Re: [clamav-users] Heuristics.Broken.Media.JPEG.JFIFdupAppMarker

2021-04-19 Thread Micah Snyder (micasnyd) via clamav-users
prefer to be very cautious. -Micah > -Original Message- > From: clamav-users On Behalf Of > Pedro Guedes via clamav-users > Sent: Saturday, April 17, 2021 4:12 AM > To: ClamAV users ML > Cc: Pedro Guedes > Subject: Re: [clamav-users] > Heuristics.Broken.Med

Re: [clamav-users] Heuristics.Broken.Media.JPEG.JFIFdupAppMarker

2021-04-17 Thread Paul Kosinski via clamav-users
It's worse than that. Not only do almost all users ignore security (as do many organizations), it seems that every new piece or version of software or hardware *reduces* security. And this applies to some new protocols (remember WiFi's WEP debacle?) and some extensions to or uses of existing

Re: [clamav-users] Heuristics.Broken.Media.JPEG.JFIFdupAppMarker

2021-04-17 Thread Pedro Guedes via clamav-users
Hi again. Well, the source ... .. you known users most of the time have no idea what are doing. Seems a usual correspondent but, who knows. Since mail is responsible for 99% of malware and dirt and because users hate security, bad for day to day work the only solution is using clamav-milter

Re: [clamav-users] Heuristics.Broken.Media.JPEG.JFIFdupAppMarker

2021-04-17 Thread Pedro Guedes via clamav-users
Hi again. Well, the source ... .. you known users most of the time have no idea what are doing. Seems a usual correspondent but, who knows. Since mail is responsible for 99% of malware and dirt and because users hate security, bad for day to day work the only solution is using clamav-milter

Re: [clamav-users] Heuristics.Broken.Media.JPEG.JFIFdupAppMarker

2021-04-17 Thread G.W. Haywood via clamav-users
Hi there, On Sat, 17 Apr 2021, Pedro Guedes via clamav-users wrote: G.W. Haywood via clamav-users ... sábado, 17/04/2021 ... On Sat, 17 Apr 2021, Pedro Guedes via clamav-users wrote: What does Heuristics.Broken.Media.JPEG.JFIFdupAppMarker mean? It means that libclamav found something

Re: [clamav-users] Heuristics.Broken.Media.JPEG.JFIFdupAppMarker

2021-04-17 Thread Pedro Guedes via clamav-users
Hi Thanks for the answer. Yes, I did already look at the C code as something to do with jpeg format. So JFIFdupAppMarker is an attention to something being wrong? And yes I have AlertBrokenMedia yes in clamd.conf Well, I keep looking. I have ClamAV as a milter in sendmail.cf so this jpeg was in

Re: [clamav-users] Heuristics.Broken.Media.JPEG.JFIFdupAppMarker

2021-04-17 Thread G.W. Haywood via clamav-users
Hi there, On Sat, 17 Apr 2021, Pedro Guedes via clamav-users wrote: What does Heuristics.Broken.Media.JPEG.JFIFdupAppMarker mean? It means that libclamav found something questionable in data which it identified as of type JPEG. It's only reported by clamd if an option in the configuration

[clamav-users] Heuristics.Broken.Media.JPEG.JFIFdupAppMarker

2021-04-17 Thread Pedro Guedes via clamav-users
Hi guys What does Heuristics.Broken.Media.JPEG.JFIFdupAppMarker mean? Thanks Pedro ___ clamav-users mailing list clamav-users@lists.clamav.net https://lists.clamav.net/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: