disk images (cpio). I don't know what the clam product does with unmounted > disk images. > > dp That’s correct. There have been a handful (nine) .dmg hash

Re: [clamav-users] ClamXav and Compressed Files

2015-03-26 Thread Dennis Peterson
Forgot to include dmg files are as described when mounted - else they are disk images (cpio). I don't know what the clam product does with unmounted disk images. dp On 3/26/15 11:09 PM, Dennis Peterson wrote: The dmg files are logical structures. They are comprised of Unix directories and file

Re: [clamav-users] ClamXav and Compressed Files

2015-03-26 Thread Al Varnell
For fastest, most efficient answers to questions such as these, visit the ClamXav Forum . This mail-list is for users of the ClamAV® scan engine on all platforms. -Al- On Thu, Mar 26, 2015 at 10:44PM, Jinwon Lee wrote: > > Hi > > I am a new member. > > I am a Mac

Re: [clamav-users] ClamXav and Compressed Files

2015-03-26 Thread Dennis Peterson
The dmg files are logical structures. They are comprised of Unix directories and files and clam doesn't need to treat them differently than any other directory tree. if you have support compiled in for zip, RAR, TAR, and several other archiving formats it should decompose them and scan each of t

[clamav-users] ClamXav and Compressed Files

2015-03-26 Thread Jinwon Lee
Hi I am a new member. I am a Mac user and so I use ClamXav to scan my files. My question is: ‘Does ClamXav scan what’s inside Compressed files like .RAR, .zip…. and Package files like .dmg?’Because I feel ClamXav takes considerably longer to scan the extracted file/s compared to the co

[clamav-users] ClamXav

2011-03-29 Thread Al Varnell
Why is Mac OS X's ClamXav no longer listed on the Third Party Packages page? Sent from Janet's iPad -Al- -- Al Varnell ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] ClamXav will not open

2008-09-29 Thread fchan
Please this support forum for ClamXav: http://www.markallan.co.uk/BB/ I use clamXav for awhile now and I never saw this error before. My guess you no Developer tools on your system which can give you this type error since clamXav needs this to compile clamav. Developer Tools with Xcode which c

Re: [Clamav-users] ClamXav will not open

2008-09-28 Thread Stephen Gran
On Sun, Sep 28, 2008 at 05:15:00PM +0100, [EMAIL PROTECTED] said: > Hello, > > I cannot get ClamXav to work anymore > This is what I get when I try to open the app > Can someone advise what I have done wrong or what is missing > > Last login: Sun Sep 28 17:09:02 on ttyp2 > /Applications/Utilities

[Clamav-users] ClamXav will not open

2008-09-28 Thread malcolm . rowe
Hello, I cannot get ClamXav to work anymore This is what I get when I try to open the app Can someone advise what I have done wrong or what is missing Last login: Sun Sep 28 17:09:02 on ttyp2 /Applications/Utilities/ClamXav/ClamXav.app/Contents/MacOS/ClamXav; exit Welcome to Darwin! g5:~ MRowe$ /